Fake Android System Update or Security Patch Pop-up by SMS

How it looks by SMS, the red flags and what to do.

A text message is the cheapest way for a scammer to reach thousands of phones at once, and the sender name can look like a bank, a courier or a government office. Fake Android System Update or Security Patch Pop-up is one of the ways this shows up: A pop-up or message says your phone needs an urgent system update and offers a download. The file is a malicious app, not an update.

What fake android system update or security patch pop-up looks like by SMS

• Several near-identical messages arriving together from different senders.
• A sender name that resembles a bank, courier, tax or utility, or an ordinary mobile number.
• A very short message with a deadline such as "today" or "within 24 hours".

The scammer uses an alert that copies the look of a system notice, with a progress bar and a warning about a 'critical vulnerability'. It may appear in the browser, in an ad or in a text with a link. The file is downloaded and the phone asks to allow installs from this source. The wording on the prompt is easy to miss, and many people tap 'Allow' to finish what looks like routine maintenance.

Red flags to check on the text message

• A web page or message offers a system update as a file to download.
• The file ends in .apk or comes from a link in an unexpected message.
• You are asked to allow installs from this source.
• The 'update' app asks for SMS, accessibility or device admin permissions.
• It tells you to install an app from a link instead of the official store.
• The link domain is not the one you type yourself for that organisation.

What to do

1. Check for updates only in Settings, under System or Software update.
2. Do not download or install update files from links or chat messages.
3. If you installed one, switch on airplane mode, uninstall it and check device admin and accessibility lists.
4. Open the official app or type the official website yourself to see if there is any real notice.
5. Paste the text into a scam checker (Safeavio Sentinel can check it) before you do anything else.
6. Report the sender on the Sanchar Saathi portal (Chakshu facility) and block the number.

You can report suspicious SMS and calls on the Sanchar Saathi portal (Chakshu facility) of the Department of Telecommunications.

If money or a code is already gone

1. If money moved, call 1930 and report at cybercrime.gov.in at once.
2. Call your bank on the number on your card and ask them to block cards and UPI.
3. Change your UPI PIN and passwords from a safe device after removing the app.
4. Consider a factory reset after backing up your photos.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Phone scan in Safeavio Sentinel reviews installed apps, requested permissions and risky settings like unknown sources, and flags apps outside a store and apps that look like copies of other apps, explaining what looks wrong and how to fix it. Link check tests a download link before you open it. Safeavio does not read your messages by itself and does not install system updates for you.

Full guide: Fake Android System Update or Security Patch Pop-up: how it works, signs and what to do. Other channels: fake app, social media, WhatsApp.

Questions