Fake Android System Update or Security Patch Pop-up on WhatsApp

How it looks on WhatsApp, the red flags and what to do.

WhatsApp scams arrive from numbers you do not know, from a friend whose account was taken over, or from a group you were added to without asking. Fake Android System Update or Security Patch Pop-up is one of the ways this shows up: A pop-up or message says your phone needs an urgent system update and offers a download. The file is a malicious app, not an update.

What fake android system update or security patch pop-up looks like on WhatsApp

• A PDF, APK or image that must be opened to "see the details".
• A link that pretends to be a wa.me, courier or bank page.
• A message from an unknown number, often with a stock photo of a smiling person.

The scammer uses an alert that copies the look of a system notice, with a progress bar and a warning about a 'critical vulnerability'. It may appear in the browser, in an ad or in a text with a link. The file is downloaded and the phone asks to allow installs from this source. The wording on the prompt is easy to miss, and many people tap 'Allow' to finish what looks like routine maintenance.

Red flags to check on the WhatsApp message

• A web page or message offers a system update as a file to download.
• The file ends in .apk or comes from a link in an unexpected message.
• You are asked to allow installs from this source.
• The 'update' app asks for SMS, accessibility or device admin permissions.
• Someone asks for the six-digit code WhatsApp sent you by SMS.
• A new number says it is someone you know and asks for money; call the real person on the old number first.

What to do

1. Check for updates only in Settings, under System or Software update.
2. Do not download or install update files from links or chat messages.
3. If you installed one, switch on airplane mode, uninstall it and check device admin and accessibility lists.
4. Do not click links or open files. Do not send money or codes.
5. Open the chat, tap the contact name and choose Block and report.
6. If it was a "friend", call them on the number you already have and ask.

Inside WhatsApp use Block and report; for numbers that call or text you, the Sanchar Saathi portal (Chakshu facility) also takes complaints.

If money or a code is already gone

1. If money moved, call 1930 and report at cybercrime.gov.in at once.
2. Call your bank on the number on your card and ask them to block cards and UPI.
3. Change your UPI PIN and passwords from a safe device after removing the app.
4. Consider a factory reset after backing up your photos.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Phone scan in Safeavio Sentinel reviews installed apps, requested permissions and risky settings like unknown sources, and flags apps outside a store and apps that look like copies of other apps, explaining what looks wrong and how to fix it. Link check tests a download link before you open it. Safeavio does not read your messages by itself and does not install system updates for you.

Full guide: Fake Android System Update or Security Patch Pop-up: how it works, signs and what to do. Other channels: SMS, fake app, social media.

Questions