The Indian Cybercrime Coordination Centre (I4C) under the Ministry of Home Affairs (MHA) has issued a warning to government employees about a new WhatsApp scam that falsely claims to calculate revised salaries after the implementation of the 8th Pay Commission.
In a post shared under its Cyber Dost initiative on X, I4C said government employees are receiving messages asking them to download an APK file to check their revised salaries. However, officials warned that once the file is downloaded, cybercriminals gain access to the user’s phone and siphon money from bank accounts.
The 8th Pay Commission has been a subject of keen interest among employees and pensioners awaiting a possible pay revision. Taking advantage of this anticipation, fraudsters have circulated links labelled as “Salary Calculator” or similar names, promising early and accurate details of revised pay scales.
Reports indicate that such fraudulent links have also been received by government employees in several cities across Jharkhand. The messages typically contain an APK file, which, when installed, allows attackers to access personal information, banking details and one-time passwords (OTPs). Using this data, cybercriminals can withdraw money from victims’ accounts.
The I4C has urged employees not to click on links containing APK files or download files from unknown or unverified sources. It emphasised that the government does not send salary-related files via WhatsApp and advised employees to rely only on official government portals for information regarding the 8th Pay Commission, salaries or pensions.
Citizens have been asked to report suspicious messages to the national cybercrime helpline or the nearest police station and to block and report the sender’s number.
Jharkhand-based cyber expert Rahul Kumar cautioned that APK files from unverified sources pose serious risks. He said cybercriminals often use fake apps and malicious files to lure victims. Once installed, such applications can capture sensitive data, including OTPs and even screen activity. In some cases, fraudsters allegedly delete bank alert messages, delaying victims’ awareness of unauthorised transactions.
Authorities have reiterated that vigilance and avoiding downloads from unknown sources remain the most effective safeguards against such cyber fraud.
Also read: 39 lakh kg cannabis seized since 2020: MHA
Follow us
