Cyber fraudsters have devised a new tactic to target unsuspecting users, with a recent case in Hyderabad exposing how a seemingly harmless wedding invitation led to a major financial loss for an IT employee.
According to the city’s Cyber Crime Police, the victim received a link disguised as a wedding invitation. The message prompted the recipient to download an APK (Android Package Kit) file to view the invite. Trusting the source, the victim downloaded and installed the file— only to have their phone compromised soon after. Hackers reportedly gained access to sensitive data and siphoned off lakhs of rupees from the victim’s bank accounts.
Following the complaint, the police have registered a case and launched an investigation. Officials noted that such incidents are on the rise, with fraudsters increasingly using APK files as a tool to infiltrate devices.
Authorities explained that these malicious links are commonly circulated via WhatsApp, SMS, and social media platforms. In many instances, they appear to come from known contacts, creating a false sense of security. Once clicked, the APK file is automatically downloaded and installed, allowing malware to access personal data, including contacts, photos, and messages. This information is then exploited to carry out financial fraud.
Cyber Crime officials have cautioned the public to remain vigilant. They emphasised that genuine invitations are typically shared in formats such as PDF or JPG, and any request to download an APK file should be treated with suspicion. Users are also advised to verify with the sender before opening any unexpected files, even if they appear to come from friends or relatives.
Police have further urged people to download applications only from trusted platforms like the Google Play Store or the Apple App Store, and to regularly update their device security with antivirus software.
In cases where an APK file has already been downloaded, officials recommend immediately disconnecting the device from the internet, uninstalling the suspicious application, and changing all passwords and banking credentials. Victims are also encouraged to report such incidents to the National Cyber Crime Portal or by calling the helpline number 1930.
Speaking on the matter, Arvind Babu, the DCP of Hyderabad Cyber Crime wing, warned, “Be careful about suspicious links that come to your phone. People are downloading APK files disguised as wedding invites or offers for expensive free gifts and getting hacked. Learn how to identify the danger hidden behind these links. Do not respond to messages and links from unknown numbers.”
Also read: T’gana approves mid-day meals for junior colleges