Thiruvananthapuram: A dangerous cyber fraud linked to the government’s farmer welfare scheme Pradhan Mantri Kisan Samman Nidhi has come to light, where fake links and APK files are being used to hack mobile phones and siphon money from users’ bank accounts. Authorities in Kerala have issued a strong alert, warning that a large number of people are being targeted through social media and messaging platforms.
According to officials, scammers are circulating files named “PM KISAN.apk,” claiming that users can register for the scheme or instantly receive ₹6,000 in financial assistance. However, the moment a user downloads and installs this file, a malicious application is secretly deployed on the device without their knowledge.
FCRF Returns With CDPO, Its Premier Data Protection Certification for Privacy Professionals
How the APK Trap Works
An APK (Android Package Kit) is a file format used to install applications on Android devices. While legitimate APKs are safe, those from unknown sources can pose serious risks.
In this scam, the malicious file, once installed, gains multiple permissions—such as access to messages, calls, banking apps, and even screen recording. This enables cybercriminals to capture sensitive data including OTPs, passwords, and financial details.
Experts say the attack is based on remote access techniques, allowing fraudsters to take complete control of the victim’s device and carry out unauthorized transactions without detection.
Beyond PM-KISAN
Authorities have clarified that this scam is not restricted to PM-KISAN alone. Similar APK-based frauds are being circulated under the guise of electricity bill payments, KYC updates, gas booking, and traffic fines.
These links are typically shared via WhatsApp, Telegram, or email, often accompanied by urgent messages such as “your account will be blocked,” “update immediately,” or “last chance to claim government benefits,” pushing users to act quickly without verification.
The PM-KISAN scheme provides ₹6,000 annually to millions of farmers across India in three installments directly credited to their bank accounts. Cybercriminals are exploiting the scheme’s popularity to mislead users.
Experts emphasize that registration is only possible through the official portal pmkisan.gov.in, and any link or app claiming otherwise should be treated as fraudulent.
Expert Warning
Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said, “Such APK-based attacks are rooted in social engineering. Fraudsters exploit the credibility of government schemes to trap users. Once the file is downloaded, the entire device and banking access can fall into their control.”
Cybersecurity organisation Future Crime Research Foundation has also warned that malware attacks using government scheme branding have seen a sharp rise in recent years. According to the organisation, these malicious apps not only steal data but can also convert infected devices into bots, spreading the attack further.
Experts further advise users to download apps only from trusted platforms like Google Play Store and Apple App Store.
Safety Measures
Authorities and experts have outlined key precautions:
- Do not download APK files or click on links from unknown sources.
- Use only official websites and verified applications.
- Keep “Install from Unknown Sources” disabled on your phone.
- Never share OTPs or banking credentials with anyone.
- Immediately report suspicious activity to your bank or cyber helpline.
About the author – Rehan Khan is a law student and legal journalist with a keen interest in cybercrime, digital fraud, and emerging technology laws. He writes on the intersection of law, cybersecurity, and online safety, focusing on developments that impact individuals and institutions in India.
