Three residents of Jhansi have lost a combined ₹26.60 lakh in separate cyber fraud incidents involving a fake investment scheme, a fraudulent trading application advertised on YouTube, and a malicious APK file disguised as a service slip for a gas connection. Uttar Pradesh Police are investigating all three cases, which together illustrate how fraudsters are combining social engineering, spoofed platforms and malware to target victims across age groups and professions.
A Familiar Script: Trust, Then Trap
In the first case, Arun Singh Sengar of Badagaon alleged that a woman identifying herself as Priya Sharma contacted him by phone and persuaded him to invest through a mobile application promising high returns. Over the course of May, Arun transferred ₹16,87,350 from his HDFC Bank account. When he tried to withdraw his supposed profits, the woman allegedly demanded further deposits; after he refused, the app logged him out and her number went unreachable. He has filed an FIR at Nawabad Police Station.
A similar pattern played out for Rakesh Kumar Verma of Green Home, Nawabad, who began investing after seeing an online advertisement for the “BOB Capital Online” app on YouTube. Between July 30 and August 21, he transferred ₹8,82,964 across multiple transactions. The app showed his investment steadily growing, a common tactic used to build confidence before victims attempt to withdraw and are blocked. Rakesh has lodged a complaint on the National Cyber Crime Reporting Portal.
When a ₹20 Payment Opens the Door
The third case followed a different route. Dilshad Ahmad of Nawabad was searching online for a gas service provider’s customer care number when a fraudster posing as a support executive sent him an APK file over WhatsApp, claiming it was needed to generate a service slip. After Dilshad made a token payment of ₹20 through Google Pay, the file allegedly compromised his phone, allowing the fraudsters to withdraw ₹90,000 from his bank account. He too has reported the matter through the national portal.
Such APK-based frauds have become increasingly common across Uttar Pradesh, with cyber cells in Lucknow, Kanpur and Rampur reporting comparable cases in recent months, several triggered by nothing more than a search for a customer care number or a nominal payment of a few rupees. Investigators note that once installed, these malicious files can silently monitor calls, messages and banking credentials, often going undetected for weeks.
Experts Flag a Widening Pattern
Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said investment frauds increasingly rely on fake trading platforms, malicious applications, APK files and social engineering to deceive victims. He advised the public to verify the authenticity of any investment platform before transferring money and to avoid downloading APK files or applications received through WhatsApp, SMS or other unknown sources.
Cyber security experts further recommend checking whether an investment adviser is registered with the Securities and Exchange Board of India (SEBI), staying wary of social media offers promising guaranteed or unusually high returns, and never sharing OTPs, UPI PINs, CVV numbers or internet banking credentials with anyone. Applications should be downloaded only from official app stores, and unfamiliar investment platforms should first be tested with small transactions. Any demand for additional taxes or processing fees before a withdrawal is permitted should be treated as a red flag.
Police said all three cases are being actively investigated, with officers examining digital evidence, banking records, mobile numbers and financial transaction trails to identify those responsible. The allegations will ultimately be determined through the judicial process based on the evidence presented before the court.
