A Swiggy Instamart customer from Nalasopara allegedly lost ₹34,000 after contacting a fraudulent customer support number found through a Google search. The incident began when he sought assistance over an expired pack of Kellogg’s Chocos delivered with his grocery order.
How Did the Customer Fall Into the Trap?
The customer reportedly tried contacting Swiggy support through its application but was unable to reach an executive. He subsequently searched Google for a customer care number and called a contact that allegedly belonged to cybercriminals impersonating Swiggy representatives.
The person answering the call claimed to be a customer support executive and asked the customer to continue the conversation on WhatsApp. The caller then sent an Android application package (APK) file, claiming that downloading it was necessary to resolve the complaint.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders
How Was ₹34,000 Withdrawn?
According to the customer’s account, the suspected fraudster instructed him to download the APK file and open Google Pay. Interestingly, the caller did not ask him to disclose an OTP but instead told him to wait for a few minutes.
Soon afterwards, the customer’s mobile screen allegedly turned completely black. He subsequently received a notification asking him to wait.
The customer claimed that ₹25,000 was initially withdrawn from his bank account, followed by another transaction of ₹9,000. The two transactions resulted in a reported loss of ₹34,000.
The precise technical method used to authorise the transactions has not been established in the available information.
What Has Swiggy Warned Customers About?
Swiggy has repeatedly cautioned users against fraudulent customer care numbers and websites impersonating the company.
The company states that it does not provide a conventional customer care telephone number for order-related assistance. Customers should instead use the Help section within the official Swiggy application.
Swiggy also warns users against disclosing debit or credit card details, CVV numbers, OTPs and UPI or ATM PINs to individuals claiming to represent the company.
Why Are APK Files Dangerous?
APK files are used to install Android applications. However, files obtained from unknown sources can contain malicious software capable of compromising devices.
Depending on the permissions granted, such applications may access sensitive information or misuse accessibility and screen-related permissions.
The incident highlights how a routine customer complaint can become an opportunity for financial fraud when users rely on unverified support numbers.
The reported ₹34,000 loss demonstrates the risks of downloading applications sent by unknown individuals claiming to provide customer assistance. Fraudsters may exploit legitimate service complaints to gain access to personal devices. Customers should contact companies through official applications, avoid installing unsolicited APK files and immediately notify their banks if suspicious transactions occur.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
