A 65-year-old retired Ahmedabad resident was allegedly duped of ₹8.5 lakh after fraudsters posing as bank officials made him install a malicious APK file and gained access to his phone.

Retired Man Duped of Lakhs via Fake Bank Official, Funds Siphoned Through Malicious APK

The420.in Staff
4 Min Read

Ahmedabad:  In a serious case of cyber fraud, a 65-year-old retired resident of Ahmedabad was allegedly cheated out of ₹8.5 lakh by fraudsters posing as bank officials. The accused tricked the victim into downloading a malicious APK file under the pretext of updating and assisting with his fixed deposit, ultimately gaining control of his mobile phone.

The victim, a resident of Vatva area in Ahmedabad, filed a complaint in November 2025 after falling prey to the scam. He stated that the fraud began when he searched online for contact details of a bank branch regarding his ₹4 lakh fixed deposit nearing maturity.

FCRF Academy Launches Premier Anti-Money Laundering Certification Program

According to officials, the victim dialed a number found on a search engine result. The caller allegedly introduced himself as a bank representative and later transferred the call to another individual who identified himself as a senior manager named “Akash Verma” based in Mumbai.

Malicious File Used to Gain Phone Access

Investigators said the fraudsters then extracted sensitive banking information from the victim and later sent a WhatsApp file named “CUSTOMER SUPPORT P15.apk,” instructing him to install it for verification purposes.

Once installed, the malicious application allegedly granted remote access to the victim’s smartphone. This allowed the fraudsters to access banking applications and carry out unauthorized transactions without the victim’s knowledge.

Officials confirmed that fixed deposits were broken and funds were transferred in multiple transactions. Around ₹8 lakh was withdrawn from one account and ₹50,000 from another, resulting in a total loss of ₹8.5 lakh.

The fraud came to light when the victim checked his ATM records and bank statements, after which he immediately approached authorities. He also lodged a complaint through the national cyber helpline number 1930 before registering a formal FIR with the police.

Police Trace Financial Trail

An FIR has been registered against unidentified accused persons on charges of cheating, impersonation, and cybercrime. Police have launched an investigation to trace the financial trail and identify those involved in the racket.

Authorities have warned citizens against downloading APK files sent through WhatsApp, SMS, or unknown sources, stressing that such files are often used to install spyware or remote access tools on mobile devices. Officials also urged people not to share banking credentials or OTPs under any circumstances.

Cyber officials noted that such APK-based frauds are increasingly being used by criminals who exploit search engine listings, fake customer care numbers, and messaging platforms to trap victims. Once installed, these apps can mirror device activity, intercept OTPs, and bypass basic security layers.

Cybersecurity experts explained that these scams rely heavily on social engineering techniques, where fraudsters build trust and urgency to manipulate victims into taking immediate action without verification. Users are advised to rely only on official bank websites and verified helpline numbers.

Experts Warn of Social Engineering Threat

Renowned cyber crime expert and former IPS officer Prof. Triveni Singh said that such frauds are not driven by technology alone but by psychological manipulation. He observed that scammers often impersonate bank officials or technical support staff to create fear and urgency, pushing victims to act without verification.

Authorities further added that the expansion of digital banking has also led to a rise in such cyber-enabled financial crimes. Fraud networks are constantly evolving, using new methods to bypass security systems and exploit human error.

Stay Connected