AHMEDABAD: A 65-year-old man from Dariapur in Ahmedabad allegedly lost ₹2.4 lakh after cybercriminals posing as Bank of Baroda representatives offered to help him obtain a pension card for senior citizens. The fraud reportedly involved a malicious Android application sent through WhatsApp, which enabled the scammers to exploit the victim’s banking information.
The victim, who runs a business in Kalupur, received a call from an unknown number around 9 pm on October 13. The caller claimed to represent the bank’s Mumbai branch and offered assistance with obtaining a pension card.
The victim accepted the offer, believing the caller could help him access the service.
Fake Bank Representative Sends Malicious APK File
During the conversation, the caller sent the victim an Android application package (APK) through WhatsApp. The file was reportedly named “BoB Bank senior citizen verification.apk” and was presented as part of the pension card verification process.
The caller instructed the man to install the application on his mobile phone. The app allegedly requested permissions and prompted him to enter personal and banking information, including his name, mobile number, MPIN and TPIN.
The victim provided the requested details as instructed.
Afterwards, the caller claimed that the pension card application was being processed and told the man not to switch off his phone.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders
₹2.4 Lakh Withdrawn in Four Transactions
While the victim believed his pension card request was being processed, he began receiving multiple debit alerts indicating that money was being withdrawn from his bank account.
According to the report, ₹2.4 lakh was debited through four separate transactions.
The incident highlights how fraudsters can exploit the trust people place in bank representatives and government-linked benefits. By presenting a fraudulent application as an official verification tool, scammers can persuade victims to install potentially harmful software and disclose confidential banking credentials.
The precise technical mechanism through which the money was withdrawn has not been independently established from the available report. However, the use of an unsolicited APK file and the disclosure of sensitive banking information raise concerns about mobile-based financial fraud.
Why APK Files Sent on WhatsApp Can Be Dangerous
APK files are installation packages used to distribute Android applications. While legitimate developers use them to distribute software, cybercriminals can also circulate malicious applications through messaging platforms, bypassing the safeguards users may associate with official app stores.
Depending on their permissions and capabilities, malicious applications may facilitate surveillance, expose sensitive information or help attackers compromise a victim’s device. Users should never assume an application is genuine simply because its name contains a bank’s name or logo.
Banks do not require customers to disclose their MPIN, TPIN, passwords or other confidential authentication details to obtain routine services.
How to Protect Yourself From Banking Scams
Customers should verify pension schemes and banking services directly through their bank’s official website, customer care number or branch. They should avoid installing APK files received from unknown callers and never share banking credentials in response to unsolicited requests.
Anyone who notices an unauthorised transaction should immediately contact their bank, block compromised banking access where necessary and report the incident through the National Cyber Crime Reporting Portal at cybercrime.gov.inor the national cybercrime helpline 1930.
What This Means For You
A pension card offer received over an unsolicited phone call or WhatsApp message should be treated with caution. Never install an unfamiliar banking application or disclose your MPIN or TPIN to someone claiming to process a benefit.
The420 Insight
This incident illustrates how social engineering and potentially malicious mobile applications can combine to facilitate financial fraud. Verifying the caller independently, refusing suspicious app installations and reporting unauthorised transactions immediately are essential steps in limiting potential losses.
About the Author – Ananya Aradhya writes on cybercrime, fraud, scams, cybersecurity, digital safety, and emerging threats. Her work also covers major criminal cases, financial frauds, consumer scams, and stories that highlight risks affecting people in the real and digital world.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
