Follow us on Google News
AGRA: A search on Google for a doctor’s mobile number ended in severe financial loss for a city resident, who was duped of Rs 6.85 lakh after cyber criminals gained remote control of his mobile phone. The fraudsters sent a malicious Android Application Package (APK) file over WhatsApp under the pretext of booking an appointment. The moment the file was downloaded, the criminals secured access to the device and systematically drained money from his bank account across four days. An official First Information Report has been registered at the cyber crime police station, and an investigation is underway.
Online Search Ends in WhatsApp Trap
The victim, Shivshankar Sharma, a resident of Nai Abadi in Nagla Ajita, approached the police after realizing that large unauthorized sums had been siphoned off. According to his complaint, Sharma was attempting to find the contact number of Dr. Vivek Agarwal on Google on November 2 to schedule a medical consultation. Despite spending considerable time searching, he failed to find a valid contact number. Shortly afterward, he received an unexpected WhatsApp message from an unidentified mobile number offering assistance with scheduling an appointment.
The WhatsApp message arrived with an attached APK file labeled as an appointment booking utility. Believing that the message was genuine and came from the clinic, Sharma proceeded to download and install the file onto his phone. Police officials noted that this installation granted the perpetrators direct administrative access to the handset. With full access established, the fraudsters began exploiting the digital banking data, credentials, and payment features stored on the compromised smartphone without alerting the owner.
Funds Siphoned in Multiple Transactions
Between November 3 and November 6, the cyber criminals initiated several transactions, siphoning off a total of Rs 6.85 lakh from Sharma’s ICICI Bank account. The continuous withdrawals steadily drained the account balance until the victim finally noticed the debits. Stunned by the unexpected depletion of his funds, Sharma contacted his bank branch immediately. Bank officials confirmed that the series of transactions were fraudulent withdrawals executed through digital payment channels.
Following the confirmation from the bank, Sharma lodged a formal complaint on the national cyber crime reporting portal, leading to the registration of an FIR at the Agra cyber crime police station. Investigators have begun tracking the trail of the stolen money, identifying the intermediary bank accounts and digital wallets used by the syndicate. The police are also examining the specific mobile number used to transmit the WhatsApp link, aiming to uncover the network behind the coordinated fraud.
Cyber Cell Issues Warning on APK Scams
Addressing the incident, Deputy Commissioner of Police (Cyber Crime) Aditya Singh warned citizens to exercise strict caution while searching for contact information of doctors, hospitals, or emergency services on Google. Singh pointed out that search results frequently display unverified numbers placed deliberately by cyber fraudsters. He emphasized that internet users should thoroughly verify credentials before dialing any number found on search engines, rather than accepting online listings as authentic.
The officer cautioned the public against downloading unknown files received through WhatsApp or text messages. APK files allow external programs to install directly on Android phones, bypassing standard app store security screenings. Fraudsters frequently disguise these files as courier delivery updates, KYC verifications, banking alerts, or appointment trackers to inject malware. Cyber security officials advise that hospital appointments should only be scheduled via verified hospital websites or recognized platforms. If an unknown file is mistakenly opened, users must disconnect internet connectivity immediately, alert their bank, and file an official complaint.
