A Mumbai judge lost ₹93,000 after installing a malicious APK sent by fraudsters posing as customer care agents. The case highlights the growing threat of mobile-based cyber scams using social engineering and fake apps to access banking details.

Judge Falls Victim to Social Engineering Scam in Mumbai

The420 Correspondent
4 Min Read

Mumbai: In a shocking instance highlighting the evolving nature of cyber fraud, a judge in Mumbai has fallen victim to an online scam, losing ₹93,000 under the pretext of a mobile phone issue. The incident underscores how cybercriminals are using increasingly sophisticated social engineering tactics to target even well-informed individuals.

According to the complaint, the incident took place on the afternoon of March 30 while the judge was at the court premises. He noticed a pink line appearing on the screen of his Android phone. Assuming it to be a technical fault, he searched online for the customer care number of the mobile manufacturer. However, he was unable to connect with the official support service.

FCRF Launches Premier CISO Certification Amid Rising Demand for Cybersecurity Leadership

A few hours later, he received a call from an unknown number. The caller claimed to be a representative of the mobile company’s customer support team. After hearing the issue, the fraudster advised the judge to register an online complaint and sent an APK file via WhatsApp.

Upon clicking the file, a so-called “customer support application” was installed on the judge’s phone. The caller then instructed him to make two small payments of ₹10 each through Google Pay (GPay) to process the complaint. Following the instructions, the judge completed the transactions.

Shortly thereafter, he received a message stating that the request was “in progress,” giving the impression that the issue was being handled. However, upon reaching home and checking his bank account, he discovered unauthorized deductions of ₹90,000 and ₹3,000—amounting to a total loss of ₹93,000.

Preliminary investigation revealed that the funds were transferred to a PhonePe account registered in the name of Pappu Sachin Yadav. The victim subsequently contacted the cybercrime helpline and was advised to file a formal complaint with the local police.

An FIR has been registered against an unknown accused under relevant provisions of the Bharatiya Nyaya Sanhita (BNS), including sections 318(4) (cheating) and 319(2) (cheating by personation), along with sections 66C (identity theft) and 66D (cheating by personation using computer resources) of the Information Technology Act.

The incident comes close on the heels of another cyber fraud case involving a judge, who recently lost over ₹6 lakh in a credit card scam. Earlier, in December 2023, a retired Chief Justice of the Bombay High Court had also reported losing nearly ₹50,000 in a similar cybercrime incident.

Cybersecurity experts warn that APK-based fraud is becoming increasingly common. In such scams, attackers trick users into installing malicious applications, which then grant them remote access to the device. This allows them to intercept sensitive information, including banking credentials and OTPs, enabling swift unauthorized transactions.

Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said, “Cybercriminals today are combining advanced technology with social engineering techniques. APK files, screen-sharing apps, and fake customer care calls have emerged as major threats. People must exercise extreme caution before clicking on unknown links or installing applications from unverified sources.”

Authorities are currently working to trace the आरोपी and recover the stolen funds through transaction tracking. The case serves as a stark reminder that even a small lapse in digital vigilance can lead to significant financial losses in today’s interconnected world.

Stay Connected