An 85-year-old retired engineer in Pune has allegedly lost ₹3 lakh to cyber fraudsters who duped him under the pretext of reactivating his net banking facility. Investigators said the scammers created a fake webpage resembling the official website of a public sector bank and used it to lure the victim. Posing as bank officials, they sent a malicious APK file and convinced him to share his personal and banking details. Shortly after the information was submitted, ₹3 lakh was withdrawn from his bank account through two unauthorized transactions. Following a preliminary inquiry, Kharadi Police have registered a case and launched an investigation.
According to police, the victim is a retired engineer from a government agency in Uttarakhand and currently lives with his family in Pune’s Kharadi area. His net banking facility linked to a public sector bank account had been deactivated in December 2025, prompting him to look for ways to restore the service.
Investigators said that while browsing a social media platform in February 2026, the victim came across what appeared to be the bank’s official webpage. After clicking on a link offering assistance with net banking services, he received a phone call from a man claiming to be a bank official. The caller assured him that the net banking facility would be reactivated within 24 hours and asked him to complete a few formalities.
The caller allegedly sent a malicious APK file to the victim’s mobile phone and instructed him to install it. He was then asked to provide personal information, bank account details, and other credentials required for the activation process. Police believe the fraudsters used this information to gain unauthorized access to the victim’s bank account, enabling them to withdraw ₹3 lakh through two separate transactions.
After noticing the unauthorized withdrawals, the victim realized he had been defrauded and approached the Pune Cyber Police. Following a preliminary inquiry and analysis of digital evidence and financial transactions, Kharadi Police registered an FIR under the relevant provisions of the Bharatiya Nyaya Sanhita and the Information Technology Act. Investigators are now examining bank accounts, mobile numbers, digital trails, and IP addresses to identify those involved in the fraud.
Police are also probing whether the fake banking webpage, malicious APK file, and calling operation were part of a larger organized cybercrime network. Investigators are tracing the beneficiary bank accounts that received the stolen funds and analyzing the transaction trail to identify additional suspects. Officials believe digital forensic evidence will play a crucial role in uncovering the full extent of the operation.
Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said APK-based cyber fraud has been increasing rapidly, with criminals using fake banking assistance, KYC updates, net banking activation, and reward offers to persuade victims to install malicious applications. Once installed, such applications can allow fraudsters to gain control of the victim’s device and access sensitive information, including banking credentials, OTPs, and other personal data.
Cybersecurity experts have advised the public to verify the authenticity of any banking-related links before clicking on them and never download or install APK files received from unknown sources. They also caution customers against sharing OTPs, passwords, user IDs, card details, or other confidential banking information over phone calls. Anyone encountering suspicious online activity should immediately notify their bank and report the incident through the National Cyber Crime Helpline 1930 or the Cyber Crime Reporting Portal to improve the chances of recovering stolen funds and assisting investigators.
