Cyber police in Jharkhand’s Jamtara district have arrested two men accused of posing as bank representatives and persuading customers to install malicious Android applications using warnings about credit-card closure or offers of new cards.
The suspects were arrested from Sugapahari under Karmatar police station limits during a raid conducted following information received by police. Officers recovered six mobile phones, nine SIM cards, seven ATM cards and a PAN card from their possession.
Police allege that the operation targeted bank customers across different states and relied on a familiar combination of impersonation and malicious APK files to obtain confidential financial information.
Credit Card Problem Used To Create Urgency
The arrested men have been identified as Wajid Ansari of Sugapahari and Hasbul Ansari of Barmundi.
According to police, the suspects contacted people while posing as representatives of State Bank of India and other banks. Targets were allegedly told that their credit cards were about to be closed or that they could obtain a new card.
The callers would then persuade them to download an APK file on their mobile phones.
An APK, or Android Package Kit, is the file format used to install applications on Android devices. Legitimate applications also use APK files, but criminals frequently circulate modified versions through WhatsApp, SMS or other unofficial channels.
Police allege that the applications used in the Jamtara operation were intended to obtain confidential information from victims’ phones, which could then be exploited for financial fraud.
A cybercrime case has been registered against the two accused. Investigators are examining the seized devices, SIM cards and banking material to determine the scale of the alleged operation and identify other possible associates.
Fake Bank Calls Become Delivery Route For Malware
The case shows how cybercriminals increasingly use ordinary customer-service issues as a way to persuade victims to install potentially dangerous software themselves.
A caller does not necessarily begin by demanding an OTP, PIN or credit-card number. Instead, the fraud may start with a believable problem involving an existing financial product.
Being told that a credit card is about to be blocked creates urgency. Offering a replacement card gives the caller an apparently legitimate reason to guide the customer through supposed verification steps.
The APK file can then be presented as a banking application, verification tool or form required to complete the process.
Once a victim installs unfamiliar software and grants permissions, sensitive information on the device may become vulnerable. Depending on the malware involved, criminals can attempt to access messages, notifications, banking information or other data useful for carrying out unauthorised transactions.
This makes social engineering as important as the malicious software itself. The file only reaches the device because the victim has first been convinced that the person sending it represents a trusted organisation.
Jamtara Investigations Show Repeated Use Of APK Files
Jamtara police have uncovered several cybercrime operations this year in which callers allegedly impersonated bank officials and used malicious applications to target customers.
Previous investigations have involved fake cashback offers, blocked-card warnings, gas-bill updates and other service-related pretexts. In several such cases, investigators alleged that victims were asked to install APK files before their financial information was compromised.
The recurring pattern shows how fraud groups can change the story presented to victims without substantially changing the underlying attack.
A credit-card closure warning, gas connection update or fake government service may appear unrelated. But each can provide a convincing reason for sending an unofficial application to a victim’s phone.
For investigators, recovered phones and SIM cards can therefore provide an important map of the operation. Call records, messaging accounts, APK files, contact lists and transaction communications can help establish who was targeted and whether the suspects were connected to a wider network.
Police Examine Interstate Links
Police said the alleged activities of the arrested suspects extended to targets in different states.
The available information does not specify the total number of victims or the amount allegedly stolen through the operation. Those details are likely to depend on further examination of the seized phones, SIM cards and financial records.
The seven recovered ATM cards are also expected to form part of the investigation into how money linked to the suspected fraud network was received or withdrawn.
The case reinforces a basic warning for credit-card users: an unexpected caller claiming that a card will be blocked should be independently verified through the bank’s official application, website or customer-care number.
Installing an APK sent by an unknown caller effectively moves the interaction outside the security controls of official banking applications. That is precisely the gap cybercriminals are increasingly trying to exploit.
