The scam
You receive a WhatsApp message saying your bank or delivery app needs an urgent update. The link downloads an APK file, which is a type of Android app installer. If the app is fake, it may read messages, steal information or misuse access to your phone. Not every APK is dangerous, but installing an unknown one can be risky.
Warning signs
• An unexpected message asks you to update an app using its link.
• You are told to allow installation from an unknown source.
• The app asks for SMS, accessibility or screen access without a clear reason.
• The message threatens to block your account if you delay.
Stop and verify
Open your usual app store or the company’s genuine website yourself. Check the developer and requested permissions. Do not install an app just because someone sends you a link.
If you have already acted
• If you think the phone is being controlled remotely, disconnect it from the internet.
• From another trusted device, contact your bank and secure affected accounts.
• Get the phone checked by someone qualified. Deleting the app may not remove every problem.
• Keep the link and messages. Report any related financial fraud through 1930 and cybercrime.gov.in.