Delhi Cyber Scam: CA Loses ₹75,000 After Installing Malicious WhatsApp File

New Delhi: A recent cyber fraud case in the capital has once again underlined serious cyber security risks linked to malicious mobile applications. A chartered accountant in Delhi lost ₹75,694 after being tricked into downloading a fake banking application sent via WhatsApp, exposing vulnerabilities that cyber criminals continue to exploit.

According to investigators, the fraudsters contacted the victim while posing as bank officials and promised an increase in her credit card limit. She was persuaded to download an APK file, which was presented as an official bank app. Within minutes of installation, the malware compromised her phone, giving criminals access to sensitive financial data and enabling unauthorized transactions on her Kotak Mahindra Bank credit card.

Cyber Security Breach Through Fake Apps

Police investigations revealed that members of the gang had earlier worked with a credit card company, allowing them access to customer information. This data was misused to design a counterfeit Kotak Mahindra Bank mobile application embedded with malware.

Using fake SIM cards, the accused targeted unsuspecting customers and circulated the malicious APK via WhatsApp. Once installed, the malware enabled remote access to mobile devices, exposing card details, OTPs, and personal information-an increasingly common cyber security threat.

The stolen funds were used to buy electronic items through online delivery platforms such as Zepto, with deliveries traced to Faridabad. The goods were later sold on resale platforms including OLX.

Cyber Police Crack the Racket

After an FIR was registered on February 4, the Delhi Cyber Police initiated a technical investigation involving digital tracking and location analysis. This led to the arrest of four accused-Abhishek Kumar Jha (24), Ashish Kumar Ojha (23), Vivek Kumar alias Monu (37), and Ikraar (23)-from Surajkund, Faridabad. Four mobile phones used in the crime were also seized.

Further investigation is underway to identify additional victims and assess the scale of the cyber fraud network.

Cyber Security Advisory

• Police have reiterated key cyber security precautions:
• Never download APK files or apps shared via WhatsApp or unknown sources
• Do not share OTPs, card details, or banking credentials
• Remember that banks do not send app links or updates through messaging platforms
• Verify suspicious calls by contacting the bank's official helpline

Authorities warned that such scams are rising and stressed the importance of digital vigilance to prevent financial loss.