A 65-year-old man from Ahmedabad has allegedly lost ₹2.4 lakh after cybercriminals posing as Bank of Baroda representatives offered to help him obtain a pension card for senior citizens. According to the supplied report, the fraud involved an Android application package (APK) sent through WhatsApp and the disclosure of sensitive banking information.
The victim, who reportedly runs a business in the Kalupur area, received a call from an unknown number at around 9 pm on October 13. The caller claimed to represent the bank’s Mumbai branch and offered assistance with the pension card process.
Believing the offer was genuine, the man followed the caller’s instructions. Four transactions later, ₹2.4 lakh had reportedly been debited from his account.
Fake Bank Representative Sent an APK File
During the conversation, the caller allegedly sent a file through WhatsApp named “BoB Bank senior citizen verification.apk”. It was presented as an application needed to verify the pension card request.
The caller instructed the man to install the file on his Android phone. According to the report, the application requested permissions and prompted him to enter personal and banking information, including his name, mobile number, MPIN and TPIN.
The victim provided the requested details, believing they were necessary to complete the verification process. The caller then reportedly claimed that the application was being processed and advised him not to switch off his phone.
The incident demonstrates how scammers may exploit the credibility of a recognised bank and the promise of a financial benefit to persuade people to follow unfamiliar digital instructions.
₹2.4 Lakh Debited Through Four Transactions
While the victim believed his pension card request was being processed, he began receiving debit alerts on his phone.
According to the supplied report, a total of ₹2.4 lakh was withdrawn through four separate transactions. The exact technical method used to access the account has not been independently established from the available information.
However, the combination of an unsolicited application, requested banking credentials and subsequent unauthorised transactions raises concerns about the risks associated with fraudulent mobile applications.
The case also highlights the importance of acting quickly when unexpected debit alerts appear, even if a caller has claimed that a legitimate banking process is underway.
Why APK Files Received on WhatsApp Can Be Risky
APK files are packages used to install applications on Android devices. Although legitimate developers may distribute applications this way, cybercriminals can also use APK files to deliver malicious software.
Depending on its capabilities and the permissions granted, a malicious application may expose sensitive information or compromise a device. A familiar-looking name or a bank’s name in an application file does not prove that it is authentic.
Customers should be especially cautious when an unknown caller asks them to install an application outside an official app store or enter confidential banking details into an unfamiliar interface.
How to Protect Yourself From Banking Scams
Customers can take several precautions to reduce the risk of mobile banking fraud:
Verify offers independently: Contact the bank through its official website, verified customer care channel or branch before acting on an unsolicited pension or benefit offer.
Avoid unfamiliar APK files: Do not install applications sent by unknown callers through WhatsApp or other messaging platforms.
Protect banking credentials: Never disclose your MPIN, TPIN, password or OTP to an unsolicited caller.
Question urgent instructions: Be cautious if someone pressures you to install software, share confidential details or keep your phone switched on while a supposed application is being processed.
Monitor transaction alerts: Contact your bank immediately if you notice an unfamiliar debit or suspect that your account has been compromised.
What Should Victims Do After Suspected Fraud?
Anyone who notices an unauthorised transaction should contact their bank immediately and request appropriate action to secure the account and restrict further unauthorised activity.
In India, suspected cyber financial fraud can also be reported through the National Cyber Crime Reporting Portal at cybercrime.gov.in or by calling 1930. Prompt reporting is important.
Victims should preserve transaction alerts, bank statements, relevant phone numbers and messages. These records may help authorities trace the transactions and investigate the incident. A detailed review of suspicious transactions may also support financial investigation services when businesses need to examine potential financial irregularities.
Key Takeaway
The Ahmedabad incident is a reminder that an unsolicited offer of a pension card or other banking benefit should never be accepted without independent verification. Customers should not install unfamiliar applications or disclose confidential banking credentials merely because a caller claims to represent a recognised bank.