How to Avoid Fake Form 16 Scams & Credit Card Fraud via Dangerous APKs

Post Views: 10

Cybercriminals have reportedly leveraged APK files to execute online fraud schemes, targeting elderly individuals through deceptive offers related to credit card applications and Income Tax Form 16 access.

Incident 1

A textile business owner from Sector 61 received a call from an individual claiming to represent a financial institution. The caller purportedly offered assistance in securing a credit card remotely, stating the application process could be completed digitally. During the interaction, the caller allegedly transmitted an APK file, asserting it was necessary for the application. The victim followed the instructions provided.

Incident 2

Hemant, a retired railway employee in Sector 107, received a call after searching for details about Income Tax Form 16. The caller claimed to provide guidance on the document and pressured Hemant into downloading an APK file. APK files, the standard format for Android app installations, are frequently exploited by malicious actors to distribute harmful software.

Expert Analysis

A prominent cybercrime analyst and former IPS officer, Prof. Triveni Singh, highlighted that fraudsters increasingly combine technological tools with social engineering tactics to manipulate victims. Attackers often impersonate bank staff, government officials, or service providers to gain trust before requesting the installation of suspicious applications.

Investigation

Law enforcement agencies are investigating the mobile numbers used to contact the victims, the financial accounts that received illicit funds, and the movement of the transferred money. Investigators are also analyzing whether the ₹17 lakh involved was funneled into shared accounts or distributed through a network of mule accounts. The probe will also examine digital evidence recovered from the victims’ devices.

Cybersecurity Advice

Cybersecurity professionals advise users to avoid downloading applications from unverified sources and to verify the legitimacy of any requests for sensitive information.