Secunderabad man loses over ₹12 lakh in APK-based bank fraud

A 41-year-old resident of Secunderabad lost more than ₹12.75 lakh after cyber fraudsters allegedly hacked his HDFC Bank account through a malicious mobile application.

Police said the victim first noticed suspicious activity on August 25, when he began receiving OTPs, WhatsApp alerts and calls from individuals posing as HDFC Bank officials, claiming a new beneficiary was being added to his account. He immediately alerted his local HDFC branch executive and requested precautionary measures.

Despite this, the next day, fraudsters managed to compromise his net-banking access through a malicious android package kit (APK) file unknowingly installed on his phone. They first added an unauthorised payee, then credited a loan of ₹12,75,204 into his account without his consent, before siphoning off the money through multiple transactions.

According to the victim, the fraudsters executed four debits of ₹1,80,000 each and another of ₹98,000, in addition to misappropriating his existing personal savings of ₹1.8 lakh held in the account. He clarified that he never applied for or authorised any such loan and holds no liability for the fraudulent credit or subsequent debits.

Following a complaint, the cyber crime wing of the Hyderabad police booked a case and initiated investigation.

The police cautioned public against downloading unauthorised APK files, which are often used by fraudsters to hack mobile phones and banking applications. Citizens have been advised to verify all communications directly with banks, avoid clicking on unknown links, and never share OTPs or login credentials with anyone.

Authorities further appealed to the public to report suspicious transactions immediately through the National Cyber Crime Reporting Portal (www.cybercrime.gov.in) or by dialling 1930.

For emergency assistance in Hyderabad, cybercrime police can be contacted via WhatsApp at 8712665171 or email at [email protected].