Four cybercrime complaints were filed at Vijayawada’s Patamata police station on the same day, with victims describing different scam tactics but facing the same result — their bank accounts were emptied within minutes.
Police have registered all four cases on the National Cyber Crime Reporting Portal and are tracing the money trail with the help of the Vijayawada City Cyber Crime Wing.
The cases are particularly concerning because one of the victims is a retired bank manager, showing that even people with banking experience can fall victim to sophisticated online fraud.
Four Cases, Different Tricks
| Victim | Location | Scam Method |
|---|---|---|
| Nagaraju | Ramavarappadu | Fake KYC update through a malicious APK |
| Paklapati Ravivarma | Nidamanuru | Malicious APK disguised as a legitimate application |
| Manoj Kumar | Prasadampadu | Unauthorised UPI transactions |
| Rajendra, retired bank manager | Nagarjuna Nagar | Fake SBI reward-points link |
Two cases involved malicious APK files, while another involved unauthorised UPI transactions. The fourth began with a phishing link claiming to offer SBI reward points.
How the Fake KYC Scam Works
The fraud usually begins with a WhatsApp or SMS message pretending to be from a bank or government agency. The message creates panic by claiming that the victim’s KYC will expire immediately and that the account will be blocked unless verification is completed.
The victim is then asked to install an APK file, supposedly for KYC verification.
Once installed, the malicious app may request access to SMS messages, accessibility services and other sensitive phone functions. With these permissions, criminals can potentially monitor the screen, intercept OTPs, capture banking credentials and perform transactions without the victim knowingly sharing the OTP.
This is why some victims say they never gave their OTP to anyone. The malware may have accessed the OTP directly from the device.
Why People Fall for the Scam
The biggest weapon used by scammers is urgency.
Messages such as “Your KYC expires today” or “Your account will be blocked immediately” are designed to make people act without checking whether the message is genuine.
A simple warning sign is the deadline. Genuine banking and KYC processes do not normally depend on a sudden same-day ultimatum sent through an unknown WhatsApp number or SMS link.
How the Fake SBI Reward Scam Worked
In another case, retired bank manager Rajendra received a link claiming to offer SBI reward points. Instead of taking him to a genuine rewards page, the link reportedly led to a phishing website designed to steal banking credentials.
Reward points, cashback and promotional offers are commonly used as bait because they appear harmless. Victims may click the link believing they are simply claiming a benefit they have already earned.
The case also highlights an important point: banking knowledge alone does not make someone immune to phishing. These scams are designed to look convincing and exploit people when they are distracted or under pressure.
The Problem Is Growing Across India
The Vijayawada cases are part of a wider rise in digital fraud involving malicious APK files and phishing links.
Cybersecurity experts have warned about organised fraud networks distributing fake banking and verification apps through messaging platforms. These operations can target large numbers of people using similar messages and attack methods.
How to Stay Safe
- Never install an APK file sent through WhatsApp, SMS or Telegram.
- Download banking apps only from the official Google Play Store or Apple App Store.
- Keep “Install from Unknown Sources” disabled on your phone.
- Do not click links offering unexpected rewards, cashback or KYC updates.
- Treat messages demanding immediate action as a major warning sign.
- Never share your UPI PIN, banking password or OTP with anyone.
- If you have installed a suspicious app, disconnect the phone from the internet immediately and take steps to secure your bank accounts using a trusted device.
- Report suspected financial fraud immediately by calling 1930 or through cybercrime.gov.in.
Quick reporting is important because authorities and banks may be able to block or freeze fraudulent transactions before the money is moved further.
The Patamata police investigation into all four cases is continuing, with investigators tracing the bank accounts and digital channels used to move the stolen money.