Cybercriminals reportedly target victims with fake bank alerts; police urge people not to respond to messages from unknown numbers
Hyderabad Police have warned citizens about a suspected new type of cyber fraud after a man allegedly lost his entire bank savings by replying “NO” to a WhatsApp message. According to the warning, the victim neither shared an OTP nor clicked on a suspicious link.
Hyderabad Police Commissioner and Director General of Police VC Sajjanar flagged the incident, describing the alleged method as an “auto-execution file attack”.
He also said that a chartered accountant had been cheated in a similar cybercrime and urged people to remain alert to unexpected messages about bank transactions.
In a post on X, Sajjanar warned that fraudsters were using alarming WhatsApp messages to trick people into responding without thinking. He also shared a video explaining the alleged scam and precautions people should take.
How the alleged WhatsApp scam works
According to Sajjanar, the fraud begins with a message from an unknown number claiming that money has been debited from the recipient’s bank account.
A follow-up message then asks the recipient to reply “NO” immediately if they did not authorise the transaction.
The alarming wording is intended to create panic and prompt an immediate response. Sajjanar claimed that hidden malicious code could activate when the recipient replies, potentially allowing fraudsters to gain control of the phone and access bank funds.
He said the reported victim lost his savings despite not sharing an OTP or clicking on a suspicious link. However, the technical details of the alleged attack have not been independently established.
What precautions should you take?
Sajjanar has advised citizens not to reply “YES” or “NO” to messages about bank transactions received from unknown numbers.
People should follow these precautions:
Do not panic or respond to unexpected messages claiming that money has been debited from your account.
Verify transactions directly through your bank’s official app, website or customer care number.
Avoid opening unexpected attachments or files and do not install applications received from unknown sources.
Block and report suspicious senders, and keep your phone’s operating system and security software updated.
If you notice unauthorised transactions, contact your bank immediately and report the incident.
Where to report cyber fraud
Anyone who loses money in a suspected cyber fraud should immediately call the national cybercrime helpline 1930 and report the incident through the official website, cybercrime.gov.in.
Quick reporting can help authorities and banks take steps to address fraudulent transactions.