Protect Yourself from Bank Fraud: Fake Calls, Malicious APKs, and KYC Scams
Indian consumers lost ₹22,845 crore to cyber fraud in 2024 — a 206% jump in a single year. The tactics are getting sharper: callers who know your name and last transaction, fake apps that look identical to the real thing, and urgency that is engineered to override your better judgment. Here is what you need to know.
The Numbers Are Alarming
Cyber fraud in India has not just grown — it has exploded. Between 2021 and 2024, reported incidents rose nearly 500%. Investment scams, fake app downloads, and impersonation calls now account for the bulk of cases. The data below is from Ministry of Home Affairs (MHA) and Biocatch reports.
Year-on-Year Growth in Cyber Fraud Cases
| Year | Cases Reported | Scale | Financial Loss |
|---|---|---|---|
| 2021 | ~4.5 Lakh | ~₹1,200 Cr | |
| 2022 | ~10.3 Lakh | ~₹5,000 Cr | |
| 2023 | ~15.5 Lakh | ~₹7,500 Cr | |
| 2024 | ~22.7 Lakh | ₹22,811 Cr | |
| 2025 | ~25+ Lakh | ₹22,845 Cr+ |
The Five Scams Targeting Bank & Credit Card Users Right Now
Fraudsters do not usually invent new tactics — they refine old ones. These five patterns are the most active in India right now, reported consistently in the context of credit card, UPI, and fintech accounts.
You receive a call from someone who sounds professional, knows your name, and may even quote your last transaction. They claim your account is compromised, your card is being blocked, or your KYC is expiring. The urgency is deliberate. They ask for your OTP, CVV, or card number to "verify" or "unblock" your account. The moment you share it, your account is drained.
Most CommonYou get a WhatsApp message or SMS with a link to download a "bank rewards app", "KYC update app", or a fake version of your bank's official app. The APK looks convincing — it may even mimic your bank's UI exactly. Once installed, it requests permissions for SMS, contacts, and screen access, then silently forwards your OTPs to scammers who authorise transactions without you knowing.
Growing FastA message or call tells you your KYC has not been updated and your account will be frozen within 24 hours. You are asked to share Aadhaar details, PAN, or to install an app. This is a particularly effective scam because RBI has been pushing KYC compliance, so it sounds legitimate. Real banks and RBI will never threaten you with account closure over a call or WhatsApp message.
Targets New UsersScammers send UPI payment requests disguised as "refund initiations" or share QR codes claiming you need to scan to receive money. In UPI, scanning a QR code and entering your PIN means you are paying, not receiving. Fraudsters bank on this confusion. They also send phishing links via SMS that open fake bank portals to harvest your net banking credentials.
High VolumeFraudsters create fake apps impersonating MNGL, MGL, IGL, Indane, HP Gas, and other piped gas or cylinder booking services. Circulated via WhatsApp, these APKs mimic official branding and ask users to "book a slot" or "update subsidy details." Once installed, they steal net banking credentials, UPI PINs, and even enable real-time screen access. Some request advance payment for a "technician visit" that never happens.
Rapidly SpreadingRed Flags — Hang Up or Delete Immediately
These are the warning signs that what you are experiencing is a scam. Scammers are trained to sound calm and authoritative. Trust the flag, not the voice.
What Your Bank Will Never Ask You
Print this out. Save a screenshot. No legitimate bank, credit card company, or government body will ever, under any circumstance, ask for the following:
If you are unsure whether a call is real, hang up and call your bank directly through its official app or the number on the back of your card. Do not call back any number the caller gives you — it will connect you to the same scammer.
Check Any APK Before You Install It — Free
If someone has sent you an APK file or you are unsure about an app you downloaded outside the Play Store, check it here. Type the APK file name below — or the file hash (MD5 or SHA256) if you have it — and we will run it through VirusTotal, which scans using 70+ antivirus engines simultaneously. Results open in a new tab.
Only install apps from the official Google Play Store or Apple App Store. Every legitimate bank, utility, and financial app is listed there. If you received a download link from WhatsApp, SMS, email, or any website — do not install it, regardless of how official it looks.
If You Have Already Been Scammed — Act Fast
Time is critical. Most banks and payment systems can freeze or reverse fraudulent transactions if notified within hours. Every minute of delay reduces the chance of recovery.
Under RBI guidelines, if you report an unauthorised transaction within 3 working days and the fraud was not due to your negligence, your liability is limited or nil. Banks are required to acknowledge your complaint within 30 days. If they do not, you can escalate to the RBI Complaint Management System.
Frequently Asked Questions
No. No legitimate bank, credit card company, or financial institution will ever call you and ask for your OTP, CVV, card number, or password. If anyone calls claiming to be bank support and asks for any of this, hang up immediately — it is a scam.
No. Banks, gas companies, and financial services never distribute app updates via WhatsApp, SMS, or any messaging platform. All updates come through the official Google Play Store or Apple App Store only. Delete the message and do not open the link.
Use the free checker above (powered by VirusTotal). Type the APK name and it will scan using 70+ antivirus engines. As a rule, only install apps from the official Play Store.
No. Scammers purchase leaked data from the dark web or through data breaches. Knowing basic personal information does not validate a caller's identity. Always hang up and contact your bank directly through the official app.
1930 is the national cyber fraud helpline, available 24×7 and free from any network. You can also report online at cybercrime.gov.in.
Almost certainly not. Official gas utility apps are available on the Play Store and are never distributed via WhatsApp. These fake APKs ask for UPI PINs, advance payments, or banking credentials. Delete the message, do not install the APK. If you need the real app, search directly in the Play Store for the official MNGL, IGL, or HP Gas app.
Possibly, if you act fast. Call 1930 and ask your bank to freeze the receiving account. Banks can sometimes reverse transactions if reported within hours. File a formal complaint at cybercrime.gov.in as well. Under RBI guidelines, if the fraud was not due to your negligence, your liability may be limited.
This page is published by an independent, unofficial fan site and is not affiliated with OneCard (FPL Technologies Pvt. Ltd.), any partner bank, or any government body. Statistics cited are sourced from MHA, RBI, and reputable media outlets — please verify figures with original sources. This is not legal or financial advice. If you have been defrauded, please contact official authorities.
Was this article helpful?
Found this useful? Share it.
Still have questions?
Ask our AI assistant — honest answers, including when OneCard isn't the right card.