Ahmedabad: A 26-year-old staff nurse staying as a paying guest in Thaltej allegedly lost Rs 75,000 after falling victim to a fake customer care scam linked to an online shopping refund.
The incident highlights a growing cyber fraud tactic in which scammers impersonate customer support executives and persuade victims to install malicious Android application packages, or APKs, on their phones.
According to a complaint filed with Vastrapur police, the woman had purchased a teddy bear from an online shopping platform and later wanted to inquire about a refund. While searching online for the company’s customer care contact, she came across a mobile number and called it.
The person on the other end allegedly introduced himself as a customer support representative and offered to help her with the refund process. During the conversation, he sent an APK file to her WhatsApp account and instructed her to install and open it.
Soon after the file was opened, the woman’s phone was allegedly compromised. Police said Rs 75,000 was transferred from her bank account to another account without her knowledge or consent.
She realized something was wrong after receiving an alert from her bank. The woman then informed her family and friends, contacted the cybercrime helpline and later approached Vastrapur police to lodge a complaint.
The complainant told police that she had not shared her OTP, PIN or other banking credentials with the caller.
Police have registered a case and are investigating the transaction trail to identify the person behind the alleged fraud.
How the APK Scam Works
APK files are Android application packages used to install apps on Android devices. Cybercriminals can disguise malicious APKs as legitimate customer support, refund or banking-related applications.
Once installed, such malicious software may seek access to sensitive information or device functions. Victims can therefore lose money even if they have not directly shared an OTP or banking PIN with the fraudster.
Cyber Fraud in Numbers
India has witnessed a sharp rise in cyber-enabled financial fraud. Government data cited by the Press Information Bureau showed that more than Rs 52,976 crore was lost to cyber-enabled financial frauds up to June 2026.
Earlier government data also showed that India recorded more than 5.83 lakh digital payment fraud cases involving Rs 3,588.22 crore between FY2021-22 and September FY2025-26. Banks were able to recover only about Rs 238.83 crore during that period.
The Ahmedabad case underlines the risks of downloading APK files sent by unknown callers, even when they claim to represent a familiar company.
Safety Tip: For refunds or customer support, use contact details listed on the company’s official website or app. Never install an APK sent through WhatsApp or another messaging platform at the request of an unknown caller.
