WhatsApp Hack Scam in Barabanki: How a Fake ‘Accident Photo’ Cost a Man INR 4.44 Lakh — And How You Can Stay Safe

Photo by Zulfugar Karimov on Unsplash

Cybercrime in India is evolving at an alarming pace. In a recent case from Barabanki, Uttar Pradesh, a young man lost INR 4.44 lakh within minutes after clicking on what appeared to be a simple accident photo sent on WhatsApp.

What seemed like an emergency turned out to be a sophisticated APK-based WhatsApp hacking scam.

Let’s break down what happened — and more importantly — how you can protect yourself.

What Happened in Barabanki?

According to reports, a man named Prashant Verma, a resident of the grain market area in Barabanki, received a call from an unknown number.

The caller claimed:

A person had died in a road accident, and Prashant’s identity card was found in the victim’s pocket.

To make the story convincing, the fraudster sent a photo of the alleged accident via WhatsApp.

But here’s the twist. The “photo” was not an image at all. It was actually a malicious APK file disguised as a photo.

The moment Prashant downloaded and opened it:

• His phone was compromised
• Fraudsters gained access to his device
• Multiple unauthorized bank transactions were executed
• INR 4.44 lakh was drained within minutes

Police have launched an investigation and warned citizens about this growing scam technique.

How Does This APK Scam Work?

An APK (Android Package Kit) is the file format used to install apps on Android devices.

Cybercriminals:

1. Rename malicious APK files to look like images (e.g., AccidentPhoto.jpg.apk)
2. Send them via WhatsApp
3. Create emotional urgency (death, accident, police issue)
4. Trick victims into downloading and installing the file
5. Gain full control of the device — including SMS, OTPs, banking apps

Once installed, the malware can:

• Read your SMS (including OTPs)
• Access banking apps
• Capture keystrokes
• Transfer funds instantly

Why This Scam Is So Dangerous

This isn’t just a phishing link. It’s remote control access to your phone. With OTP interception and screen monitoring, criminals don’t even need your passwords. They can execute transactions in real time.

And because the victim voluntarily installed the file, many security protections get bypassed.

How to Stay Safe from WhatsApp APK Scams Here are essential safety steps everyone should follow:

Never Download Unknown Files

Do not open:

• Unknown images
• Suspicious documents
• APK files sent on WhatsApp
• Files from unknown numbers

If you see “.apk” — delete immediately.

Verify Before You React

Scammers use emotional triggers:

• Accident
• Police case
• Family emergency
• Job offer
• Investment scheme

Pause. Call the person directly using a verified number.

Install Apps Only from Official Stores

Only use:

• Google Play Store
• Apple App Store

Never install apps sent through WhatsApp or Telegram.

Enable Strong Security Settings

• Turn on Two-Factor Authentication (2FA) for WhatsApp
• Enable biometric lock for banking apps
• Disable “Install from Unknown Sources” in Android settings
• Keep your phone’s OS updated

Monitor Your Bank Transactions

• Enable SMS/email alerts
• Check statements regularly
• Immediately block your bank account if you notice suspicious activity

Report Immediately

If you become a victim:

• Call the Cyber Crime Helpline: 1930 (India)
• File complaint at: https://cybercrime.gov.in
• Inform your bank within minutes

Time is critical in digital fraud cases.

Rising Trend of APK-Based Scams in India

Police officials have warned that such scams are increasing across India. Fraudsters are becoming more sophisticated and are now:

• Disguising apps as images
• Creating fake emergency scenarios
• Targeting emotionally vulnerable users