Cybercriminals Use Fake Wedding Invitation APKs to Drain Bank Accounts Across Uttar Pradesh

As wedding season sweeps across Uttar Pradesh, cybercriminals are exploiting the festive rush by circulating malicious .APK files disguised as digital wedding invitations. Police across multiple districts have reported a spike in cases where unsuspecting residents lost money after downloading these deceptive files sent via WhatsApp.

Victims say the fraud typically begins with a message from an unknown number containing a supposed wedding card. Believing it to be from a distant relative or acquaintance — common during wedding season — many download the APK file without suspicion. Soon after, their phones begin malfunctioning, followed by notifications of unauthorized bank withdrawals.

In Prayagraj, two residents lost a combined ₹76,000 after receiving similar wedding-invitation APKs. Sunil Yadav, a hotel operator, told police he downloaded the file assuming it was shared by someone he knew. Hours later, cybercriminals remotely accessed his device and emptied his account. In another case, a Tagore Town resident discovered ₹34,347 missing the day after opening a similar file.

Investigators say the APK installs a hidden app that grants criminals remote control of the phone, including access to OTPs, keystrokes, and banking details. Once inside, they move quickly, often completing the fraud within minutes.

Officials warn that attackers are exploiting social habits and trust-based communication patterns. In a country where WhatsApp is widely used for sharing documents, invitations, and personal updates, an unfamiliar attachment can easily slip through without raising suspicion. Many fraudulent messages are crafted in colloquial Hindi, sometimes even using names familiar to the recipient — likely scraped from prior interactions.

Cybercrime units have issued advisories urging the public not to download any .APK file unless the sender’s identity is verified. They caution that the ongoing wedding season has intensified such attacks and expect the trend to continue without greater awareness.

Police continue to investigate the growing number of cases, describing the scam as simple, effective, and tailored to exploit everyday behaviour in increasingly digital households.