Hyderabad police have issued a public warning about a new WhatsApp fraud involving fake bank debit alerts. Replying 'NO' to these messages triggers a malware script, granting scammers access to banking apps. This incident highlights the growing cybersecurity risks facing digital banking users across India.
Hyderabad police have issued a critical warning regarding a sophisticated banking scam targeting WhatsApp users. The fraud involves attackers sending fake transaction alerts from unknown numbers, falsely claiming that a sum of money has been deducted from the recipient's bank account.
The trap relies on a combination of panic and automated technology. The fraudulent message prompts the user to text back 'NO' if they did not authorize the transaction. Unlike traditional phishing attempts that often require the user to click a malicious link or share a One-Time Password, this new vector is more direct. The act of replying triggers an automated malware script embedded within the message thread. This script can grant attackers unauthorized access to the victim's device, effectively allowing them to bypass security layers and navigate banking applications to potentially drain accounts.
For the Indian banking sector, this scam highlights the ongoing tension between rapid digital adoption and cybersecurity risks. As banks push for higher penetration of UPI and mobile banking apps, operational risks like mobile-based fraud remain a persistent challenge. Financial institutions are increasingly investing in robust cybersecurity infrastructure and customer awareness programs to combat these evolving threats, as maintaining user trust is essential for the continued growth of digital payment platforms.
Authorities emphasize that legitimate banks do not use WhatsApp to conduct authentication or resolve transaction disputes. If a user receives an unsolicited financial notification, the safest immediate action is to block the sender and delete the conversation thread. Any legitimate concerns regarding account activity should be handled strictly through the bank’s official mobile portal, verified app, or known customer service helpline.
Time is critical in cases of suspected fraud. The government urges citizens to contact the national cybercrime helpline at 1930 immediately if they believe their device has been compromised. Early reporting is essential for authorities to freeze funds before they are transferred across multiple accounts, which is a common tactic used by cybercriminals to launder stolen money.