Hyderabad Police Issues Warning on WhatsApp Banking Scam

Hyderabad Police Commissioner V C Sajjanar has issued a critical warning regarding a new form of cyber fraud involving WhatsApp messages. He cautions that replying 'NO' to unsolicited messages about unauthorised bank debits could expose individuals to financial theft without the need for an One-Time Password (OTP) or links.

This alert follows reports of a chartered accountant losing a significant sum in a similar scam. According to Commissioner Sajjanar, fraudsters initiate the scam with messages claiming that an amount has been debited from the recipient's bank account. A subsequent message instructs the recipient to reply 'NO' immediately if they did not authorise the transaction. This tactic is designed to induce panic, leaving little time for the recipient to think rationally before responding.

If a recipient replies to these messages, they may unwittingly download malicious software that can potentially allow criminals to take control of their devices and access their financial information. Although the exact mechanisms behind this new type of attack have not been detailed in reports, it stands apart from traditional phishing methods that often rely on fake websites and suspicious links.

Sajjanar emphasised that individuals should be highly cautious about such unsolicited messages and should refrain from responding to unfamiliar numbers. 'Just because there is no OTP request or clear link, that does not mean a message is genuine,' he stated.

To mitigate risks, the commissioner advises recipients to block the sender, delete the chat, and review any questionable debits through their bank's official channels. He also reminded the public that legitimate banks will never ask for transaction confirmations via WhatsApp messages from unknown numbers.

As part of a growing trend, cybercriminals are increasingly utilising messaging platforms to distribute harmful applications while impersonating financial entities. Previous reports, such as one from India Today, indicated that scammers disguising themselves as bank employees have been sending out malicious Android Application Package (APK) files via WhatsApp under the pretence of completing Know Your Customer (KYC) procedures.

These malicious applications can solicit permissions that may compromise sensitive personal information or facilitate unauthorised access to devices. While replying to a message does not necessarily infect a smartphone automatically, users should remain vigilant and exercise caution.

In the event of an unauthorised debit from an account, individuals should act swiftly by contacting their bank, reporting the transaction, and requesting further monitoring of their accounts. Sajjanar also encouraged contacting India's national cybercrime hotline at 1930 or filing a complaint with the National Cyber Crime Reporting Portal for swift intervention.

The commissioner reiterated, 'Do not panic if you receive messages stating that money has been taken from your account. Always verify transactions independently and do not let unsolicited messages dictate your actions.'