Nagpur woman loses Rs 8.99 lakh after APK file opened on WhatsApp

A fresh case of cyber fraud has come to light in the Koradi police station area of Nagpur. Cyber criminals allegedly withdrew Rs 8.99 lakh from a woman's bank account. The route of the fraud was an APK file that arrived on her mobile phone and was clicked. Koradi police have registered a case on a complaint and begun an investigation.

According to police, Geeta Raju Vairagade (54), a resident of Koradi, sold her land last year. She received Rs 10 lakh from the deal on June 10, 2025, and deposited the money in a Canara Bank branch at Bokhara. The money from the land sale was a major part of her savings.

It is said that between October 13 and 22, 2026, an APK file was sent to the woman's WhatsApp from a number. The woman's son clicked on the file. Money then began to leave the account. It is alleged that the fraudsters made several separate transactions and transferred a total of Rs 8.99 lakh to another account.

Preliminary information suggests the incident is linked to the APK file sent to the phone. However, many things remain unclear. The number from which the file was sent, how access to the phone or bank account was gained through it, and the accounts to which the money went all need to be investigated.

APK stands for Android Package Kit. It is a file used to install apps on Android phones. Apps are usually downloaded from official app stores, but cyber criminals at times send suspicious APK files through WhatsApp or other channels. Installing such a file or granting it permissions can put a phone's security at risk. Some malicious apps can be used for suspicious activity such as accessing sensitive information or reading messages.

It cannot be said with certainty, however, that the money left the account merely because the file was clicked. The actual method of the fraud will become clear only after a technical investigation.

Police will now try to establish who sent the APK file, which bank accounts the money went to, and who is behind the crime. Digital evidence from the phone and details of the bank transactions may be important in tracing the accused. No lead on the accused has been found so far. Only after the investigation will it be known what technique was used in the fraud and how likely it is that the money can be recovered.

The incident is a fresh reminder to be wary of unknown files that arrive on a phone. Even if a file comes in the name of someone known, it should not be installed without confirmation. Do not share an OTP, PIN, password or any other confidential banking information with anyone.

If an unauthorised transaction is detected in an account, contact the bank immediately and take the steps needed to secure the account and digital payments. Cyber crime can be reported on the national cyber crime helpline 1930 or on the official portal cybercrime.gov.in. A small digital lapse can cause a big financial loss, so it is vital to stay away from unknown APK files.