Sign In
By signing in or creating an account, you agree with Associated Broadcasting Company's Terms & Conditions and Privacy Policy.
By signing in or creating an account, you agree with Associated Broadcasting Company's Terms & Conditions and Privacy Policy.
Indian users are being targeted by a wave of fake mobile applications posing as government and banking services, bypassing the latest security systems put in place by Google. These applications usually pose as genuine utilities of a bank, such as SBI or Union Bank, and defraud the users with a harmless update button. Cybersecurity analysts caution that such scams rely on the trust of people and their outdated security practices and cause millions of people to lose their money in the nation.
These fake apps apply a misleading strategy; they trick the user into believing they are an official app, prompting them to update their information, including PAN or bank account details, lest their account be suspended. Although Google has improved its Play Store security measures, such as code scanning in real-time, such apps can bypass these security restrictions by imitating valid interface displays and social engineering. Millions of victims are being reported by authorities; their losses run in the lakhs, as fraudsters continue to perfect their tactics of beating even the most recent protection.
False apps usually present themselves as legal banking or governmental applications with recognisable logos and professional design. They make users update their information by using convincing phishing pages. Cybercriminals collect sensitive data such as card details or login credentials after customers input such information and use it to transact illegally. According to cybersecurity company Cybaverse, such apps have been using Progressive Web Applications (PWAs) to avoid detection by app stores and install directly via malicious links distributed by WhatsApp or Telegram.
Android 13 added real-time code scanning and limited settings that allow Google to fight malicious apps. Nevertheless, fraudsters are catching on, as PWAs and silent-installation tricks help them to bypass detection. Google has deactivated more than 2,500 fake loan apps since 2023, and a new one arises every day. Users are encouraged by experts to confirm apps via the official websites of banks and not to sideload APKs that are not trusted.
The Reserve Bank of India (RBI) and the Indian Cyber Crime Coordination Centre (I4C) have also issued warnings on the existence of fake apps such as the Union-Rewards.apk and Group-S. The government has recapped the money stolen under these schemes, and it is considering tightening its KYC requirements on online lending applications. The Finance Minister Nirmala Sitharaman said that it is now possible to host only RBI-approved apps in the Play Store, but it is difficult to enforce.
To be on the safe side, specialists suggest that one should only download apps on Google Play or official bank websites. Name of the check developer, review reading, and do not use applications that seek too many permissions. In the case of a scam, go to the National Cyber Crime Reporting Portal and call your bank ASAP to freeze accounts. Risks can be minimised further by changing passwords and two-factor authentication.
