A Hyderabad resident has reportedly lost nearly ₹1 lakh after falling victim to a sophisticated cyber fraud involving a fake phone software update. The incident has once again highlighted the growing threat of malware-based scams targeting smartphone users.
According to cybercrime officials, the victim had downloaded an application after clicking on a link that appeared to be genuine. Soon afterward, the phone displayed what looked like a regular software update notification. Believing it to be an authentic system update, the user allowed the process to continue.
However, the update was actually malicious software designed to take control of the device. Once installed, the malware gained unauthorized access to sensitive information stored on the phone, including banking-related data and one-time passwords (OTPs). The victim also noticed that several applications stopped functioning properly, while UPI services became inaccessible.
When the victim later checked his bank account, he discovered that around ₹1 lakh had been transferred without his knowledge or permission. He immediately approached the cybercrime police and lodged a complaint. Authorities have launched an investigation to trace the fraudsters and recover the stolen money.
How the scam worked
Investigators believe the fraudsters used malware disguised as a software update. Once installed, it secretly collected confidential information, intercepted messages and OTPs, and enabled unauthorized banking transactions. Such scams often spread through fake advertisements, WhatsApp messages, SMS links, or unofficial websites.
Police advisory
Cybercrime officials have urged smartphone users to remain cautious and follow these safety measures:
- Download apps only from official app stores.
- Never install APK files received through WhatsApp, SMS, email, or social media.
- Ignore unexpected software update prompts that appear outside your phone’s official settings.
- Regularly update your device using only the manufacturer’s official update system.
- Enable two-factor authentication for banking applications.
- If money is lost in a cyber fraud, immediately call the national cybercrime helpline 1930 or report the incident through the National Cyber Crime Reporting Portal to improve the chances of freezing the stolen funds quickly.
Rising cyber threats
Cybersecurity experts warn that criminals are increasingly using fake software updates and malicious applications to infect smartphones. Once malware is installed, attackers may gain access to banking credentials, OTPs, and personal information, allowing them to carry out unauthorized financial transactions. Users are advised to stay alert and verify every download before installing it on their devices.
