Delhi CA Duped Via WhatsApp APK Scam; Cyber Gang Arrested After Rs. 75K Credit Card Fraud

A shocking cyber fraud has been unearthed in Delhi, in which a chartered accountant was cheated through WhatsApp. The CA was defrauded using a file sent on her WhatsApp and was promised that opening this file would increase her credit card limit. However, when she downloaded the file, her phone got hacked, and scammers got access to her Kotak Mahindra Bank credit card. They used her card and made online transactions of about Rs. 75,694 within minutes.

When investigated, officials discovered that gang members involved in fraud previously worked at a credit card company, from where they got access to customer data. The details were utilised to create a fake Kotak Mahindra Bank application in the form of a malicious APK file.

An FIR was registered on February 04, 2026; subsequently, the cyber police introduced a special operation. In which officials traced the delivery of the purchased items to Lakkarpur village in Surajkund, Faridabad, using technical analysis and location tracking.

As a result, the police arrested four individuals concerning the fraud and confiscated four mobile phones. The accused individuals have been recognised as Abhishek Kumar Jha (24), Ashish Kumar Ojha (23), Vivek Kumar, alias Monu (37), and Ikraar (23). The further investigation is ongoing.

The fraudsters used to call random credit card users using fake SIM cards, acting like bank officials. Thereafter, they used to convince people to download a file in exchange for promising them to update or increase their credit card limits. Such files were sent using WhatsApp.

Once the application was downloaded by the users, fraudsters used to get complete access to the user’s phone, credit card, and bank details, using which they used to purchase electronic items from apps like Zepto and get them delivered to Faridabad. Thereafter, these items were sold on OLX and other online platforms.

Individuals should learn from such news and frauds happening nowadays. Avoid clicking on links or downloading files pertaining to unknown sources. Never share your OTPs, passwords, bank details, or personal details with any stranger. Confirm the identity of the person who has sent the message first, before responding to them.