A 74-year-old former consultant in Ahmedabad allegedly lost Rs 15.5 lakh after opening a WhatsApp message containing what appeared to be a wedding invitation.

The incident is the latest reminder of how cybercriminals are increasingly using familiar and seemingly harmless messages to trick people into installing malicious applications.

WhatsApp wedding invitation turns into a trap

According to the complaint, the elderly man received a WhatsApp message containing a wedding invitation in the form of an APK file. Believing it to be genuine, he opened the file on his mobile phone.

An APK is an Android application package. Installing an application from an unknown source can give malicious software access to sensitive information or device functions.

Soon after opening the purported invitation, the victim reportedly noticed unusual activity involving his bank account.

Multiple UPI transfers drain savings

The fraudsters allegedly carried out multiple UPI transactions, eventually siphoning off Rs 15.5 lakh from the man’s account.

The victim approached the police after discovering the unauthorised transactions. An investigation has been initiated to trace the people behind the alleged fraud and determine how the transactions were carried out.

Cybersecurity officials have repeatedly cautioned people against opening APK files received through WhatsApp or other messaging platforms, particularly when the sender is unknown or the message appears unexpected.

A simple invitation can hide a serious threat

The case highlights how cyber fraudsters can exploit occasions such as weddings to make malicious messages appear trustworthy. A message promising details of a wedding invitation may encourage recipients to act without checking its source.

People are advised not to install APK files received through unsolicited messages and to verify invitations directly with the sender before opening attachments or links.