Karnataka is witnessing a sharp increase in Android Package Kit (APK) fraud cases, with cybercrime investigators warning that malware-based scams are becoming one of the fastest-growing digital threats in the state.
According to exclusive data accessed by reports, APK fraud cases in Karnataka rose by nearly 190.46 per cent, increasing from 325 cases in 2024 to 944 cases in 2025. Authorities said the state has already recorded 458 cases till April this year, raising fears that the total could cross 1,300 cases by the end of 2026 if the trend continues.
Unlike digital arrest scams or investment fraud schemes, APK fraud typically works by tricking users into downloading malicious Android application files sent through platforms such as WhatsApp and Telegram.
Cybercriminals reportedly create urgency through fake messages claiming pending electricity bills, KYC verification requests, wedding invitations, reward points or banking alerts. These messages often contain APK files disguised as legitimate applications.
Cybercrime officials explained that once installed, these malware-infected files can secretly gain access to sensitive information on mobile devices. Investigators warned that certain APK malware variants allow fraudsters to intercept OTPs, steal banking credentials and even remotely access microphones, cameras, messages, documents and photographs.
Police also stated that compromised phones may automatically forward malicious files to saved contacts and WhatsApp groups, increasing the spread of the scam.
Senior citizens and people with limited technical knowledge are reportedly among the most affected victims. In some cases, children accidentally installing APK files on family devices have also led to data compromise.
Cybercrime officials advised Android users never to install applications received through unknown links or messaging platforms. Authorities specifically warned users against enabling the “Install from Unknown Sources” option, which allows third-party APK files to be installed outside official app stores.
Police said prevention and public awareness remain the most effective defence against such frauds while investigations continue into multiple organised cybercrime networks operating across platforms