Bengaluru: A Bengaluru businessman allegedly lost Rs 5 lakh after downloading a fake wedding invitation sent through WhatsApp, which police suspect contained a malicious APK file designed to steal sensitive data from smartphones.

According to reports, the victim received a WhatsApp message appearing to be a wedding invitation along with an attachment requesting the recipient to download the card for complete event details.

The message read: “We’re happy to invite you to our wedding. Kindly download the attached invitation for complete details of the ceremony. Your presence and blessings will make our special day truly memorable.”

The message further added, “We look forward to celebrating this beautiful moment with you,” along with decorative emojis to make it appear genuine.

Malicious APK file used in scam

Investigators suspect the attachment sent along with the message was a malicious APK file. APK, or Android Package Kit, is the standard file format used for installing applications on Android smartphones.

Cyber experts warn that such files can contain harmful software capable of accessing sensitive information stored on devices, including banking credentials, passwords, messages, and personal data.

After reportedly downloading and installing the file, the businessman allegedly lost Rs 5 lakh from his bank account.

Authorities believe cybercriminals may have used malware to gain unauthorised access to the victim’s mobile device and financial applications.

Similar messages reported across Bengaluru

Local reports indicate that several residents across Bengaluru have received similar WhatsApp messages containing fake wedding invitations and suspicious APK attachments.

Cybersecurity experts have warned the public against downloading application files received from unknown or unverified sources, especially through messaging platforms such as WhatsApp and Telegram.

Officials noted that scammers often disguise malware as invitations, courier tracking links, job offers, photographs, or government notifications to trick users into installing malicious applications.

Police and experts issue warning

Cybercrime officials have urged smartphone users to remain cautious while opening attachments received from unknown numbers.

Experts advised the public to:

  • Avoid downloading APK files shared through WhatsApp or SMS
  • Verify the sender before opening attachments
  • Install applications only from trusted platforms such as Google Play Store
  • Enable two-factor authentication for banking and financial apps
  • Regularly update mobile security software and operating systems

Users have also been advised to immediately uninstall suspicious applications and contact banks if they notice unauthorised financial transactions.

Rising cyber fraud concerns

Cyber fraud cases involving fake links, malicious apps, and phishing attacks have witnessed a sharp increase in recent years across Karnataka and other parts of the country.

Authorities continue to conduct awareness campaigns urging the public to exercise caution while using digital payment platforms and smartphones.

Police are expected to investigate the source of the fake invitation messages and trace the individuals involved in the cyber fraud.