Mangaluru: A 44-year-old man allegedly lost Rs 1,78,191 in a cyber fraud after downloading an application called XM TV, advertised on social media as providing free access to all television channels. The fraud reportedly involved multiple unauthorised transactions from the victim’s bank accounts over three days.

According to a complaint registered at the Mangaluru CEN Crime Police Station, the victim downloaded the application after coming across an advertisement while browsing Facebook at his residence on October 15.

Fraudulent transactions from bank accounts

The complaint states that the victim began losing money from his bank accounts the following day. On October 16, Rs 30,191 was allegedly transferred from one of his accounts through UPI transactions without his knowledge or consent.

On October 16, the victim’s account was reportedly debited through these unauthorised transactions, adding to the financial loss associated with the alleged cyber fraud. The complaint further stated that additional amounts were transferred from another bank account over the following two days.

On October 16, Rs 30,191 was transferred through UPI transactions from one account. On October 17, another Rs 50,000 was allegedly transferred without the victim’s authorisation.

The largest reported transaction occurred on October 16, when Rs 98,000 was allegedly transferred from one of his bank accounts without his permission.

The total amount lost through the reported transactions came to Rs 1,78,191.

Victim discovers fraud after checking bank balances

The victim reportedly remained unaware of the extent of the alleged fraud until October 18, when he checked the balances in his bank accounts.

He was shocked to discover that no money remained in his accounts. Suspecting that he had been targeted by cybercriminals, he subsequently approached the police and lodged a complaint.

During the preliminary investigation, police found that an APK file had been downloaded onto the victim’s mobile phone. The download followed his encounter with the Facebook advertisement promoting XM TV as an application offering free access to television channels.

The circumstances surrounding the download and the subsequent unauthorised transactions are being investigated.

APK files can pose cybersecurity risks

APK stands for Android Package Kit, the file format used to distribute and install applications on Android devices. While APK files are a legitimate means of installing Android applications, downloading them from unverified sources can expose users to security risks.

Fraudulent applications may seek excessive permissions, collect sensitive information or facilitate unauthorised access to data on a device. Depending on the application’s capabilities and the permissions granted, malicious software may also compromise financial information or assist fraudsters in carrying out transactions.

Cybercriminals may use advertisements on social media platforms to attract users with offers such as free entertainment, discounted products or exclusive services. Users who download applications without verifying their authenticity risk installing software that could compromise their devices or personal information.

However, the presence of an APK file on a phone does not, by itself, establish that the file was malicious. The nature of the downloaded application and its role in the reported transactions will need to be established through the police investigation.

Police investigate the cyber fraud

The complaint alleges that an unidentified person fraudulently transferred a total of Rs 1,78,191 from the victim’s bank accounts through multiple transactions.

Police are investigating the case to determine how the transactions were carried out and who was responsible for the alleged fraud. Further details about the source of the application, the method used to access the victim’s accounts and the possible recovery of the money were not immediately available.

The incident highlights the importance of exercising caution when downloading applications advertised on social media. Users are advised to install applications through trusted sources, verify the developer’s identity and avoid granting unnecessary permissions.

People should also refrain from sharing banking credentials, UPI PINs, passwords or one-time passwords (OTPs) with anyone. Regularly checking bank statements and enabling transaction alerts can help users identify suspicious activity at an early stage.

Anyone who notices unauthorised financial transactions should immediately contact their bank and report the incident through India’s cybercrime helpline, 1930, or the official National Cyber Crime Reporting Portal.

The investigation into the Mangaluru case is continuing.