Retired Army officer tricked into downloading malicious APK file, ‘duped’ of over Rs 12 lakh

Retired Army Officer Loses Rs 12 Lakh to Cyber FraudA retired Army officer from Chandigarh has fallen victim to a cyber fraud, losing over Rs 12 lakh after he was tricked into downloading a malicious APK file on his mobile phone.According to an FIR registered at the Cyber Crime Police Station, Chandigarh, the victim, Colonel Rajbir Singh Duggal (82), a city resident, reported that the fraud took place when he attempted to book a courier pickup online. He searched the internet for the contact number of Blue Dart Courier to send a parcel to Pune and called a number found through Google search. His call was allegedly transferred to a person posing as an online executive who asked him to make an online payment of Rs 10 to confirm the parcel pickup.Duggal first attempted the payment through his SBI account, but the transaction failed. He then made the payment successfully through his HDFC credit card. Later, the alleged fraudster contacted him on WhatsApp and asked him to download an APK file, claiming that it was required to process the courier pickup request. After downloading and installing the file, Duggal’s mobile phone was allegedly compromised.The following day, on March 10, he started receiving several SMS alerts regarding transfers and cancellations from his SBI savings account, which he had neither authorised nor noticed immediately. Upon checking his bank account, Duggal discovered that a total amount of Rs 12.05 lakh had been fraudulently withdrawn by unknown persons.### How APK Files Drain Bank AccountsCybercrime officials said such incidents are increasingly being reported, where fraudsters exploit malicious APK files to gain unauthorised access to victims’ smartphones and banking applications.A Venkatesh, DSP, Cyber Crime, Chandigarh Police, said: “.apk stands for Android Package Kit, which is the installation file format for Android applications, similar to .exe files used in Windows computers.” These files are generally downloaded from trusted platforms such as the Google Play Store, but cybercriminals often trick victims into installing malicious APK files through links shared via WhatsApp, SMS, or social media platforms.According to the Cyber Crime Police, attackers commonly send deceptive messages claiming that the recipient needs to install an app to get a loan approved, update KYC details to prevent account suspension, confirm a parcel delivery, or claim cashback or rewards. Such messages often create a sense of urgency and trust by using the logos and names of banks, courier companies or government agencies.### Importance for StudentsThis incident highlights the importance of being cautious while downloading and installing apps on mobile phones. Students should be aware of the risks associated with malicious APK files and take necessary precautions to protect their personal and financial information.Category: Cyber SecurityMetaTitle: Retired Army Officer Loses Rs 12 Lakh to Cyber FraudMetaDescription: A retired Army officer from Chandigarh was duped of over Rs 12 lakh after cyber fraudsters tricked him into downloading a malicious APK file on his mobile phone.Keywords: cyber fraud, APK file, mobile phone security, banking details, financial informationpubDateISO: 2026-03-16sourceName: Indian Express