Inside the APK scam: how fake apps are used for financial fraud , Pg9

Key Highlights:

• APK fraud is rapidly increasing in India, with a 900% surge in cybercrimes between 2021 and 2025.
• Between January and July 2025, 2,188 cases of APK fraud were reported in Telangana, resulting in losses of ₹779.06 crore.
• Fraudsters use fake apps that mimic official portals to steal money, with daily losses ranging from ₹10 to ₹15 lakh.
• Cybercrime officials estimate that 60-70% of malicious APKs used in India are developed locally.

Detailed Insights:

• APK files are exploited by fraudsters to spread malware by mimicking official apps and government schemes.
• Fraudsters circulate these fake apps through social media platforms, urging users to act immediately.
• Encryption techniques are used to hide malicious code, allowing APKs to bypass antivirus software.
• Victims are targeted through leaked databases containing personal information, enabling customized fraud attempts.
• Cyber forensics teams face challenges in decrypting fraudulent apps, with limited success in tracing masterminds.
• Mule accounts are used to receive stolen funds, which are quickly converted into cryptocurrency, complicating investigations.
• Google has removed nearly 50 malicious apps, but fraudsters continue to use mule accounts and shell identities.

Key Concepts Involved:

• APK (Android Package Kit): File format used to distribute and install applications on Android devices.
• Malware: Software designed to intentionally cause damage to a computer, server, or computer network.
• Encryption: Process of converting information into a code to prevent unauthorized access.
• Mule Account: Temporary bank or wallet account used to receive stolen funds.