Fake Wedding Invitations on WhatsApp Lead to Costly Scams

In the midst of India's bustling wedding season, cybercriminals are exploiting the festive atmosphere by disseminating fake wedding invitations via WhatsApp. These deceptive messages contain malicious APK files that, when downloaded, install malware on the recipient's device, granting unauthorized access to personal and financial information.

Modus Operandi of the Scam

Victims receive a WhatsApp message from an unknown number, often bearing a familiar name, accompanied by a seemingly legitimate wedding invitation in PDF format. This file is, in reality, an APK (Android Package Kit) that, once opened, installs malware on the device. This malware can access sensitive data, including banking apps, OTPs, and account details, enabling it fraudsters to execute unauthorized financial transactions. 

This Incidents Across India

Several states have reported incidents linked to this scam. In Rajasthan, a victim suffered a loss of ₹4.5 lakh after opening a counterfeit wedding invitation. Law enforcement agencies in Himachal Pradesh, Rajasthan, Uttar Pradesh, Telangana, and Gujarat have issued warnings about the increasing prevalence of these scams. 

Recommendations for Protection

To safeguard against such scams, cybersecurity experts advise:

• Verify Invitations: Confirm the authenticity of digital wedding invitations by contacting the sender or the couple directly before opening any attachments.

• Avoid Suspicious Links: Refrain from clicking on unfamiliar links or downloading attachments from unknown sources.

• Use Separate Payment Accounts: Utilize digital wallets linked to secondary accounts for daily transactions to minimize risk to primary savings accounts.

• Update Security Measures: Ensure that your device's operating system and security software are up to date to protect against the latest threats.

• Spread Awareness: Educate your community about such scams to enhance collective vigilance.

Immediate Actions if Targeted

If you suspect that you've been targeted by this scam:

• Report Unauthorized Transactions: Immediately inform your bank or credit card provider to prevent further misuse.

• Change Passwords: Update all passwords associated with financial and email accounts to secure them against unauthorized access.

Rising Financial Losses Due to Cyber Scams

The proliferation of fake wedding invitation scams is part of a broader surge in cyber fraud. In the first four months of 2024, over ₹1,750 crore was lost to online scams, with a notable increase in such incidents in Maharashtra, Rajasthan, and Gujarat. Additionally, UPI-related frauds have escalated, with ₹485 crore lost in the first half of the financial year 2024-25, involving 632,000 incidents. 

Collaborative Efforts to Combat Fraud

To effectively counter these scams, a coordinated approach is essential. Financial institutions and government agencies should organize awareness campaigns, and collaboration between banks, tech companies, and regulators is crucial for sharing resources and data. Regulatory bodies, including the Reserve Bank of India, continue to issue advisories to help individuals stay vigilant against emerging threats in an increasingly digital world.