🚨 The ".APK" Warning
Banks NEVER ask you to download an app via a link (APK file).
- ❌ If a support executive sends a link on WhatsApp: IT IS A SCAM.
- ❌ If an SMS link downloads a file named "SBI_KYC.apk": IT IS A VIRUS.
- ✅ Always download apps ONLY from the Google Play Store or Apple App Store.
1. The "Panic" Trigger (The Hook)
This scam relies on urgency. You get an SMS:
"Dear Customer, your HDFC Account will be BLOCKED today due to incomplete KYC. Click here to update immediately."
Out of fear, you click. A website opens that looks exactly like the bank's login page. It asks you to download a "Support App" to complete KYC via video call.
2. The Technical Attack: "Screen Mirroring"
The app you downloaded is often a legitimate tool like AnyDesk, TeamViewer QuickSupport, or RustDesk, OR a custom malware disguised as a bank app.
How they steal your OTP without you telling them:
- Permissions: The app asks for "Accessibility Services" or "Screen Casting" permission.
- The Code: The scammer asks you for a 9-digit code displayed on the app.
- Connection: Once you give that code, they can see your mobile screen on their computer.
- The Theft: They trigger a transaction. The OTP comes to your phone. They see the OTP on your screen (via screen share) and enter it on their side. Money gone.
3. The "SMS Forwarder" Malware
Some fake apps (like "SBI Reward Points") work differently. They don't share the screen; they hijack your SMS.
- You install the app and grant "SMS Permission".
- The app runs in the background.
- When the bank sends an OTP, the malware intercepts it, forwards it to the scammer's server, and deletes the SMS from your inbox.
- You never even realize an OTP came!
FinKinetic Pro Tip: The "Unknown Apps" Toggle
Go to your Phone Settings -> Search for "Install Unknown Apps".
Ensure that Chrome, WhatsApp, and SMS apps are set to "Not Allowed". This prevents accidental downloading of malicious APK files from links.
4. Immediate Action Plan: "My Phone is Hacked!"
If you suspect you installed a bad app, speed is key.
🚨 Emergency Protocol
Flight Mode ON
Immediately turn on Airplane Mode or switch off the WiFi/Data. This disconnects the hacker from your screen.
Uninstall the App
Go to Settings -> Apps. Find the suspicious app (it might have no name or a blank icon). Uninstall it.
Call Your Bank (From Another Phone)
Use a family member's phone to call your bank's customer care. Ask them to freeze your account and disable Net Banking/UPI temporarily.
Factory Reset (Crucial)
Malware often hides deep in the system. The safest way to ensure your phone is clean is to back up your photos/contacts and perform a full "Factory Data Reset".
5. Frequently Asked Questions (FAQ)
I only gave the 9-digit code, not my password. Is it safe? ▼
NO. That 9-digit code gave them control of your screen. If you typed your password while they were watching, they saw it.
Is online KYC safe? ▼
Yes, but ONLY if you initiate it through the bank's official app (downloaded from Play Store). Never do KYC by clicking links sent via SMS.
Can iPhone users get these viruses? ▼
It is much harder on iPhones because Apple blocks "sideloading" (installing apps from outside the App Store). However, iPhone users can still fall for "Phishing Links" (fake websites).