Particle.news

Multiple Arrests in Linked APK Banking Scams Across India

Investigators say malicious Android APKs were used to hijack phones, intercept OTPs and funnel stolen money through mule accounts while police trace the proceeds and widen the probe.

Overview

  • Police arrested several suspects after operations on Sunday that included two arrests in Delhi, one arrest in Aurangabad, Bihar, and four arrests in Varanasi tied to a large fraud investigation.
  • Authorities say attackers sent malicious APK files that, once installed, gave criminals background access to phones and enabled SMS forwarding to capture OTPs needed for unauthorised bank transfers.
  • Varanasi police linked one gang that used an APK called XePay to 143 complaints on the National Cyber Crime Reporting Portal, 41 bank accounts and alleged fraud of about ₹116.86 crore.
  • Officers recovered phones, SIMs, debit cards, chequebooks, laptops and QR scanners from the accused, and investigators are using IP logs, call records and transaction trails to map modular roles such as APK distribution, mule‑account procurement and cash withdrawal.
  • Police warned people not to install apps from unknown sources and advised safeguarding OTPs and banking details as probes continue to identify more suspects and trace where stolen funds moved.