Fake "MParivahan" APK sent on WhatsApp led to Rs 5.9 lakh credit-card fraud in Ahmedabad
The420.in reported on 1 November 2026 that an Ahmedabad man allegedly lost Rs 5.9 lakh after opening a fake “MParivahan” APK sent on WhatsApp, with card purchases and OTPs following. The method of compromise has not been established.
- First reported
- Reports
- 1
Source: the420.in · published
What happened
The420.in reported on 1 November 2026 that a 35-year-old operations manager in Ahmedabad allegedly lost Rs 5.9 lakh after opening an Android installation file named “MParivahan” that arrived on WhatsApp in the first week of May. Believing it was a genuine transport-related application, he opened the file. He later suspected that it had let fraudsters access his phone and divert incoming calls to another number. The report is based on his complaint, and the exact method used to compromise the phone has not been established.
How the scam works
Several days later, the man checked his email and found bank alerts for two unauthorised credit-card transactions totalling Rs 5.9 lakh. They had been processed through an online shopping platform where his card details were already saved. When he looked at the shopping account, he found two invoices for mobile phones that he had not ordered. Around the same time, one-time password (OTP) messages from several companies started arriving on his phone. He suspected that the call diversion had let the fraudsters intercept authentication codes, although the report says the exact sequence is still being examined.
He contacted his bank and blocked the affected credit card, and blocked credit cards linked to his other bank accounts as a precaution. He formatted his phone to remove the suspected malicious application, reported the incident to the national cybercrime helpline 1930 and gave a written complaint to the cybercrime police station, asking for action against those responsible.
The case illustrates a pattern seen with fake government or transport apps. A file sent on WhatsApp with a familiar-sounding name is opened as an installer; if permissions are granted, it may read SMS messages or forward calls. Saved cards on shopping accounts and OTPs sent by SMS can then be enough for purchases. The genuine mParivahan app is not delivered as a file on WhatsApp and is available through the official app stores.
Source
The420.in, “Fake mParivahan App Leads to ₹5.9 Lakh Cyber Fraud”, 1 November 2026, based on the victim's complaint.
Red flags
- An app or APK file sent on WhatsApp, with a name copying a government or transport service such as “MParivahan”.
- A request to install an app from a file instead of the official app store.
- Unexpected OTP messages from several companies arriving after you installed an app.
- Calls no longer arriving because they were diverted to another number.
- Unfamiliar orders or bank alerts for cards saved on shopping accounts.
If you were targeted
- 1Do not open or install APK files sent through WhatsApp or SMS; get transport apps only from official stores.
- 2If you installed one, switch off mobile data, remove the app, run a security scan and consider a factory reset.
- 3Call your bank to block cards, and remove saved cards from shopping accounts.
- 4Check whether call forwarding has been turned on, and disable it with your mobile operator.
- 5Report on the helpline 1930 or at cybercrime.gov.in and file a complaint with the cybercrime police.