As digital wedding invitations gain popularity, cybercriminals have found a new way to exploit them, using fake invites to lure unsuspecting users into downloading malicious files. A seemingly innocent wedding invitation, shared as a downloadable file on WhatsApp, can become an entry point for scammers to access personal information on users’ phones.
Himachal Pradesh Police have reported that these digital wedding invitations often arrive from unknown numbers with attachments masked as APK files, which install malware on the device. This software grants cybercriminals full access to the phone’s data, enabling them to send messages, steal data, and even extort money from the victim by impersonating them.
How the Scam Unfolds
The scam typically starts with a WhatsApp message from an unfamiliar number, containing a short message about a wedding invitation along with attachments. These attachments, disguised as digital wedding cards, are actually APK files. Once downloaded, they automatically install malware, allowing hackers to monitor the user’s activities and access sensitive information.
According to Senior Police Officer Mohit Chawla of Himachal Pradesh’s State CID and Cyber Crime Department, users should avoid downloading any files from unknown sources and verify the sender’s identity. If an unsolicited message or suspicious invitation is received, users are advised not to open it.
Steps for Protection
To prevent falling victim to these scams, cybersecurity officials advise not to open any files from unknown numbers. In case of cyber fraud, individuals are encouraged to report the incident by dialing the national cybercrime helpline at 1930 or visiting the official portal to register a complaint.