How replying to WhatsApp message can cost you fortune

Many people fall victim to money fraud when they share a One-time Password (OTP) or click on a link to open a file on their mobile phone. But can you lose money without sharing an OTP or clicking on any link?

In Hyderabad, a new WhatsApp scam has been reported where a person lost money without sharing an OTP or clicking on a link.

Hyderabad City Police Commissioner VC Sajjanar recently said that a chartered accountant lost lakhs of rupees from their account, falling victim to a WhatsApp message fraud.

Sajjanar said that a fraudster sends a fake WhatsApp message from an unknown or international number, telling the person that money has been debited from their bank account.

After this message, a second message also follows, which reads, “If you did not make this transaction, reply NO.”

Since the victim hasn’t made a transaction, in a panic, they write a ‘No’ in their reply.

Just by writing a ‘No’, hidden links and malware scripts in the message activate on their own. This is known as an auto execution file attack.

The attack gives hackers full control of the victim’s phone. Within moments, money disappears from the victim’s account.

Once cases of WhatsApp fraud were reported, Sajjanar also told what people receiving similar messages should do-

The commissioner has advised not responding to a WhatsApp message about bank transactions from unknown numbers, not even with a 'Yes' or a 'No'.

Sajjanar advises blocking the number first and then deleting the message.

He says if you get a debit alert, don’t panic. Log in to your official net banking or mobile app and check your statement, says Sajjanar.

The Hyderabad city commissioner says that no bank asks for 'Yes' or 'No' replies on WhatsApp.

If in doubt, call only the official toll-free customer care number on your passbook or the back of your card, the commissioner says.

If you receive a similar message on your WhatsApp number or a call, call the national cyber helpline 1930 immediately.

You can also file a complaint at http://cybercrime.gov.in.

If you report the fraud in the first hour, also known as the golden hour, it provides you with the best chance to freeze fraudsters’ accounts.

The Press Information Bureau’s Fact Check team has also highlighted a WhatsApp scam on its X page, where it told how two retired principals from two different cities lost Rs 64 lakh in a WhatsApp scam.

According to the PIB Fact Check team, in March 2025, a retired college principal from Delhi received a phone call, where the fraudster informed them that their Know Your Customer (KYC) had expired, and if they didn’t update it, their KYC would remain expired. After a 40-minute call, the principal lost Rs 47 lakh.

The PIB team says that another case happened in Mumbai, also with a college principal, who got a call from a fraudster. The person asked the principal to download an app for voter verification. Within minutes, Rs 17 lakh was gone from the principal’s bank account.

Both received a call from an unknown number, and both were asked to download an APK file.

The Fact Check team says such APK files are potentially disguised as an e-challan, electricity bill, KYC update, or even a wedding invitation.

Such malicious APKs can expose sensitive data and put your bank account at risk, the team says.

The Fact Check team advises people to-

·Stay alert. Never install APKs sent by unknown sources

·Verify requests through official channels

·Suspect cyber fraud? Call 1930 and report at http://cybercrime.gov.in

·Don’t let one tap cost you your savings