Digital wedding invites to wipe out your savings, warn Raj police

Jaipur: Rajasthan Police Saturday issued a cyber alert warning that a simple click on a digital wedding invitation could give fraudsters access to phones and bank accounts, as cyber criminals exploit the ongoing wedding season.

Officials said scammers are circulating fake wedding cards on WhatsApp, using malicious files and links to steal personal data and siphon off money. Police have urged people to stay cautious as such cases see a spike during festive and wedding months.

According to DIG (Cyber Crime) Shantanu Kumar Singh, fraudsters are using emotionally persuasive messages and familiar identities to lure users.

Police outlined three key methods being used in the scam. In one, fraudsters send a file labelled Marriage.apk. Once downloaded, it installs malware that can access the phone’s camera, microphone, messages and OTPs, allowing hackers to breach bank accounts.

In another method, users receive a shortened web link posing as a wedding invite. Clicking it either leads to a fake page seeking personal details or silently installs spyware on the device.

A third tactic involves hijacked WhatsApp accounts. Fraudsters impersonate known contacts and send messages such as asking the recipient to “check wedding venue details”, increasing the chances of the link being opened.

Police advised users to avoid downloading APK files, verify suspicious messages by calling the sender, and refrain from clicking on unknown or shortened links. Officials also recommended keeping mobile security features such as Google Play Protect enabled.

Victims were urged to immediately report incidents on the cyber helpline 1930, through the national cybercrime portal, or at the nearest police station.

BOX

What is an APK file?

* Android Package Kit is the file format used to install apps on Android devices

* Used to manually install apps outside official app stores

* Contains all app components (code, permissions, resources)

* When opened, Android installs the app directly

* Once installed, the app runs like any normal application

* Can be modified to include malware or spyware

* Often bypass official security checks

* May silently access sensitive data

* Can intercept OTPs and banking details

Other methods used alongside APK scams

* Fake links leading to phishing pages or spyware downloads

* Shortened URLs that hide malicious destinations

* Hijacked contacts to make messages appear trustworthy

How to stay safe

* Do not download APK files

* Avoid clicking on unknown or shortened links

* Keep Google Play Protect enabled

* Install apps only from trusted app stores

* Install apps only from trusted app stores