Fake RTO APK Scam: Cybercriminals Misuse IPS Officer’s Photo To Target WhatsApp Users, Steal Sensitive Data

Police in Chhatrapati Sambhajinagar Rural have booked unidentified cybercriminals for allegedly circulating a fake RTO APK via WhatsApp, using an IPS officer’s photograph to appear genuine. The malware, sent through fake traffic-fine messages, can steal contacts, messages, photos, documents, banking details and OTPs and provide hackers unauthorised access to victims’ devices.

Add FPJ As a
Trusted Source
Fake RTO APK Scam: Cybercriminals Misuse IPS Officer’s Photo To Target WhatsApp Users, Steal Sensitive Data
Somendra Sharma Updated: Monday, August 24, 2026, 04:02 PM IST
Fake RTO APK Scam: Cybercriminals Misuse IPS Officer’s Photo To Target WhatsApp Users, Steal Sensitive Data

Fake RTO APK Scam: Cybercriminals Misuse IPS Officer’s Photo To Target WhatsApp Users, Steal Sensitive Data | Representational Image

Mumbai: Police have registered a case against an unidentified cyberfraudster for allegedly using a photograph of an IPS officer to circulate a malicious apk file mimicking Regional Transport Office (RTO) communications.

Also Watch:

According to police, head constable MN Wagh of the Cyber Police Station, Chhatrapati Sambhajinagar Rural, filed the complaint after authorities flagged suspicious activity on Threads. An Instagram profile had posted warnings about a deceptive WhatsApp message.

The fraudsters allegedly circulated the apk file through WhatsApp with a message claiming the recipient's vehicle had an outstanding traffic fine. To lend credibility, they used a WhatsApp account registered in a woman's name and the official photograph of the Superintendent of Police, Chhatrapati Sambhajinagar Rural, as its profile picture. Police suspect the photograph was downloaded from their website.

Investigation revealed that the WhatsApp account belonged to a woman and had been hacked by cyber-criminals on July 30.

Police warned that installing the fake RTO application gives hackers unauthorised backend access to the device, enabling them to monitor and steal sensitive data, including contacts, text messages, private photographs, personal documents, banking credentials and OTPs. The malware is designed to run after installation, giving attackers control of the handset while users remain unaware that their data is compromised.

The Cyber Police registered a case against unidentified cyber-criminals under Sections 66C (identity theft) and 66D (cheating by personation using a computer resource) of the Information Technology Act.

To get details on exclusive and budget-friendly property deals in Mumbai & surrounding regions, do visit: https://budgetproperties.in/ 

Published on: Monday, August 24, 2026, 04:02 PM IST

RECENT STORIES