Mumbai Cyber Fraud: 36-Year-Old Police Constable Duped Of ₹7.54 Lakh After Installing Fraudulent APK From WhatsApp Group; Case Registered

Mumbai: In a shocking case of cyber fraud, a 36-year-old Mumbai Police constable has allegedly lost Rs 7.54 lakh after unknowingly installing a malicious APK file sent via “Mohalla Committee Trombay” WhatsApp group.

Trombay Constable Clicks on Malicious ‘RTO Challan.apk’ Shared in WhatsApp Group

The incident occurred when Sachin Uttam Kashid, posted at Trombay Police Station, clicked on a suspicious file named "RTO Challan.apk", which granted cybercriminals access to his mobile phone and banking details.

According to the FIR, Constable Kashid, a resident of Sector 35, Kharghar, Navi Mumbai, has been serving at Trombay Police Station since September 2024, currently assigned as a Mill Special.

He is part of the “Mohalla Committee Trombay” WhatsApp group, which includes officers, staff, and prominent local citizens to facilitate communication on law and order matters.

On the afternoon of July 22, at around 4:14 PM, a member of the group unknowingly forwarded the APK file. Thinking it to be a legitimate document, Kashid clicked on the file. While it failed to open, it silently compromised his device, allowing the hackers to take control.

Cybercriminals Transfer Loan Money Via CCAHPPAY Payment Gateway

Within an hour, suspicious financial activity began. Kashid began receiving transaction alerts. At 5:53 PM, he received a message indicating a personal loan of Rs 7.58 lakh had been credited to his bank account. Minutes later, two separate transactions of Rs 4,99,007 and Rs 2,55,007 were debited from his account and transferred to a payment gateway identified as CCAHPPAY.

Realizing he had been duped, Kashid immediately dialed the National Cyber Crime Helpline 1930, though technical issues delayed the registration of his complaint. He later successfully filed a report, prompting an investigation by both the Trombay Police and the Cyber Crime Cell.

APK Malware Spread Through Compromised Group Member's Device

Further investigation revealed that the WhatsApp group member who shared the APK file had also been a victim. Their account was compromised after they unknowingly clicked on the same malicious file. The malware had since been automatically forwarding itself to others via their device, further propagating the scam.

Cybercriminals allegedly used forged documents and digital records created through access to Kashid’s phone to secure the loan from a financial institution. These fake credentials were then used to siphon the loan amount into fraudulent accounts via the digital payment platform.

Police and Cyber Cell Investigating; FIR Filed Under BNS and IT Act

A case has been registered under relevant sections of the Bharatiya Nyaya Sanhita (BNS) Act, and the Information Technology (IT) Act. The Trombay Police, in coordination with the Cyber Cell, are actively investigating the matter and working to trace the digital trail of the fraudsters.

Public Advised to Avoid Downloading APKs From Unknown Sources

Authorities have warned the public against downloading APKs from unverified sources, especially those received over social media platforms.