Last update:November 12, 2024, 2:01 PM IST

The Himachal Pradesh Cyber ​​Police has issued a warning advising residents to be wary of messages from unknown numbers, especially those containing attachments.

The scam usually starts with a WhatsApp message from an unknown number pretending to be a wedding invitation.

As the wedding season reaches its peak, many people are receiving invitations via WhatsApp, a convenient and cost-effective method compared to traditional paper cards. However, this growing trend has caught the attention of cybercriminals who are exploiting it to launch a new type of scam. An innocuous-looking wedding invitation sent to your phone could be the gateway to a serious cyber attack that could compromise your entire phone and personal data.

According to Himachal Pradesh Police officials, scammers are now sending malicious wedding invitations through WhatsApp in the form of APK files. When unsuspecting recipients download these files, their phones are infected with malware that allows cybercriminals to gain full access to their devices. Once the malware is active, hackers can send messages from the infected phone, steal personal data and even extort money without the owner’s knowledge.

How the scam works

The scam usually starts with a WhatsApp message from an unknown number pretending to be a wedding invitation. The message includes an attachment that looks legitimate, but is actually a malicious APK file. Once the recipient downloads the file, an app is secretly installed on the phone. This malicious app can access sensitive data, monitor activities and even hijack phone functions.

In some cases, cybercriminals can use the compromised device to send fraudulent messages to the victim’s contacts, demanding money or sensitive information, all while pretending to be the owner of the phone. This sophisticated attack can lead to significant financial loss and personal injury.

Cyber ​​security experts warn: Don’t download suspicious files

The Himachal Pradesh Cyber ​​Police has issued a warning advising residents to be wary of messages from unknown numbers, especially those containing attachments. Any file sent from unknown sources should not be downloaded, especially APK files, which are commonly used to distribute harmful applications.

DIG Mohit Chawla, Himachal Pradesh State CID and Cyber ​​Crime Department, emphasized the importance of vigilance, saying, “If you receive an unsolicited wedding invitation or any file from an unknown number, do not click on it. Make sure you check the sender and the file before downloading anything to your phone.”

He added that while downloading files from trusted contacts is generally safe, it’s still important to confirm the legitimacy of the file, especially if it seems out of context or unexpected.

What to do if you have been victimized

In the unfortunate event that you fall victim to this or any other cyber scam, the authorities urge you to take immediate action. You can report cyber fraud by dialing 1930, a national cyber crime helpline or by visiting the official government portal at to register a complaint.

Cybercrime is on the rise, with scammers constantly evolving their tactics to scam people. In addition to wedding invitation scams, officials also warned of the growing number of fraudulent loan offers circulating online. These fake loans often promise easy money, but are designed to steal sensitive financial information, leading to identity theft and financial loss.

Stay safe in the digital age

Experts agree that staying informed and being cautious is key to avoiding cyber fraud. Avoid clicking on suspicious links, refrain from downloading unsolicited files, and always verify the authenticity of online communications before taking any action. As cybercriminals become more sophisticated, awareness and vigilance are the best defenses against falling victim to online scams.