WhatsApp KYC Scam: How a Fake Bank Message Almost Tricked My Father

I had only heard about WhatsApp scams before but never experienced one personally—until it happened in my own house. This afternoon, my father received a WhatsApp message with a KYC update APK file and almost installed the app. Thankfully, he stopped just in time and saved himself from the fraud.

Here's how the scam actually works, what really happened, and what you should do if you ever face a similar situation.

A WhatsApp KYC Message Could Steal Your All Data

He received a WhatsApp message from an unknown number with a profile picture showing the Bandhan Bank logo. The sender shared an APK file link for a KYC update and instructed him to install it - which he actually did.

Since my father has a few known contacts in the bank who occasionally handle his personal work, he initially assumed the message was from one of them. After installing the app, he opened a form that asked for his PAN number, phone number, and other personal details. That's when he grew suspicious and stopped without logging in.

When I tried calling the person to verify, they immediately dropped the call. Moments later, my father received a secret OTP from Bajaj Finance - confirming it was a scam attempt.

How the WhatsApp Scam Works

Online scams have become increasingly common lately. Scammers often send messages saying, "Dear customer, your account will be blocked soon. Update your KYC." When you click on such APK links and install the fake application, it requests permissions such as access to your SMS inbox. Granting these permissions allows fraudsters to steal OTPs, passwords, and personal data, which are then secretly sent to remote servers. In short, you're just giving scammers full access to your phone.

Banks have repeatedly warned customers that they never request KYC updates through third-party apps, links, or SMS messages. Banks also send alerts and emails advising users to avoid clicking on suspicious links and never share PAN details or OTPs with anyone.

How You Can Stay Safe

• You should not click on links sent from unknown numbers or open any suspicious messages.
• One should know that banks never ask for OTPs, passwords, or personal details over WhatsApp, SMS, or calls.
• If you need to install any banking app, always download it from the Play Store or App Store, not through any shared links.
• For KYC updates, visit your bank's official website or branch directly.

Scams like these are a reminder that online frauds can target anyone. Earlier, my dad also got a different scam call asking for an OTP, and even after that, he was about to fall for this scam. Because of how convincingly scammers speak and try to persuade you, anyone might fall for it. So always verify the source before clicking on any link or downloading an app.