SBI Issues Warning on Malicious APK Fraud Targeting Customers with Fake Reward Points Messages

State Bank of India (SBI), one of India's leading banks, has issued a public advisory cautioning its customers against a malicious APK fraud circulating through unsolicited messages offering fake reward points.

Modus Operandi

Fraudsters are sending SMS or WhatsApp messages to SBI customers, claiming to offer exclusive reward points or gift vouchers in celebration of the bank's anniversary or special promotions. These messages often contain a link to download an APK file, which supposedly allows customers to claim their rewards.

Upon downloading and installing the APK file, customers are prompted to provide sensitive personal information, including their bank account details, ATM PIN, and mobile numbers. This information is then harvested by fraudsters, who can use it to compromise customer accounts and steal funds.

SBI's Warning

SBI has strongly advised its customers not to click on any suspicious links or download APK files from untrusted sources. The bank emphasized that it does not send SMS or WhatsApp messages containing direct download links for APK files or asking for sensitive personal information.

Customers are instructed to:

Avoid clicking on links or downloading APK files from unknown senders.
Never share confidential information such as bank account details, ATM PIN, or mobile numbers with third parties.
Report any suspicious messages or emails to SBI's customer support channels.

How to Protect Yourself

To protect against this APK fraud and other cyber threats, SBI recommends:

Enable two-factor authentication (2FA): 2FA adds an extra layer of security by requiring a one-time password (OTP) for transactions and account access.
Use strong passwords: Create complex passwords that are difficult to guess and avoid reusing them across multiple accounts.
Be wary of unsolicited calls and emails: Do not provide personal information to unknown callers or respond to suspicious emails.
Install a reputable antivirus program: Antivirus software can detect and block malicious APK files and other threats.
Keep software and mobile operating systems up to date: Software updates often include security patches that protect against vulnerabilities.

Reporting Fraud

If you have already fallen victim to this APK fraud or suspect that your personal information has been compromised, SBI advises taking immediate action:

Contact SBI's customer care immediately at 1800 11 22 11 or 1800 425 3800.
Report the incident to the National Cyber Crime Reporting Portal at https://cybercrime.gov.in/.
Freeze your bank account if you believe your account details have been compromised.

Conclusion

SBI's APK fraud warning underscores the importance of vigilance against cybercrime. By following the bank's guidelines, customers can protect themselves from financial losses and identity theft. Remember, never download APK files or provide sensitive personal information from untrusted sources.