Hyderabad: Man loses ₹1.75L from two bank accounts after clicking on FB advertisement

Hyderabad: A Cyberabad man lost ₹1.75 lakh from two bank accounts after clicking on a Facebook advertisement offering free access to the latest movies and downloading what appeared to be a genuine streaming application.

According to the Cyberabad Cyber Crime Police, the victim was browsing Facebook on his mobile phone when he noticed an advertisement claiming users could “watch latest movies for free” by downloading an app.

Interested in the offer, he clicked the link, which redirected him to a website that resembled an authentic streaming platform.

Malware hidden inside fake app

Believing the website to be genuine, the victim downloaded and installed the application on his phone. He reportedly watched a movie on the app without facing any immediate issues.

However, sometime later, the phone displayed what appeared to be a routine software update notification. Soon after, the mobile device began malfunctioning. UPI services stopped responding, and several apps failed to open properly.

Alarmed by the unusual activity, the victim checked his bank account and discovered that ₹80,000 had been debited. He then examined his mother’s bank account, which was also being operated through the same phone, and found another ₹95,000 missing.

The family eventually realised that a total of ₹1.75 lakh had been fraudulently withdrawn.

How the fraudsters operated

Cyber Crime officials said the downloaded application was not the original Tubi TV app but a fake malware application created to imitate the streaming platform.

Once installed, the malware allegedly gained access to SMS messages and OTPs on the device. Using this information, fraudsters were able to infiltrate banking and UPI applications and transfer money from the linked bank accounts.

Cyber Crime Police issue warning

DCP (Cyber Crimes) T. Sai Manohar has urged the public not to trust “free movie” links or advertisements circulating on social media platforms.

He advised users against downloading APK files or applications from unknown sources and warned people not to grant unnecessary permissions to suspicious apps.

The DCP also cautioned citizens against clicking on fake software update notifications and said mobile operating system updates should only be carried out through official phone settings.

What victims should do immediately

The DCP further said victims of such frauds should immediately disconnect internet access on the affected device, uninstall suspicious applications, change banking passwords and UPI PINs, and inform their banks to secure their accounts.

Citizens can report cyber fraud incidents by dialling the national cyber crime helpline 1930 or by filing complaints through the National Cyber Crime Reporting Portal.