‘Digital arrest’ scam alert: Hyderabad police caution against OTP sharing, downloading APK files

Hyderabad: With cyber fraud cases on the rise across the country, the Cyber Crimes Wing of Hyderabad Police has issued a public advisory warning citizens about a dangerous trend involving OTP theft, malicious mobile applications (APK files), and so-called ‘digital arrest’ scams used to extort money.

Rising threat of multi-stage cyber frauds

According to the advisory, cybercriminals are adopting a multi-layered approach to target victims. By combining social engineering tactics with technology, fraudsters are able to steal sensitive personal and financial data and later use it for large-scale extortion.

OTP sharing: The first point of breach

Scammers typically initiate contact by posing as officials from banks, telecom providers or government agencies.

Victims are tricked into sharing One-Time Passwords (OTPs), which allows criminals to gain unauthorised access to bank accounts, email IDs and other digital services.

Malicious APK files used for data theft

In the next stage, victims are persuaded to download fake mobile applications through links sent via SMS, messaging platforms, or email. Once installed, these malicious APK files can:

- Access SMS messages, including OTPs

- Capture passwords, PINs and banking credentials

- Extract personal data such as identity documents, contacts, and photos

- Enable remote access to monitor device activity

Profiling victims to gain trust

Using the stolen information, fraudsters build detailed profiles of victims, including their identity, financial status, and social connections. This enables them to make highly convincing approaches in subsequent interactions.

Fear as a weapon in ‘digital arrest’ scam

Cybercriminals then escalate the fraud by impersonating police officers or officials from central investigation agencies. Victims are falsely accused of serious crimes such as money laundering or illegal activities.

To create panic and legitimacy, fraudsters:

- Use victims’ real personal details

- Conduct video calls resembling official proceedings

- Threaten immediate arrest and isolation

- Extortion through intimidation

Under pressure and fear, victims are coerced into transferring money under the guise of ‘verification’, ‘security deposit’, or ‘case settlement’. In some cases, fraudsters directly siphon funds using previously obtained banking access.

Police advisory: Key safety measures

The Cyber Crime Police have urged citizens to remain vigilant and follow these precautions:

1. Never share OTPs, passwords, or banking details with anyone

2. Avoid downloading APK files from unknown or unverified sources

3. Install apps only from official app stores

4. Be cautious of unsolicited calls claiming to be from law enforcement or government agencies

5. Remember that no police authority conducts arrests via video calls or demands money for legal clearance

6. Do not panic; disconnect suspicious calls immediately