Festive season online scams: Hyderabad police warn against fake shopping sites, lucky draws

Hyderabad: With Diwali around the corner, the Hyderabad City Police Cyber Crime Unit has issued a cautionary advisory urging citizens to be vigilant against a surge in online fraud.

Cybercriminals are exploiting the festive shopping rush by luring people with fake e-commerce sites, malicious mobile apps, phishing links and social media advertisements promising steep discounts on electronics, gifts, and festive offers.

Police warned that unsuspecting users who share banking credentials or download fraudulent apps risk substantial financial losses.

Common tactics used by cyber scammers

According to the Cyber Crime Unit, scammers employ multiple tactics to deceive citizens:

1. Fake e-commerce portals and apps:

Fraudsters create fake websites and APK files that mimic legitimate online shopping platforms. Links are shared via WhatsApp, SMS, Facebook, Instagram, and Telegram. When victims download these apps, malware installs on their devices, compromising personal and banking information.

2. Phishing pages and fake payment gateways:

Scammers embed malicious links in festive offers or fake payment portals to steal credit/debit card details, net banking credentials, and OTPs.

3. Gift offers and lucky draw messages:

Messages claiming “Diwali gifts” or “exclusive rewards” ask victims to pay small processing fees or share banking information, ultimately leading to financial loss.

4. Social media scams:

Fake pages and ads promoting branded products at heavy discounts collect payments but never deliver the goods, disappearing after duping customers.

Recent cases highlight growing threats

Case 1: Online gift fraud – Rs 1.4 lakh loss

A 29-year-old woman from Secunderabad was duped by fraudsters posing as executives from an online store. After gaining her trust with past purchase details, they convinced her to pay Rs 5,000 for a “special gift offer” and later asked for Rs 9,840 as GST for dispatching an iPhone 13. She ultimately transferred Rs 1,40,000, which was lost to the scammers.

Case 2: Fake customer care and malicious APK scam – Rs 1,02,194 loss

A 69-year-old Azampura resident contacted a fake Blinkit customer care number. Fraudsters sent an APK link via WhatsApp and instructed him to install it. Once installed, they gained remote access to his family members’ phones and withdrew money from their bank accounts.

Police said these cases show how fake support numbers and malware-laden apps are increasingly being used to steal funds.

How citizens fall victim

Authorities said many people fall prey to:

- Trusting flashy social media ads without verification.

- Downloading unverified apps or clicking suspicious links.

- Making advance payments without confirming the seller’s authenticity.

- Sharing OTPs, PINs, or card details on fraudulent websites.

Safety tips from cybercrime unit

- Avoid downloading APK files or clicking links from unknown sources.

- Shop only on trusted and verified e-commerce platforms.

- Never share banking or card details on unfamiliar portals.

- Ignore messages or calls promising gifts, rewards, or lucky draws.

- Enable two-factor authentication (2FA) on online banking and shopping accounts.

Reporting cyber fraud

Citizens are advised to report online scams immediately via:

- National Cyber Crime Helpline: 1930

- Online Complaint Portal: www.cybercrime.gov.in

- Prompt reporting can help authorities freeze fraudulent transactions and prevent further loss.

Follow Hyderabad Cyber Crime Unit for updates on these handles:

Facebook / Instagram / X (Twitter): @cybercrimepshyd