Banking phishing
Credit Card Reward Points Scam
The message says your bank or credit card reward points are about to expire and asks you to redeem them by installing a “reward” app. The app steals your SMS and OTPs and drains your account.
if you got this
Treat it as a scam until you check. Don’t click, pay or share a code. Check your points only in your bank’s official app or on the card’s statement.
Check my message with KavalFree to start. Nothing to install.
what it looks like
red flags
- An APK like “REWARDZ.apk” or “Reward Point.apk”
- Points “expire today”
- A large round cash value, like Rs 9,980
- Sent from an ordinary mobile number or on WhatsApp
if it’s happening now
- 1Check your points only in your bank’s official app or on the card’s statement.
- 2Delete the APK without opening it.
- 3If you installed it, turn on flight mode, uninstall it, and call your bank to block cards and UPI.
- 4Report spam SMS to 1909, and money lost to 1930.
Already clicked, paid or shared something?
Don’t
- Do not install apps to redeem points.
- Do not enter card details or OTP on a reward page.
Save this evidence
- SMS screenshot
- APK file name
- Any bank alerts after installing
Stop it happening again
- Keep “install unknown apps” turned off and redeem points only in the bank’s app.
questions people ask
Do banks send apps to redeem reward points?
No. PIB Fact Check has flagged these reward APK messages as fake. Redeem points only inside your bank’s official app.
I installed the reward app. Is my money at risk?
Yes, act now: disconnect the phone, uninstall the app, call your bank to block cards and UPI, change banking passwords from another device, and call 1930.
Last reviewed 25 September 2026.