Malware

Fake APK Install Scam

Scammers send APK files or links that pretend to be bank, courier, KYC, government, loan, or support apps. Installing them can expose SMS, notifications, accessibility controls, and financial apps.

See what to do now Open the message check

The request may sound like this.

Install this customer support app to complete refund/KYC. Allow all permissions for verification.

Why the request feels convincing.

The scam presents installation as the only way to finish a refund, job, loan, KYC, or support process.

Stop when you see these signals.

APK sent through WhatsApp, SMS, Telegram, or a random website
Request to enable unknown sources
Accessibility, notification, SMS, screen overlay, or device admin permissions
Banking, courier, loan, KYC, or government branding
Caller guides you through installation

If this is happening now.

Disconnect from the call or chat.
Uninstall the app if possible.
Use a trusted device to change important passwords.
Call the bank if financial apps or OTPs may be exposed.
Consider professional device cleanup if permissions were granted.

Do not.

Do not grant accessibility or SMS permissions to unknown apps.
Do not enter banking passwords after installing suspicious APKs.
Do not assume deleting the chat removes the app.

Save this evidence.

APK name and link
Installer screenshot
Permission screen
Caller number and chat messages

Reduce repeat risk.

Install apps only from official app stores or typed official websites.
Keep unknown sources disabled.
Review installed apps and permissions regularly.

Questions people ask

Is every APK unsafe?

No, but APKs sent by strangers, support agents, bank warnings, courier messages, or job offers should be treated as dangerous.

What if I already installed it?

Stop using sensitive apps on that device, remove the app if possible, secure accounts from another trusted device, and contact your bank if financial access was exposed.