Why APK Files Cannot be Trusted
Think an APK file is harmless? Downloading it can lead to you losing all your money.
A furniture shop owner from Bangalore received a wedding invitation on WhatsApp. Pleasantly surprised, he wanted to know more about it. He didn’t think much when he clicked on the invite in his WhatsApp chat.
What he didn’t realize was that the file was an APK. This file allowed other people to gain complete access to his phone. Over ₹5 lakh was drained from his bank account through multiple UPI transactions.
Multiple people in Mumbai also received messages claiming their gas bills had to be paid. These too were through APK files, which also took over their phones and let scammers steal all their money.
APK files are one of the most significant tools fraudsters use to commit financial cybercrime. People don’t think much about them as they seem like legitimate apps. However, they are some of the most dangerous that everyone should beware of.
APK stands for Android Package Kit. It is a format that allows apps and other files to be downloaded directly on an Android device. While this format on its own is not dangerous, it allows apps to bypass official platforms such as the Play Store. Such platforms have rules and screen apps to ensure no harmful apps are available for downloading. An APK file is not subjected to any of those regulations and can host dangerous apps.
This is exactly why scammers send APK files to their victims. Many people are not aware about APK files and their risks. The APK files often download apps that take control of a user’s phone, gaining access to their bank accounts. This is often used in frauds such as fake challan ones. The fake wedding invitation and fake gas bill are some of the other frauds where the bank account can be drained.
Fake loan apps always use APK files. Such an app would never be allowed on any Play Store, which is why they come as APKs that can be downloaded directly.
Also Read: 5 Ways to Verify Loan Apps
• Read the file format. An APK file will always have the name mentioned in its extension. The file name will generally end with .apk. This itself is the biggest giveaway and is very obvious. Before downloading any file, take some time to read the name and see exactly what kind of file it is.
• Don’t download anything from unknown numbers. Unknown numbers often reach out to people to scam them. They tend to send an APK file via WhatsApp, relying on someone to download it. Any link or file coming from an unknown number is risky and can lead to your phone being compromised.
• Only download apps from official app stores. All official app stores screen apps and ensure they are legal and compliant before making them available for download. They have strict processes in place to avoid harmful apps from having a presence. Any reputable app will be available on official app stores. If it isn’t, that is a significant red flag to look out for.
• Disable downloads from unknown sources in phone settings. On Android phones, there is the option to disable downloads from unknown sources in the settings. Turning this feature on can help prevent any questionable files from being automatically downloaded. You don’t have to worry about accidentally tapping on something and then a download taking place.
The APK file is one of the most prominent weapons scammers use. It serves as an innocent-looking file that they can misuse in a variety of ways, the most dangerous being taking over a phone and its associated bank accounts.
However, awareness of these files and how they operate can protect you from them. Always keep an eye out for .apk extensions in file names and never download them from unknown sources.