Accounts & identity Trending
WhatsApp “code sent by mistake”
WhatsApp · often a friend’s hacked accountSorry, I sent a 6-digit code to your number by mistake. Please send it to me, urgent.
Read more Accounts & identity
Malicious .apk files (wedding card, bill, challan)
A scam that is spreading in Pakistan. See a real example, learn the red flags and exactly what to do — and how to report it if you have already been affected.
What the message looks like
A real example
WhatsApp file from a contact📄 E-Challan_Notice.apk — “Your vehicle challan is pending, open to see the fine.”
How it works
The app asks for SMS and accessibility permissions, then silently reads OTPs and forwards itself to your contacts.
Red flags
- A file ending in .apk
- Asks to allow “unknown apps”
- Requests SMS or accessibility permission
What to do
- Don’t open it; delete and warn the sender
- Installed it? Uninstall, go offline, change passwords from another device
- Call your bank to watch for transactions
FAQ
Questions people ask
Is the “Malicious .apk files (wedding card, bill, challan)” message real?
Treat it as a scam. No real bank, wallet, government programme or company will ever ask for your OTP, PIN or password, or charge a fee to release a prize or aid. If in doubt, contact the organisation yourself on its official number.
Where do I report this scam in Pakistan?
Report cybercrime to the National Cyber Crime Investigation Agency (NCCIA) on helpline 1799. Report the number to PTA, and if money was lost call your bank or wallet’s official helpline immediately so they can try to block the transfer.
I already shared a code or sent money — what now?
Call your bank or wallet at once to block the account, change your passwords and PIN, keep screenshots and transaction IDs, and file a complaint with NCCIA (1799). The faster you act, the better the chance of stopping the money.
Related scams
Also watch out for
Accounts & identity
“PTA: your SIM will be blocked” calls
Robocall or caller posing as an officialYour SIM biometric verification is incomplete and will be blocked in 2 hours. Press 1 or share the code to re-verify.
Read more Money & banking Trending
Fake BISP / government grant messages
SMS · 8XXX / unknown numberCongratulations! Your Rs 25,000 BISP payment is approved. To receive, send your CNIC and the code you get to this number.
Read more Already affected?
Report it right away
Report cybercrime to the official agency, NCCIA. Our step-by-step guide shows what evidence to keep and how to file.