Context: APK scam is one of the fastest-growing cybercrime threats in India. The sophisticated social engineering scam is driven by malicious Android Package Kit (APK) files that stay undetected and exploit public trust in digital systems.
Relevance of the Topic:Prelims: Key facts about Android Package Kit (APK) Scam. Mains: Cybercrimes: Types, Challenges and Regulations.
What is Android Package Kit (APK) Scam?
- APK scams involve malicious files which are used to install apps on Android devices outside of the official App store. The App often has hidden malware that can steal personal data, passwords, banking information, or install spyware.
- Rising cases: There has been a 900% jump in cyber crimes between 2021 and 2025. The National Cyber Crime Reporting Portal has logged over 12 lakh different types of APK Scams in India since the beginning of 2025 (till date).
How does the APK Scam work?
- APK files on Android devices are much like .exe files on Windows computers; both are used to install Apps. These files can be exploited by fraudsters to spread malware.
- Fraudsters build or source these Apps to mimic the appearance and language of official portals (E.g., government subsidy schemes like PM-Kisan, tax refund platforms, electricity boards, or banks asking for KYC updates).
- These fake Apps are often circulated through social media platforms and accompany convincing messages that urge users to act immediately. Once downloaded, the App seeks multiple permissions including access to contacts, messages, call logs, location, microphone, and notifications.
- The App harvests data in real-time, and transmits it in encrypted bits to external servers operated by fraudsters. These bits are decoded to extract valuable information, including banking credentials, OTPs, contacts, and location coordinates etc.
Challenges:
- Google or any other intermediary does not scrutinise every application that is being hosted on their server. Fraudsters use mule accounts and shell identities to pay for hosting and publishing on search engines.
- Strong encryption techniques hide malicious code from detection tools. By remaining dormant during installation certain APKs can bypass antivirus softwares.
- Even after earlier versions are blacklisted, the same APK file is reused with minor modifications in the interface (name, logo and URL or web address of the file) thus, allowing it to bypass detection.
Also Read: How is Cyberbullying tackled under the Law in India?