During the busy wedding season, many people are choosing to send wedding invitations through WhatsApp because it’s easy and saves money compared to sending traditional paper cards. However, cybercriminals have noticed this trend and are using it for scams.

What seems like a simple wedding invitation sent through WhatsApp could be a trick, designed to infect people’s phones with harmful software. This could lead to a cyberattack that risks your device’s safety and may put your personal information at risk.

Fake invitations leading to malware attacks

The Himachal Pradesh Police warn that scammers send fake wedding invitations through WhatsApp as APK files, which are files for installing Android phones. When people download these files, harmful software (malware) is secretly installed on their phones. This malware lets the scammers fully control the device. They can steal personal data, send messages, and even threaten the phone’s owner, all without the person knowing.

DIG Mohit Chawla from Himachal Pradesh's Cyber Crime Department issued a warning to the public, stating, “If you receive an unsolicited wedding invitation or any file from an unknown number, do not click on it. Ensure you verify the sender and the file before downloading anything onto your phone.”

How does the scam work?

The scam usually starts with a WhatsApp message from a number you don’t recognize. This message pretends to be a wedding invitation and includes a file that looks safe but is harmful. If you download the file, it installs an app that hides on your phone. This hidden app can then access your private data, watch what you’re doing, and even control some functions of your phone.

After infecting the phone, the attackers use it to send fake messages to the victim’s friends or family. They pretend to be the phone’s owner, asking for money or private information. This kind of attack can cause the victim to lose money and have their privacy invaded.

Authorities advise caution and alertness.

The Himachal Pradesh Cyber Police are warning people to be careful about messages from unknown numbers, especially if the message has a file attached. They strongly advise not to download APK files (app installation files) from people you don’t know, as these files are often used to put harmful software on phones.

DIG Chawla emphasized that “while downloading files from trusted contacts is generally safe, it’s still important to confirm the legitimacy of the file, especially if it seems out of context or unexpected.”

Steps to take if you’re a victim of the scam

If someone falls victim to this scam or any other cyber scam, the authorities advise prompt action. Victims are encouraged to report the cyber fraud by calling 1930, the national helpline for cybercrime, or by visiting the official government portal at https://cybercrime.gov.in to file a complaint.