Cyber crooks have a field day amidst festive shopping frenzy

Hyderabad: The Telangana Cyber Security Bureau (TGCSB) on Wednesday issued an urgent public advisory warning citizens against two rapidly emerging cybercrimes — fake advertisements and credit card frauds — which have been on the rise in the State over the past few days.

TGCSB Director Shikha Goel said a recent analysis of cybercrime trends had revealed a sharp increase in complaints related to advertisement fraud (undelivered goods/services) and identity theft (unauthorised credit/debit card compromise). Fraudsters are increasingly exploiting online shopping trends, festive discounts and malicious mobile applications to cheat unsuspecting citizens.

Explaining advertisement fraud, Shikha Goel said fraudsters circulate deceptive advertisements on social media platforms such as Instagram and Facebook, messaging applications such as WhatsApp, and fake websites. These advertisements offer branded electronics, clothing, holiday packages, beauty and home services, or online courses at unrealistically low prices, with offers such as “Mega Sale – Flat 70% Off”.

Once victims are lured into making advance payments through UPI, digital wallets or bank transfers, scammers send fake order confirmations and give bogus delivery delay excuses. They subsequently block the victims' phone numbers and shut down the websites without delivering the promised goods or services.

“Avoid purchasing from unknown or unverified social media sellers; never trust deals offering steep, unrealistic discounts; verify seller credentials, customer reviews and official websites before making payments; and never make advance payments to unverified accounts,” the TGCSB Director advised.

In cases of identity theft, cybercriminals are increasingly targeting cardholders through phishing links and malicious Android application packages (APK files) disguised as official bank rewards, cashback offers or credit card limit enhancement schemes.

When victims click on these links or install malicious APK files, they are tricked into entering sensitive information such as card numbers, expiry dates, CVV codes, PINs and OTPs. In some cases, the malware silently intercepts SMS alerts.

Fraudsters immediately misuse the compromised credentials to make unauthorised online purchases and domestic or international transactions without the cardholders' consent.

“Never download or install APK files received through WhatsApp, SMS or unknown links; never share card numbers, CVV, OTP or PIN details with anyone; verify card upgrade or reward offers only through official bank applications or customer care; and immediately block your card and inform your bank if you receive any unauthorised transaction alert,” Shikha Goel said.

ABOUT THE AUTHOR

Mouli Mareedu

Mouli Mareedu