Police Warn of New APK Scam Targeting Bank Accounts
🚨 Police Warn of New APK Scam Targeting Bank Accounts
Colombo, April 2026 — The Sri Lanka Police have issued a public warning over a new digital scam that targets bank accounts through malicious mobile application files, commonly known as APKs.
Authorities say cybercriminals are distributing these harmful files via popular messaging platforms such as WhatsApp and Telegram, disguising them as legitimate documents including wedding invitations, bills, and promotional messages.
📱 How the Scam Operates
Investigations reveal that once a user downloads and installs the APK file, malicious software gains access to sensitive data on the device. This includes the ability to:
- Monitor screen activity
- Read SMS messages
- Capture One-Time Passwords (OTPs)
With this information, scammers are able to gain unauthorized access to banking applications and carry out financial transactions without the account holder’s knowledge.
⚠️ Public Urged to Exercise Caution
Police emphasize that even messages received from known contacts should be treated with caution, as fraudsters may exploit compromised accounts to spread the malicious files further.
The Sri Lanka Police advise the public to avoid opening any APK files received through messaging apps and to install applications only from trusted sources such as the Google Play Store.
🛡️ Safety Measures
Members of the public are encouraged to:
- Disable the “Install Unknown Apps” feature on their devices
- Avoid clicking on suspicious links or downloading unfamiliar files
- Regularly update mobile security settings
🚑 Reporting Incidents
Individuals who believe they may have been affected are urged to immediately inform their bank and lodge a complaint with the Computer Crimes Division of the Criminal Investigation Department (CID).
📰 A Growing Concern
Cybersecurity experts note that such scams are becoming increasingly sophisticated, posing a serious threat to digital banking users across the country. Authorities continue to monitor the situation and urge vigilance as the primary defense against cybercrime.