Archive · 24 Aug 2026
Fake RTO APK Scam Misuses IPS Photo to Steal Data
Cybercriminals sent people a fake message on WhatsApp.
The message said their vehicle had an unpaid traffic fine.
It included a harmful phone application, called an APK, that pretended to be from the Regional Transport Office.
The criminals used a police officer’s photograph to make the message look real.
They also used a WhatsApp account registered in a woman’s name.
Police said the account had been hacked on July 30.
If someone installs the fake application, criminals may be able to control the phone secretly.
They could steal private information such as photos, messages, banking details and OTPs.
Police have opened a case and warned people to be careful.
Police registered a case against unidentified cybercriminals for circulating a malicious APK posing as an RTO communication.
The WhatsApp message falsely claimed recipients had an outstanding traffic fine on their vehicle.
Scammers allegedly used an account in a woman’s name and an IPS officer’s official photograph to appear credible.
Police said the hacked account was compromised on July 30 and the officer’s photograph may have been taken from a government website.
Installing the APK could let attackers access contacts, messages, photos, documents, banking credentials and OTPs.
- Who
- Unidentified cybercriminals, an allegedly hacked WhatsApp account holder, and police including head constable MN Wagh.
- What
- A malicious APK posing as an RTO communication was circulated to steal sensitive information from WhatsApp users.
- When
- Police said the WhatsApp account was hacked on July 30; the report does not specify when the case was registered.
- Where
- The complaint was filed with the Cyber Police Station, Chhatrapati Sambhajinagar Rural, after suspicious activity was flagged on Threads.
- Why
- The scammers allegedly sought unauthorised access to victims’ phones and their personal, banking and authentication data.
- Fraud lure
- A false claim that the recipient’s vehicle had an outstanding traffic fine.
- Distribution channel
- WhatsApp.
- Impersonation method
- An account in a woman’s name used the official photograph of the Superintendent of Police, Chhatrapati Sambhajinagar Rural.
- Account status
- Police said the WhatsApp account had been hacked on July 30.
- Potentially stolen data
- Contacts, text messages, private photographs, personal documents, banking credentials and OTPs.
- Police action
- A case was registered against unidentified cybercriminals.
- Legal provisions
- Sections 66C and 66D of the Information Technology Act.