Archive · 1 Sep 2026
Meta Removes Scam Ads After India Flags Porn Malware Bait
Some ads on Facebook and Instagram pretended to offer pornographic videos.
Instead, they tried to persuade people to download harmful Android files.
The files could steal private information, banking details, one-time passwords and bank PINs.
Scammers could potentially use that information to move money from people’s accounts.
India warned Meta about the ads on Monday.
Reuters later found at least 39 ads still online.
Meta removed the ads after Reuters reported them to the company.
Meta’s rules prohibit sexual content and misleading schemes designed to scam people.
India has also recently raised concerns about fraud involving Google’s Firebase platform.
Meta removed dozens of Facebook and Instagram ads after India warned they promoted malware disguised as pornography apps.
Ads operating under names including “Night Play” and “Kyss” directed users to phishing websites and malicious Android downloads.
India said the apps could access phone data, capture one-time passwords and bank PINs, and transfer money without users’ knowledge.
Reuters found at least 39 ads still active after Monday’s advisory; Meta removed them after Reuters alerted the company.
India recorded nearly $2.4 billion in cyber-fraud losses in 2025, according to government data.
- Who
- The Indian government, Meta, scammers using Facebook and Instagram, and users targeted by the ads.
- What
- Meta removed dozens of advertisements that allegedly promoted malicious Android applications disguised as pornography apps.
- When
- The removals occurred on Monday after India issued an advisory; Reuters found some ads still active afterward and then alerted Meta.
- Where
- On Facebook and Instagram, with links leading to phishing websites and downloads outside official app stores.
- Why
- India warned that the apps could steal phone and banking information, one-time passwords and PINs, potentially enabling unauthorized transfers.
Indian Government and Investigators
Meta and Platform Enforcement
Nature of the threat
Indian Government and Investigators
India said sexually explicit ads were being used to promote malicious Android applications and phishing websites capable of enabling financial theft.
Meta and Platform Enforcement
Meta removed the reported ads, but it did not respond to Reuters’ questions about the advisory or the removals.
Platform responsibility
Indian Government and Investigators
The government’s warning highlights how social-media platforms can be used to target users amid rising financial fraud and digital-payment activity in India.
Meta and Platform Enforcement
Meta’s published policies prohibit sexual content and deceptive or misleading schemes, including scams intended to take users’ money.
Effectiveness of enforcement
Indian Government and Investigators
Reuters found at least 39 ads still active after India’s advisory, suggesting that some material remained online after the warning.
Meta and Platform Enforcement
Meta removed the ads shortly after Reuters flagged them to the company.
- Platforms involved
- Facebook and Instagram
- Ad names cited
- “Night Play” and “Kyss”
- Ads found by Reuters
- At least 39 remained active after the government advisory; one account described these as websites.
- Example download
- One ad directed users to download a file named “Movexa.apk” outside an official app store.
- Potentially stolen information
- Phone data, banking credentials, one-time passwords and bank PINs
- Reported cyber-fraud losses
- Nearly $2.4 billion in India during 2025, according to government data.
- Meta advertising rules
- Meta prohibits adult nudity, sexual activity, deceptive practices and schemes intended to scam users out of money.
