Kochi: Incidents of financial fraud in Kerala involving fake WhatsApp messages urging recipients to update bank KYC details and pay vehicle traffic violation fines are on the rise. These messages, sent under the guise of banks and motor vehicle departments, deceive recipients into clicking malicious links, resulting in financial losses. Victims who trust these messages as genuine end up falling prey to fraudsters who steal their bank details and private mobile phone information to siphon money from their accounts. Two recent reported cases in Kochi resulted in a combined loss of ₹78,076. The Kochi City Cyber Crime Police have registered cases and initiated investigations.
The scammers craft messages designed to easily gain the trust of ordinary people. The messages contain warnings stating that if the bank KYC is not updated, the account will be frozen, or that failure to promptly pay the vehicle-related fine will lead to legal action. When recipients receive such notifications, they often panic and click on links which either steal sensitive information or compel them to install harmful applications, facilitating financial scams.
In one case, a 61-year-old resident of Maradu lost money in a scam involving a fake bank KYC update. The retired individual received a WhatsApp message on the 13th of last month resembling an official bank communication urging urgent update of the KYC details or else the account would be frozen. Believing the message was legitimate, he clicked the accompanying link. Initially, no suspicious activity was noticed on his phone or bank account, so he continued using his phone normally without suspecting foul play.
However, on the 2nd of this month, three unauthorized transactions totaling ₹28,076 were made from his bank account. The next day, an additional ₹10,000 was withdrawn. In total, ₹38,076 was lost. It was only after visiting the bank to inquire about the loss that he learned the money had been withdrawn without his knowledge or consent. Further analysis raised suspicions that the individual was a victim of a cyber scam related to the WhatsApp KYC message, prompting him to file a complaint with Kochi City Cyber Crime Police.
This case highlights concerns that money may not be lost immediately upon clicking a malicious link, as cybercriminals may target accounts days later.
The second incident involved a fake WhatsApp message demanding payment of a fine for a traffic violation. The victim, both owner and driver of a lorry transporting gas cylinders, received a message stating that the vehicle had been found violating traffic rules and that a challan had been issued in the vehicle's name. The message advised clicking a link to review fine details and remit payment.
Due to work pressures, the driver forwarded the message to his brother residing abroad for verification. The brother, believing the message was genuine, clicked the link, which redirected to another webpage showing a “Pay Now” option. Assuming it was a legitimate fine payment system, he selected the option. Shortly thereafter, the phone became unresponsive. Though it later resumed functioning normally, financial loss had already occurred.
Bank account reviews revealed a total of ₹40,000 had been withdrawn from the accounts of both the driver and his brother abroad, in 10 separate transactions. This vehicle challan-related scam impacting two individuals’ bank accounts has added severity to the incident. Kochi City Cyber Crime Police continue to investigate the routes of fund transfer and methods used by scammers to access the accounts.
Cybercriminals exploit public trust in messages purporting to be from banks and government agencies by creating official-looking messages and web pages to mislead users. Common scam themes include KYC updates, vehicle fines, account freezes, and PAN card information updates. Links included in such messages often lead to counterfeit websites or prompt downloads of harmful files.
Some scams directly request sensitive data including bank account details, card numbers, passwords, and OTPs. Others deceive users into installing unauthorized applications on their devices, enabling data theft or remote control takeover. However, merely clicking a link does not automatically result in loss of device control; risk escalates when personal data is input, files are downloaded, or app permissions are granted.
Recipients should refrain from opening unknown WhatsApp or SMS links demanding bank KYC renewal or vehicle fine payments. The authenticity of such notices should be verified through official bank apps, websites, or authorized customer support channels. The Union Government’s official e-Challan portal (echallan.parivahan.gov.in) can be used to verify vehicle-related fines. Avoid paying fines via links received on WhatsApp.
Under no circumstances should bank account details, internet banking passwords, OTPs, or UPI PINs be shared with anyone. If unauthorized applications are installed via suspicious links, permissions should be reviewed and the bank notified immediately.
Victims of financial scams should promptly contact the National Cyber Crime Helpline at 1930 or file complaints via cybercrime.gov.in. Swift reporting increases the likelihood of blocking fraudulent transactions.
The two incidents reported from Kochi underscore the importance of vigilance in digital transactions. Following instructions received from purported banks or government bodies without confirming their authenticity can lead to serious financial losses.
n
Original Malayalam report: Malayalam Daily News
