Invited to wedding? Police say check the link before you click

With the wedding season underway, scammers in Himachal Pradesh are targeting people with fake wedding invitations sent in APK format, primarily through WhatsApp. Android Package Kit (APK) is a file type used to install applications on android phones, typically downloaded only from trusted platforms like the Google Play Store.

Police said scammers send what appears to be a genuine wedding invite containing either a malicious APK file or a phishing link. Once opened, the file installs malware that compromises the device, allowing scammers to steal personal data such as photos, videos, contacts and even sensitive financial information, including banking details. The malware then automatically sends similar fake invites to the victim’s contacts, creating a chain of infections.

Superintendent of Police (Cybercrime) Rohit Malpani said such scams are difficult to detect because the invites appear authentic. “Once opened, scammers gain access to everything stored on the device, resulting in personal and financial losses. Genuine wedding cards are normally shared as JPG images or PDF files — never as APK links,” he said.

He urged people not to open suspicious messages, especially those from unknown numbers, and to verify the sender through trusted channels. The SP advised residents to report any such incidents immediately to the cybercrime cell by calling the toll-free helpline 1930.

People have been cautioned to stay vigilant and avoid falling prey to cybercriminals during the festive season