Festive scams surge: Hyderabad cybercrime unit warns against online frauds

HYDERABAD: The Cyber Crime Unit of Hyderabad City Police has issued an advisory urging citizens to remain alert during the festive season, especially around Diwali, as cyber fraudsters are actively targeting people through fake e-commerce portals, malicious APK files, and social media advertisements offering heavy discounts on electronic gadgets and gifts.
Police said fraudsters are exploiting the festive mood to lure unsuspecting users into revealing banking credentials, credit card details, and personal data, leading to major financial losses.
Multiple tactics to deceive users
Fraudsters are circulating fake e-commerce websites and unauthorised mobile applications (.apk files) that mimic legitimate shopping portals. Once downloaded, these apps install malware on victims’ phones, compromising their data. They are also embedding phishing links in festive offer messages and fake payment gateways to steal card information, OTPs, and internet banking credentials.
In several instances, citizens have received fake “gift offer” or “lucky draw” messages claiming they had won prizes such as smartphones or vouchers. Scammers then asked victims to pay a small “processing fee” or share bank details, resulting in money being siphoned off.
Social media ads among top traps
Police said several scams originate from fraudulent social media pages that promote massive discounts on branded goods. Such accounts never result in deliveries when they receive payments, and someone deletes the pages soon after.
Case study 1: Woman loses ₹1.4 lakh to fake Diwali gift offer
Fraudsters posing as executives of the Fashor shopping site cheated a 29-year-old woman from Secunderabad of ₹1,40,000 by convincing her to make payments for a “special gift offer.” They told her to pay ₹9,840 as GST for dispatch of an iPhone 13 and, through repeated calls, tricked her into transferring multiple amounts before she realized that scammers had duped her.
Case study 2: Older man loses ₹1 lakh via fake Blinkit support number
In another incident, a 69-year-old resident of Azampura, Hyderabad, lost ₹1,02,194 after calling a fake Blinkit customer care number he found on Google. Fraudsters posing as support staff sent him an APK link, which he installed on his phone, giving them remote access. The scammers then accessed the bank accounts of his family members and withdrew money.
Advisory to the public
Police advised citizens not to download mobile apps from unverified sources or click on links received through social media or messaging platforms. They also urged people to shop only through verified e-commerce websites, avoid sharing banking details on unfamiliar portals, and enable two-factor authentication on all online accounts.
Citizens are encouraged to report cyber fraud immediately by calling the National Cyber Crime Helpline (1930) or lodging complaints on www.cybercrime.gov.in, as prompt reporting can help freeze transactions and limit losses.

