The internet is rife with scams, with scammers often attempting to deceive individuals by coaxing them into installing harmful APK files. Recently, Chetty Arun, a resident of Bengaluru, found himself in a similar situation when a scammer tried to persuade him to install a dubious APK file.
Rather than dismissing the offer outright, Arun opted to engage in a conversation with the online scammer, ultimately uncovering some of the deceptive techniques employed by scammers.
Arun subsequently shared the exchange on social media, catching the attention of Paytm founder Vijay Shekhar Sharma.
The interaction with the scammer unveiled their methods and intentions, beginning with their attempt to entice Arun into downloading a malicious APK file. Arun, however, chose to converse with the scammer instead of ignoring the proposition. Starting with casual banter, Arun managed to coax the scammer into divulging their fraudulent practices.
The conversation took a surprising turn when the scammer admitted to obtaining access to victims’ WhatsApp accounts and their OTPs, subsequently using this information for unauthorized access to e-commerce and banking applications. Despite the scammer’s initial attempts, they eventually cautioned Arun against downloading suspicious files.
However, when Arun encouraged the scammer to share scam-prevention tips with others, the scammer promptly realized Arun’s intentions and deleted their chats.
I spoke with yet another scammer today. I don't know why I do this, but here we go.
It all started with a few annoying Whatsapp messages trying to scam me. But we ended up wishing each other good luck 😂
1/n pic.twitter.com/Sm49J5XtNW
— Chetty Arun (@ChettyArun) April 19, 2024
I got 4-5 such messages from different numbers today. All sending me an APK file on WhatsApp.
I got annoyed at first. Blocked all those numbers. But this one particular one, I decided to call and bash him.
But then, the weirdo in me wanted to have a chat 😅
2/n pic.twitter.com/mWGQYUpzdF
— Chetty Arun (@ChettyArun) April 19, 2024
I was curious to see what the APK does when installed. He said if I click on it, it'll basically forward all my messages to his number.
3/n pic.twitter.com/2MTa7ugrxs
— Chetty Arun (@ChettyArun) April 19, 2024
I then started pushing him to know what they'll do and how do they eventually earn money off of this.
Oh, while doing all this bakkar, I also was teaching him what "Gossip" meant 😂
4/n pic.twitter.com/AVNVoFhofc
— Chetty Arun (@ChettyArun) April 19, 2024
While I was trying to get some information from him, he wanted to get on a video call to talk more 😂
I told him I keep getting such messages with APK files and look at him protecting me saying, "Install nahi karna" 🙏
5/n pic.twitter.com/inxwanWh7f
— Chetty Arun (@ChettyArun) April 19, 2024
I obviously avoided the video call. Itna bhi toofani nahi karna tha. But still, wanted to know where they generally get my number to do all this.
While he didn't answer that, looks like the first thing they do once they get message access is take over victim's WhatsApp
6/n pic.twitter.com/2eHkRozNZF
— Chetty Arun (@ChettyArun) April 19, 2024
So, the number you see on the screenshot, it's some victim's number. Truecaller says some gibberish though.
Also, look at him embracing Digital India 😂😂 He started ranting about Digital India saying security is poor so all of this is possible 😂
7/n pic.twitter.com/raTaTEy4N8
— Chetty Arun (@ChettyArun) April 19, 2024
He then went on to give me tips about such messages 🙏 Told me what to do if someone accidentally clicks and installs that APK.
Also, by this time I was comfortable enough with him and added him to my contacts as "Scammy McScammer" 😂
8/n pic.twitter.com/zbmVJFKeBx
— Chetty Arun (@ChettyArun) April 19, 2024
Coming to the main point, he then slowly opened up and said what all they do. Pretty scary actually what all you can do once you have access to someone's number and SMS inbox
9/n pic.twitter.com/q7Yk8zjoF3
— Chetty Arun (@ChettyArun) April 19, 2024
First, take over WhatsApp of the victim.
Second, try installing all ecommerce and bank apps and sign up. OTP anyway comes to them. Once they have access to any such apps, sky is the limit.
Saved card on ecommerce apps? Can do CVV less transactions till a limit. BOOM!
10/n
— Chetty Arun (@ChettyArun) April 19, 2024
Oh, while all this was happening we also got to share some personal stuff 😂
Scammy McScammer congratulated me in advance for shaadi. Such a cool guy.
11/n pic.twitter.com/sgI0jkxR5B
— Chetty Arun (@ChettyArun) April 19, 2024
Scammy McScammer wanted to connect outside WhatsApp now. Because, that's not his number and anytime it'll go kaput.
He wanted my Facebook ID. I said I don't have one and he thought I was scared. He is such a sweet guy he said not to be scared 😂
12/n pic.twitter.com/5towD2URQy
— Chetty Arun (@ChettyArun) April 19, 2024
I said I am on Twitter though and I will spread his tips here 😂
Scammy McScammer immediately understood what I am going to do and deleted all the previous chats 😅
Also, he specifically told me not to post these here 🙈
13/n pic.twitter.com/foimjzf5df
— Chetty Arun (@ChettyArun) April 19, 2024
While Scammy McScammer was doing wrong things, he was a kind hearted guy.
He understands that victim's hard earned money is being looted.
14/n pic.twitter.com/8o0DhpBO3p
— Chetty Arun (@ChettyArun) April 19, 2024
He wanted my Twitter now 🙈 I had to tell him that kuch rishte simple, sweet, aur temporary hi ache lagte hai.
15/n pic.twitter.com/L2ZOJxBDgx
— Chetty Arun (@ChettyArun) April 19, 2024
We finally ended by wishing each other ♥️
Now, while Scammy McScammer is doing something bad he still wanted me to spread this message and warn people out there. So, here it goes:
16/n pic.twitter.com/NCx1aFyHxn
— Chetty Arun (@ChettyArun) April 19, 2024
1. Don't ever click on these APK files. Especially tell elders in your family. Once they have access, it's easy to get more victim leads from WhatsApp
2. Whenever someone installs that APK by mistake, tell them to reset everything
17/17
— Chetty Arun (@ChettyArun) April 19, 2024
The insightful exchange gained traction on social media, drawing the attention of Paytm founder Vijay Shekhar Sharma. Impressed by Arun’s handling of the situation, Sharma shared the thread, sparking discussions about online security and scam awareness.
You won’t stop till you read this full thread ! https://t.co/FD7yX69Xri
— Vijay Shekhar Sharma (@vijayshekhar) April 19, 2024
The viral thread underscores the prevalence of online scams and highlights the importance of vigilance and education in combating cyber fraud. It serves as a reminder for users to exercise caution when interacting with unknown entities online, verifying identities, avoiding suspicious downloads, and reporting any suspicious activity.
Have you encountered online scams before? Share your experiences in the comments below.