New Delhi: As wedding season approaches, many people send e-invites through WhatsApp, because of its convenience. However, scammers are exploiting this trend by committing a new type of fraud through seemingly harmless wedding invites, turning them into a gateway for serious cyber-attacks.

The scam usually begins with a WhatsApp message from an unknown number claiming to be a wedding invitation. With the message an attached file will appear that looks like a real invitation. In reality, a malicious APK file is included in the message. 

When the recipient downloads this file, a hidden app is installed on their phone, allowing the scammers to track activities, access personal information, and potentially control the phone’s features of the victim.

According to the Himachal Pradesh Police, cybercriminals are now sending these fake wedding invitations via WhatsApp to spread malware. When the attachment is downloaded, the device is hacked, giving scammers full access to private data. Once active, the malware enables hackers to send messages, steal information, and even extort the victim without their knowledge.

DIG Mohit Chawla of the Himachal Pradesh State CID and Cyber Crime Department advises caution, saying, “If you receive an unexpected wedding invitation or file from an unknown number, do not click on it. Always verify the sender and the nature of the file before downloading anything onto your phone.”

Even with trusted contacts, it’s crucial to ensure the file’s authenticity, especially if it’s unexpected. When scammers gain access to a phone, they can send messages as if they were the owner, steal sensitive information, and even commit identity theft.