Fraudsters targeting housewives on ‘Karwa Chauth’:Fake ‘WhatsApp links’ promising free gifts lure women to click lose money

As the Karwa Chauth festival approaches, shopping activity across markets and online platforms has surged. E-commerce platforms are rolling out heavy discounts and promotional deals to attract buyers. However, cybercriminals are exploiting this festive rush to target unsuspecting shoppers through fake offers and phishing links. Recently, two cases of online fraud were reported in Gwalior, Madhya Pradesh. In the first instance, a woman clicked on a WhatsApp link promising a “Karwa Chauth Free Gift” and lost ₹500 from her bank account within minutes. In the second case, a man searching for a gift for his wife clicked on a festival offer link on social media, leading to ₹1,700 being fraudulently debited from his UPI account. To help consumers protect their hard-earned money, today we will break down how the ‘Karwa Chauth Free Gift Scam’ works, with expert insights from Rahul Mishra, Cyber Security Advisor to the Uttar Pradesh Police. Understanding the Festive Gift Scam Q: What is the ‘Karwa Chauth Free Gift Scam’? A: It is a cyber fraud scheme where scammers lure people with promises of free gifts, special festive offers, or heavy discounts to steal money or personal data. Q: Why do cyber frauds increase during the festive season? A: Increased Shopping Activity: Online purchases of clothes, jewelry, and gifts rise sharply during festivals. Discount Culture: Genuine companies offer attractive deals, making consumers expect discounts. Impulsive Clicks: Shoppers often click on unverified links out of curiosity or excitement for free items. Exploitation by Fraudsters: Cybercriminals take advantage of consumer eagerness and lower vigilance during festive sales. Key Tactics Used by Scammers Fraudsters circulate fake links and messages promising: How Scammers Trap Victims: The APK File Risk Scammers execute this fraud by circulating malicious links or asking users to download APK (Android Package Kit) files. What is an APK file, and why is it dangerous? Definition: An APK is the file format used to install applications on the Android operating system. Official Downloads: When you download an app from the Google Play Store, an APK installs automatically in the background after security checks. The Risk: Danger arises when an APK is downloaded directly from an unknown link or website. These third-party APK files often contain malware that can compromise your phone, granting scammers access to your sensitive financial data, SMS OTPs, and personal information. Common Mistakes That Lead to Fraud: How to Spot Fake vs. Genuine Offers? Action Plan: What to Do If You Open a Suspicous Link or Download an APK If you accidentally click a fake link or install a suspicious file, do not panic. Take these steps immediately: What to Do If Money Has Been Deducted? If you have lost money to a cyber fraud, act swiftly: Contact Your Bank: Report the unauthorized transaction immediately to freeze your account, cards, or UPI ID. Change Banking PINs: Update your UPI PIN and net banking password. Call National Cyber Helpline 1930: Report the incident to the official cybercrime helpline right away. Register a Complaint: File a formal report online at cybercrime.gov.in or visit your nearest Cyber Crime Police Station. Save Reference Numbers: Keep all complaint acknowledgement numbers safely for follow-ups. Essential Evidence to Preserve for Reporting When filing a complaint with the cyber police or your bank, ensure you save the following digital evidence: