Scam trap hidden in Diwali greetings:Beware of these 6 types of messages; learn 8 ways to stay safe from a cyber expert

Today, Diwali is being celebrated with great enthusiasm across the country. Meanwhile, people are increasingly sending colourful greetings, pictures of sweets, and congratulatory messages on WhatsApp. They are sharing the joy of the festival by sending their loved ones best wishes. But just think: what if the message that brings a smile to our faces the moment we open it turns into a ‘problem’? Cyber fraudsters have, in fact, also become active during the festival. They may send fake links and suspicious files in the name of Diwali greetings to trap people. In such a situation, a moment of carelessness could lead to a major cyber fraud. That is why, in today’s ‘Cyber Literacy’ segment, we will discuss Diwali message fraud in detail. We will also learn that- Expert: Rahul Mishra, Cyber Security Adviser, Uttar Pradesh Police Question: What kinds of cyber fraud risks may be hidden in the Diwali greetings, videos and gift links received on WhatsApp and social media? Answer: Cyber fraudsters can target people through Diwali greetings, videos, greeting cards, and gift links. Some common risks include- See all the potential threats in the graphic. Question: What kind of messages can scammers send? Explain with some examples. Answer: Cyber scammers may send people messages in the name of greeting cards, festive videos, gifts, cashback offers, and special festival deals. Sometimes, these messages also appear to come from someone the recipient knows, so that people trust them easily. Here is an example: 1. Message asking you to download a greeting card Example: “A special Diwali video greeting has arrived for you. Download this file to watch it.” Scammers may send an APK file along with the message. If it is installed under the impression that it is a video, a malware-infected app may be installed on the phone. Such an app can put personal data or the phone’s security at risk. 2. A Link Sent in the Name of Someone You Know Example: “Happy Diwali! Look at this photo, I’ve sent it for you.” The message may come from a friend’s or relative’s account. Opening the link takes you to a fake page that asks you to link your WhatsApp account to another device or share a verification code. This can lead to your WhatsApp account being hacked. 3. The Lure of Free Gifts or Cashback Example: “Diwali special offer! Click on this link and get a free gift or ₹5,000 cashback.” The link may take you to a fake website designed to look like that of a well-known company. You may be asked to provide an OTP or personal details in the name of claiming the reward. 4. A Message Containing a Viral Diwali Video Example: “Make sure you watch this viral Diwali video. Click here before forwarding it.” Opening the link may take you to an unfamiliar website. You may be asked to log in to watch a video, enter personal information or download a suspicious file. 5. Message claiming you have won a gift voucher or coupon Example: “You have won a ₹10,000 voucher in the Diwali lucky draw. Enter your details now to claim the prize.” Such messages may create a sense of urgency by setting a deadline for claiming the prize. Your name, mobile number and other sensitive details may be collected on a fake website and misused. Remember: Not every unfamiliar message or link is fake. However, be cautious if a message asks for your OTP or UPI PIN to claim a prize, tells you to install an unfamiliar app or pressures you to click immediately. Even if the message comes from a familiar number, call the person to confirm if you have any doubts. 6. Account verification in the name of sending Diwali greetings Example: “Your Diwali greeting card is ready. Verify your WhatsApp number and enter the code you receive to view it.” This could be an attempt to hack the account. If the WhatsApp verification code is given to another person, they can register the account on their device. Question: What is the APK file sent in the name of a fake greeting card or Diwali video? What harm can downloading it cause to the phone? Answer: An APK file is used to install an app on an Android phone. Cybercriminals may send such files in the name of Diwali greeting cards, festive videos or special offers. Such files may contain malware, which can pose several risks: Question: If a link arrives from a known contact’s WhatsApp number along with Diwali greetings, how can you tell whether the message is genuine? Answer: You can easily identify a genuine or fake message by keeping a few basic points in mind. See the difference between the two in the graphic: Question: What should you check before opening a greeting message or link? Answer: During Diwali, trusting every link received in the name of greeting messages, gifts, and cashback offers can prove costly. Be sure to check a few essential things before opening a link or downloading a file. See all the points in the graphic. Question: What should you do immediately if you accidentally open a suspicious link, install an APK file, or share an OTP? Answer: If you make such a mistake, take the necessary steps immediately instead of panicking. Taking timely action can help minimise the damage. Question: Which WhatsApp and smartphone security settings should always be kept on? Answer: Always keep these settings enabled to keep WhatsApp and your smartphone secure- Question: If money is deducted from a bank account because of a fraudulent Diwali message or link, where should a complaint be filed? Answer: In such a situation, take the following steps immediately: Remember: Do not delay reporting after money has been debited. Reporting immediately may increase the chances of blocking or recovering the amount. However, there is no guarantee.