It starts with a simple ping, an image from an unknown number, and this might resemble someone familiar. The message might read as something mundane, and curiosity leads the person to tap it.
Within seconds, malware hidden inside the image activates in the background.
The malware intercepts OTPs, bypasses passwords, and opens the doors to bank accounts. The scam completes itself before the victim realizes something is wrong.
This isn't a tale of caution. It's reality. A WhatsApp scam is quietly sweeping India, draining accounts and leaving people stunned.
What's Happening?
Through a practice called steganography, cybercriminals are slipping malware into seemingly harmless WhatsApp images. These images appear benign and won't trigger warnings. But once downloaded, the malware installs silently, extracting bank logins, OTPs, saved passwords, and even taking full control of the device.
In Jabalpur, Madhya Pradesh, one person lost Rs 2 lakh after opening such an image sent by an unknown number. It appeared harmless, but unfortunately, it wasn't.
How the WhatsApp Image Scam Tricks People
This scam doesn't use suspicious links or fake login pages. The image itself is the weapon. Messages like "Is this your photo?" or "Do you know this person?" are crafted to spark curiosity. One click is all it takes.
What Can the Malware Do?
Intercept OTPs in real-time
Access banking apps and initiate unauthorized transactions
Send data to remote servers
Enable remote device control
Install additional spyware
How to Stay Protected
Avoid Media from Unknown Numbers
Unknown senders should be ignored. Don't open files from unknown numbers.
Turn Off Auto-Download
Disable the automatic download feature for photos, videos, and documents in WhatsApp settings. Always review before tapping.
Update the Device Regularly
Security patches in updates can close known vulnerabilities.
Use Reliable Antivirus Software
Install mobile security apps that scan media files for hidden threats.
Watch for Urgent or Emotional Triggers
Messages designed to provoke fear or curiosity are often part of a scam.
Spread Awareness
Family members and the elderly should be made aware of such scams. Sharing this knowledge helps prevent more victims.
Real Victim. Real Loss.
A Jabalpur resident lost Rs 2 lakhs to this scam. However, beyond money, the emotional stress, time spent on formalities, and shaken confidence in technology are equally damaging.
Conclusion
An image is no longer just an image; it can be a trap in disguise. Stay alert and avoid impulsive clicks. One moment of caution can prevent a long trail of regret. Anyone affected should visit cybercrime.gov.in to report the incident.