As people exchange New Year wishes on WhatsApp to welcome 2026, cybercriminals are exploiting the festive spirit to trap unsuspecting users. A new WhatsApp scam has surfaced in which fraudsters are sending fake “Happy New Year” messages disguised as photos or files that can steal personal and banking information.
Cyber experts have warned users not to download any WhatsApp file or image with extensions such as .APK or .XAPK, even if it appears to be a harmless New Year greeting.
How the New Year Scam Works
Scammers send WhatsApp messages containing files named like Happy_New_Year.apk or similar. At first glance, these files look like normal New Year greeting images or animated wishes. However, once downloaded and installed, they secretly install malware on the device.
This malicious software can:
- Steal OTP codes
- Access banking apps
- Extract personal data and contacts
- Take control of the phone in the background
In several reported cases, victims have lost money directly from their bank accounts.
Warning Issued by Cyber Experts
Popular tech tipster Abhishek Yadav flagged the scam on X (formerly Twitter), cautioning users against downloading any New Year–themed APK files received on WhatsApp. According to cybersecurity specialists, these files are designed to gain unauthorized access to smartphones immediately after installation.
Authorities note that such scams spike during festivals and holidays, when users are more likely to click on unknown links or download files without suspicion.
The Hyderabad Police Cyber Crime Wing has also issued alerts, stating that fraudsters are actively circulating malicious APK files and dangerous links through WhatsApp, SMS, and email to target innocent users.
Signs Your Phone May Be Infected
Victims have reported unusual phone behavior after downloading such files, including:
- Apps opening automatically
- Contacts and messages being accessed without permission
- Sudden bank transactions without user approval
How to Stay Safe
Cyber experts advise users to follow these precautions:
- Never download files with
.APKor.XAPKextensions from WhatsApp - Do not click on suspicious links, even if sent by known contacts
- Block and report the sender immediately
- Warn friends and family about the scam
- Keep your phone’s security updates and antivirus software up to date
Bottom Line
A simple “Happy New Year” message could turn into a costly mistake. Staying alert and avoiding unknown files is the best way to protect your phone, personal data, and bank account from cyber fraud this festive season.
Discover more from SD NEWS agency
Subscribe to get the latest posts sent to your email.