Fake Accident Alert Scam Drains Bank Accounts, One WhatsApp Photo Can Hack Your Phone

Cybercriminals are using fear and emotional shock as weapons in a new and dangerous scam known as the “Accident Alert” fraud. In this method, scammers trick victims by spreading false news of a loved one’s accident and then send a malicious photo on WhatsApp. Opening the image is enough to infect the phone with malware, leading to unauthorized bank transactions—without asking for an OTP or PIN.

The scam is spreading rapidly, especially in rural and semi-urban areas, where digital awareness is comparatively low. A single moment of panic or carelessness can result in the victim’s entire bank balance being wiped out.

How the Accident Alert Scam Begins

The scam typically starts with a call from an unknown number. The caller claims that a close relative—such as a family member or friend—has met with a serious road accident. The conversation is designed to create fear, confusion, and urgency, preventing the victim from thinking clearly.

Before the victim can ask questions or verify the claim, the caller abruptly disconnects and says that proof will be sent on WhatsApp. Within moments, a photo file arrives on the messaging app, supposedly showing the accident.

The Dangerous Truth Behind the Photo File

The image sent on WhatsApp is not a normal photo. It is actually a malware-infected file disguised as an image. As soon as the user opens it, malicious software silently installs itself on the phone.

This malware runs in the background and remains invisible to the user. Victims often do not realize that their phone has been compromised until money starts disappearing from their bank account.

Why No OTP or PIN Is Needed

One of the most alarming aspects of this scam is that no OTP, UPI PIN, or banking details are required. The malware misuses app permissions and gains access to sensitive functions on the phone.

Once activated, it can:

• Monitor banking and UPI apps

• Read on-screen activity

• Remotely control the device

• Execute transactions without the user’s knowledge

Because the transactions appear to originate from the victim’s own phone, banks initially treat them as legitimate.

Real Incident Highlights the Risk

In a recent case from Kheda district, a farmer received a call claiming that one of his relatives had met with an accident. Shortly after, a photo file was sent on WhatsApp. Although the farmer opened the file briefly and deleted it due to suspicion, the damage was already done.

Within a few hours, nearly ₹50,000 was withdrawn from his bank account through UPI transactions. A subsequent bank investigation confirmed that the transfers occurred digitally, without any OTP verification.

Why This Scam Is So Effective

Cyber experts say this scam works because it targets human emotions, not technical loopholes. Panic reduces the ability to think logically, making people more likely to open files without verification.

The scammers also exploit:

• Trust in WhatsApp as a safe platform

• Lack of awareness about image-based malware

• Default app permissions on smartphones

How to Protect Yourself From Accident Alert Scams

You can significantly reduce your risk by following these safety steps:

• Do not trust panic-inducing calls from unknown numbers

• Never open images, PDFs, or files sent by unfamiliar contacts

• Verify accident-related claims directly with family members or local sources

• Review and restrict app permissions, especially accessibility access

• Install security updates and antivirus software on your phone

• Immediately report suspicious activity to the Cyber Crime Helpline (1930) or at cybercrime.gov.in

Stay Alert, Stay Safe

As digital payments become more common, cybercriminals continue to invent new methods to exploit users. The fake accident alert scam is a reminder that one careless click can cost thousands of rupees.

Staying informed, cautious, and calm during emergencies is the best defense. If something feels suspicious, pause, verify, and act wisely—because in today’s digital world, fear is the scammer’s biggest weapon.