Happy New Year Scam Alert: One Click Can Empty Your Bank Account, Cyber Authorities Issue Warning
As people across the country celebrate the arrival of 2026, cybercriminals are exploiting the festive mood to target unsuspecting users. Under the guise of sending “Happy New Year” greetings, scammers are circulating dangerous links and files on messaging platforms, especially WhatsApp. A single careless click on these messages can lead to complete loss of money from bank accounts and serious compromise of personal data.
Recognising the growing threat, the cybercrime wing under the Ministry of Home Affairs has issued a nationwide alert, urging citizens to remain cautious. According to officials, these scams are spreading rapidly during the holiday season, when people tend to lower their guard while opening messages from familiar contacts.
How the ‘Happy New Year’ Scam Works
Cyber experts explain that fraudsters send New Year wishes along with a link or attachment that appears to be a photo or video. In reality, the file is often an APK (Android Package Kit) file disguised as festive content. Once the user downloads and installs this file, a malicious application secretly gains access to the smartphone.
After installation, the malware can steal sensitive information such as banking details, passwords, OTPs, contact lists, and messages. In some cases, scammers gain full control over the device, allowing them to carry out unauthorised bank transactions without the user’s knowledge. Authorities have warned that many of these messages come from known contacts, as hackers often first compromise one account and then use it to spread the scam further.
Why This Scam Is Especially Dangerous
What makes this New Year scam particularly risky is its timing and presentation. The festive greeting lowers suspicion, and users are more likely to click on content sent by friends or family members. Since APK files are not available through official app stores, they bypass standard security checks, making them highly dangerous.
The Indian Cybercrime Coordination Centre has highlighted that once a phone is infected, the malware can continue to operate silently in the background. Even uninstalling the visible app may not immediately stop the threat unless proper steps are taken.
Simple Steps to Stay Safe
To protect yourself from this scam, experts strongly advise following basic digital safety practices. Avoid opening messages or downloading files from unknown numbers. Never install APK files received through messaging apps, even if they appear to come from someone you trust.
Users should disable installation from unknown sources in their phone settings and ensure that their operating system and security patches are up to date. Installing a reliable antivirus application and keeping it updated can also help detect malicious software early.
If you receive a suspicious greeting or file, verify its authenticity by calling the sender directly. Strengthening privacy and security settings on messaging apps, such as enabling two-step verification, can further reduce the risk of account takeover.
What to Do If You Have Clicked the Link
If you suspect that you have clicked on a malicious link or installed a harmful file, act immediately. Turn on airplane mode to disconnect the device from the internet and prevent further data theft. Change passwords for all banking, payment, and email apps from a secure device.
Check your bank statements and transaction history for any unauthorised activity and inform your bank at once to block or freeze the account if required. Uninstall any suspicious applications and consider getting your phone checked by a certified technician or through a forensic scan.
How to Report the Scam
Victims or potential victims should report such incidents without delay. Complaints can be registered on the national cybercrime reporting portal or by calling the cybercrime helpline number 1930. Early reporting significantly improves the chances of stopping fraudulent transactions and tracing the culprits.
Stay Alert During Festive Seasons
Cybersecurity officials stress that festivals and celebrations are peak times for online fraud. While exchanging greetings and messages is part of the joy of the New Year, staying alert is equally important. Avoid impulsive clicks, verify before trusting digital content, and remember that a moment of caution can save you from major financial and emotional stress.
As 2026 begins, digital awareness remains the strongest shield against cybercrime. Staying informed and cautious will ensure that the New Year celebrations remain joyful and safe.
