As people across India get ready to ring in 2026, cyber police in Hyderabad are sounding the alarm about a new scam targeting smartphone users. Criminals are taking advantage of the festive mood by circulating fake “greeting card” links that are actually designed to steal money and personal data.
The warning is simple: be very careful about what you click on, even if it looks like a harmless wish from a friend.
The Fake Greeting Card Trap
The scam works by playing on people’s desire to share holiday cheer. According to the Hyderabad Cyber Crimes Unit, users are receiving messages on WhatsApp, SMS, and social media that promise a way to create a “personalized New Year greeting.”
When you click the link, instead of taking you to a card creator, it asks you to download a file—usually an Android app (APK) with a name like “Happy New Year.apk.”
This is the trap. Since the app isn’t from the official Google Play Store, it bypasses standard safety checks. Once a user installs it, the software infects the phone.
What the Virus Does
Police say this isn’t just a nuisance virus; it is a tool for theft. Once installed on your phone, the malware can scan your device for banking details, passwords, and private photos.
In the worst cases, the attackers can take full control of the device remotely. This turns an innocent attempt to send a greeting card into a serious financial nightmare.
The ‘GhostPairing’ WhatsApp Danger
Authorities also noted a rise in a separate trick called “GhostPairing.” This attack is sneakier because it doesn’t require your password or SIM card.
Scammers send a link—often disguised as a Facebook photo—that redirects to a fake login page. If you fall for it, you are asked to enter a numeric code into your WhatsApp. If you do, you are actually authorizing the scammer’s computer to link to your WhatsApp account. This gives them silent access to read your chats and impersonate you.
How to Stay Safe
With these scams spreading fast, police have issued a few simple rules to keep your data safe this New Year:
-
Ignore the links: If you get a link asking you to download an app to see a greeting, delete it.
-
Stick to the Play Store: Never install apps (APK files) sent via message. Only download from the official Google Play Store.
-
Check before you click: If a friend sends a weird link, ask them about it before clicking.
-
Get Help: If you think you’ve been scammed or lost money, call the national helpline at 1930 immediately to report it.
