Cops warn of new tactic by scammers to steal from accounts without victims' knowledge

KUALA LUMPUR: Scammers are now able to steal money from bank accounts without the victim's knowledge through Android Package Kit (APK) file links, says Bukit Aman.

Federal Commercial Crimes Investigation Department director Comm Datuk Mohd Kamarudin Md Din said scammers could hack into a phone after the victim accessed an APK link when buying items online.

"Scammers would advertise items for sale on social media sites.

"Interested buyers will then contact them via WhatsApp and be instructed to download and install an APK file, containing a fake application on their mobile phones.

"The application will then take over the existing SMS system," he told a press conference on Thursday (Feb 10).

Comm Mohd Kamarudin said victims were required to register with their personal and banking details before they could use the application.

"After they have provided the information and pressed the 'send' button, an error message will appear as the app is not linked to legitimate banking sites.

"This process is just to give access to the contents of the victim's SMS texts, as well as banking details.

"These scammers are then able to transfer money from the victim's account without their knowledge," he said.

Comm Mohd Kamarudin said five cases have been detected so far, resulting in RM58,844 in losses.

"Three cases were detected in Johor and one each in Penang and Sabah," he said.

Comm Mohd Kamarudin urged the public not to download APK files sent to mobile phones by unknown individuals.

"Don't ever install APK applications from illegitimate sources.

"The safety of your phone's SMS system must always be protected as it will receive a one-time password (for financial transactions)," he said.

The public can contact the CCID Scam Response Centre at 03-2610 1559 / 03-2610 1599 to get further details and advice.