Gujarat cyber scam uses PM Modi's name in fake ₹8,000 Diwali aid scheme

Share:
Audio Loading voice…
Gujarat cyber scam uses PM Modi's name in fake ₹8,000 Diwali aid scheme

Synopsis

Cybercriminals are exploiting PM Modi's name and Diwali sentiment to push a fake ₹8,000 cash-aid scheme — a two-stage attack that first hijacks WhatsApp via a 'Linked Devices' code trick, then drains bank accounts through rogue APK files. The Ahmedabad Cyber Crime Branch says the government is offering no such benefit and urges citizens to call helpline 1930 immediately if targeted.

Key Takeaways

The Ahmedabad Cyber Crime Branch has warned of a fake social media message falsely claiming PM Narendra Modi is offering ₹8,000 in Diwali cash assistance.
Fraudulent links trick users into entering an eight-digit code under WhatsApp's Linked Devices settings, handing hackers full account control.
A second stage coerces victims into installing malicious .apk files that expose SMS, OTPs, and banking apps to hackers.
The government has confirmed it is not offering any ₹8,000 festival aid through such links or messages.
Victims or those whose accounts are compromised should call the National Cyber Crime Helpline at 1930 or file a complaint on the official cybercrime portal.

The Ahmedabad Cyber Crime Branch has issued an urgent public warning against a fraudulent message circulating widely on social media, falsely claiming that Prime Minister Narendra Modi is offering ₹8,000 in cash assistance ahead of the Diwali festival. The fake messages, according to officials, are being weaponised to hijack WhatsApp and Telegram accounts and drain victims' bank accounts.

How the Scam Works

The fraudulent messages assert that all Indian citizens are eligible for the ₹8,000 benefit and embed suspicious links directing users to counterfeit websites. Once on the fake site, victims are told their mobile number has been 'selected' for the reward — but to claim it, they must first share the link with five WhatsApp groups or 20 contacts on WhatsApp or Telegram. This step is designed purely to amplify the scam's reach virally.

Users who proceed are then asked to enter their mobile number. The website subsequently displays an eight-digit 'Connection Code', instructing victims to enter it under the 'Linked Devices' option in their WhatsApp settings. 'Once the code is entered, hackers gain control of the victim's WhatsApp account,' the Cyber Crime Branch stated. The same technique is reportedly being used to compromise Telegram accounts.

The Malicious APK Stage

In a second phase, victims are persuaded to download and install malicious Android application package (.apk) files, under the pretext of receiving the reward via PhonePe or withdrawing cash. Once installed, these rogue applications can grant hackers access to SMS messages, one-time passwords (OTPs), banking applications, and all other data stored on the device — potentially enabling direct withdrawals from the victim's bank account.

Notably, .apk files distributed through unofficial links bypass the safety checks built into the Google Play Store, making them significantly more dangerous. If a device displays a 'File might be harmful' warning during a download, users are advised to cancel the process immediately.

What the Government Said

The Cyber Crime Branch clarified unequivocally that the government is not offering any ₹8,000 cash assistance through such links or messages. Citizens have been urged not to forward these messages, not to click on links from unknown sources, and never to enter any code under WhatsApp's Settings > Linked Devices at the request of an unverified source or website.

Those who have already linked an unauthorised device are advised to log it out immediately. For Telegram users, the branch recommends enabling Two-Step Verification via Settings > Privacy and Security, checking 'Active Sessions', and removing any unfamiliar devices. Users are also warned never to share their login codes with anyone.

How to Report and Seek Help

Citizens who fall victim to this fraud or discover their social media accounts have been compromised are urged to report the matter immediately by calling the National Cyber Crime Helpline at 1930 or by filing a complaint on the official cybercrime portal. Prompt reporting, officials noted, improves the chances of account recovery and can help prevent financial loss. This warning comes at a time when festival seasons have historically seen a spike in phishing and social engineering attacks targeting digital payment users across India.

Point of View

And this scam is a textbook escalation: it weaponises a trusted name, a culturally resonant moment, and two-factor fatigue simultaneously. What makes it more insidious than a standard phishing link is the WhatsApp Linked Devices exploit — a legitimate security feature turned into a backdoor. Authorities issuing reactive advisories after a scam goes viral is an inadequate response cycle; proactive platform-level alerts from WhatsApp and Telegram during peak festival periods are overdue. The fact that the scam relies on viral forwarding by victims to propagate means public awareness is quite literally the most effective containment tool available.
NationPress
12 Nov 2026

Frequently Asked Questions

What is the fake Diwali ₹8,000 scam in PM Modi's name?
It is a fraudulent social media message falsely claiming that Prime Minister Narendra Modi is offering ₹8,000 in cash assistance for the Diwali festival. The Ahmedabad Cyber Crime Branch has confirmed the government is not offering any such benefit, and the links are designed to steal WhatsApp access and banking information.
How do hackers hijack your WhatsApp through this scam?
The fake website displays an eight-digit 'Connection Code' and instructs victims to enter it under WhatsApp's Settings > Linked Devices option. Once entered, hackers gain full remote access to the victim's WhatsApp account without needing the victim's phone physically.
What should you do if you have already clicked the link or entered the code?
If you have linked an unauthorised device on WhatsApp, go to Settings > Linked Devices and log it out immediately. For Telegram, enable Two-Step Verification and check Active Sessions to remove unfamiliar devices. Report the incident to the National Cyber Crime Helpline at 1930 or file a complaint on the official cybercrime portal.
What are the malicious APK files being used in this scam?
Fraudsters persuade victims to download unofficial Android application package (.apk) files, claiming they are needed to receive the reward via PhonePe. Once installed, these apps grant hackers access to SMS messages, OTPs, banking applications, and other sensitive data stored on the device.
How can citizens protect themselves from festival-season cyber scams?
Citizens should never click on links from unknown sources, never share login codes or enter device-linking codes at a stranger's request, and only download apps from the official Google Play Store. If a download triggers a 'File might be harmful' warning, cancel it immediately and report the incident to helpline 1930.
Nation Press
The Trail

Connected Dots

Tracing the thread behind this story — newest first.

8 Dots
  1. Latest 3 weeks ago
  2. 3 weeks ago
  3. 1 month ago
  4. 2 months ago
  5. 3 months ago
  6. 4 months ago
  7. 4 months ago
  8. 7 months ago
Google Prefer NP
On Google