Rajasthan Police warn of Raksha Bandhan cyber fraud: APK files, fake couriers
Synopsis
Ahead of Raksha Bandhan, Rajasthan Cyber Crime Police have flagged a surge in festival-targeted scams — from malicious APK files named after the festival to fake courier messages and impersonation of relatives on WhatsApp. The advisory, issued on DGP Rajiv Kumar Sharma's instructions, details specific file names and tactics, making it one of the more operationally detailed public warnings issued before a major Indian festival.
Key Takeaways
Rajasthan Cyber Crime Police issued a cyber fraud advisory on 18 August ahead of Raksha Bandhan .
Fraudsters are circulating malicious APK files named 'RakshaBandhan.Greeting.apk' and 'Festival.Gift.apk' via WhatsApp, capable of accessing cameras, messages, and banking apps.
Fake gift offers, discount links, and bogus courier messages are being used to steal banking credentials and personal data.
Cybercriminals are also impersonating relatives on WhatsApp and social media to solicit money transfers.
Citizens can report fraud at National Cyber Helpline 1930 , the Rajasthan Cyber Helpdesk ( 9256001930 , 9257510100 ), or via cybercrime.gov.in .
The Rajasthan Cyber Crime Police on Tuesday, 18 August issued a public advisory warning citizens of a sharp rise in festival-themed cyber fraud ahead of Raksha Bandhan. Fraudsters are reportedly exploiting the emotional and commercial excitement of the festival to deploy malicious APK files, phishing links, fake gift offers, and bogus courier messages designed to steal personal and financial data.
Key Threats Identified
According to Additional Director General of Police (Cyber Crime) V.K. Singh, cybercriminals are circulating files named 'RakshaBandhan.Greeting.apk' and 'Festival.Gift.apk' via WhatsApp. Installing these files can grant attackers access to a phone's camera, gallery, messages, and banking applications.
Fraudsters are also sending messages offering Raksha Bandhan special deals, free gift vouchers, mobile recharges, and heavy discounts — all linking to fake websites built to harvest banking credentials. The advisory notes that such messages are crafted to appear as though they originate from familiar brands or known contacts, making them harder to identify.
Impersonation and Courier Scams
The police flagged two additional tactics gaining traction this season. In one, cybercriminals create fake WhatsApp or social media profiles using the names and photographs of relatives to solicit money transfers. In another, victims receive messages claiming a sibling has dispatched a Rakhi or gift via courier, then are prompted to click a delivery link or pay a nominal fee — an entry point for credential theft.
This comes amid a broader national trend of festival-period cyber fraud spikes, with the National Cyber Crime Reporting Portal consistently recording elevated complaint volumes around major holidays.
What the Government Said
The advisory was issued on the directions of Director General of Police Rajiv Kumar Sharma. The Rajasthan Cyber Crime Police urged citizens to disable WhatsApp's media auto-download feature to prevent harmful files from being received automatically, and to enable two-step verification on WhatsApp and other critical accounts.
Other recommended precautions include: not downloading unknown APK files, not clicking links offering gifts or discounts, directly calling the concerned person to verify any suspicious payment request, and never sharing banking credentials, OTPs, PINs, or other sensitive data with anyone.
How to Report Cyber Fraud
Citizens who suspect they have been targeted are advised to act immediately. Incidents can be reported at the nearest police station, by calling the National Cyber Helpline at 1930, or through the Cyber Crime Reporting Portal at cybercrime.gov.in. The Rajasthan Police Cyber Helpdesk is also reachable at 9256001930 and 9257510100.
With Raksha Bandhan approaching, authorities have urged citizens to verify every suspicious message, link, or payment request before acting — and to treat any unsolicited festival offer with caution.
Point of View
But Rajasthan's warning stands out for naming specific malicious file names — a level of operational detail that actually helps citizens identify threats. The broader pattern, however, points to a structural problem: public digital literacy has not kept pace with the sophistication of social-engineering attacks. Advisories alone will not close that gap. What is missing is a sustained, vernacular-language awareness campaign that reaches rural and semi-urban users who are disproportionately targeted and least equipped to recognise a fake APK or a spoofed WhatsApp profile.
NationPress
18 Aug 2026
Frequently Asked Questions
What cyber frauds are targeting people ahead of Raksha Bandhan?
Fraudsters are sending malicious APK files named after the festival via WhatsApp, along with phishing links disguised as gift or discount offers, and fake courier delivery messages. They are also impersonating relatives on social media to request money transfers.
How can I protect myself from Raksha Bandhan cyber fraud?
Disable WhatsApp's media auto-download feature, do not install APK files from unknown sources, enable two-step verification on important accounts, and never click links offering unsolicited gifts or discounts. Always call the person directly to verify any suspicious payment request.
What should I do if I fall victim to cyber fraud?
Report the incident immediately at the nearest police station, call the National Cyber Helpline at 1930, or file a complaint on cybercrime.gov.in. Rajasthan Police's Cyber Helpdesk is also available at 9256001930 and 9257510100.
Who issued the Raksha Bandhan cyber fraud advisory in Rajasthan?
The advisory was issued by the Rajasthan Cyber Crime Police on 18 August, on the directions of Director General of Police Rajiv Kumar Sharma, with details provided by Additional DGP (Cyber Crime) V.K. Singh.
Why are festivals targeted by cybercriminals?
Festivals like Raksha Bandhan create heightened emotional engagement and a surge in digital transactions, gift-sharing, and messaging activity — conditions that fraudsters exploit to make malicious links and impersonation attempts appear more credible and urgent.
