Cybercriminals are increasingly targeting LPG cylinder consumers with a new fraud tactic by exploiting KYC update requirements. Victims receive messages claiming that their gas connection KYC must be updated immediately or the supply will be stopped. The scammers then send an APK file through SMS or messaging platforms such as WhatsApp. Officials warn that if users click the link and install the application, their sensitive financial information could be compromised within minutes. V. C. Sajjanar has issued a public warning urging consumers to remain alert and avoid installing such files.
A recent incident in Dombivli highlights the seriousness of the scam. Two women reportedly lost around ₹4 lakh after being deceived by fraudsters posing as gas company representatives. The callers asked them to complete a KYC form and sent an APK file to their phones. After installing the application and entering their details, the victims soon discovered that money had been withdrawn from their bank accounts.
Authorities say these malicious applications allow cybercriminals to gain complete control over a victim’s mobile device. Once installed, the apps can access SMS messages, including bank alerts and one-time passwords (OTPs). This enables the attackers to conduct unauthorized financial transactions and withdraw funds without the account holder’s knowledge.
Officials have strongly advised consumers never to download APK files received via messaging platforms. For KYC updates, users should rely only on official applications such as IndianOil One, HP Pay, or Hello BPCL, or visit their local gas agency directly. In case of fraud, victims are urged to immediately contact the national cybercrime helpline 1930 or file a complaint through the National Cyber Crime Reporting Portal.