Kerala police warn of new fake hospital app scam exploiting search results and UPI vulnerabilities

Kerala Police have issued a warning about a new online scam where fraudsters use fake mobile applications and Google search results to target hospital appointment seekers, risking sensitive data theft and unauthorised transactions.

Kerala Police have warned residents about a fresh online scam that uses fake mobile applications to target people searching for outpatient appointment details and contact numbers for major hospitals. The force said fraudsters are exploiting Google search results, where bogus phone numbers can appear alongside legitimate-looking listings, then posing as hospital staff to push victims into downloading malicious app files through WhatsApp.

According to the police warning, the scam can begin with a phone call to one of the false numbers shown in search results. The caller is then sent an Android package file, or APK, which is presented as an appointment-booking tool, a KYC update or a refund-related app. Once installed, the app can compromise the device and expose sensitive information, including one-time passwords and UPI details, potentially leading to unauthorised transfers.

The Times of India and Malayalam-language reports said the police are particularly concerned about users who have enabled UPI Lite, since smaller transactions may not always require a separate OTP. That means repeated low-value debits can be easy to overlook if account holders are not checking statements closely.

The police advised people to confirm hospital contact details only through official websites or verified social media accounts and to avoid installing files received on WhatsApp for any reason. They also said unfamiliar apps should never be granted permissions for SMS, notifications, contacts or phone access, and that downloads should come only from trusted platforms such as Google Play.

If a fake app is suspected, the police said users should disconnect from the internet immediately and contact their bank or UPI provider to secure their account. Victims were also told to report the fraud through the cyber helpline on 1930 or the national cybercrime portal.

Kerala Police has also been promoting its Cyberwall digital safety assistant, which lets users check suspicious messages, links and app files before acting on them. The service is available in English and Malayalam through WhatsApp and Telegram, and the force says it is designed to help people spot scams before any damage is done.

Disclaimer: This article is intended to inform and educate, not to recommend or endorse any financial product, investment or strategy. Please consider your own financial circumstances and seek professional advice where appropriate before making financial decisions.