PIB Fact Check Flags SMS Phishing Scam Claiming Expiring SBI Reward Points

The Government’s fact-verification unit, PIB Fact Check, has issued a public warning about a phishing campaign circulating through SMS.

The fraudulent message claims that recipients possess Rs 99,800 in expiring reward points from the State Bank of India (SBI).

The message urges users to redeem the alleged reward balance immediately. It directs them to download a mobile application file titled ‘SBI REWARD27.apk’.

Authorities have confirmed that the file is malicious. Cybercriminals use such APK files to infiltrate devices and harvest confidential banking credentials.

PIB Fact Check shared an accompanying visual highlighting the scam. The image prominently stamps the message with bold red ‘FAKE’ markings.

The advisory stresses that SBI never sends unsolicited APK files or download links via SMS or WhatsApp.

It reiterates that legitimate banks do not distribute applications outside official app stores.

Malicious APK Fraud Alert

Officials stated that the scam aims to deceive customers into installing harmful software.

Once installed, the application can access sensitive data, including account numbers, passwords and one-time passcodes.

Fraudsters then exploit this information to conduct unauthorised transactions.

The warning aligns with advisories previously issued by SBI in December 2025.

The bank had cautioned customers about the surge in APK-based digital fraud.

Data released by the Reserve Bank of India (RBI) indicates that such incidents rose by 25 per cent across India in 2025. These schemes frequently result in unauthorised access to bank accounts and financial losses.

Authorities have urged citizens to remain vigilant. They have advised users not to click on suspicious links or download unknown files.

Consumers should verify any financial communication directly through official bank channels.

PIB Fact Check has encouraged the public to report dubious messages promptly.

Officials emphasised that awareness remains the strongest defence against digital fraud.

They reaffirmed that financial institutions follow strict protocols and do not solicit confidential information through informal messaging platforms.

Also Read: PIB Fact Check Refutes False Claim Of Kashmiri Strike