PIB Flags Fake SBI Reward Scam Circulating via SMS, WhatsApp

The PIB Fact Check has exposed a fraudulent phishing scheme circulating via SMS and WhatsApp, wherein cybercriminals impersonate the State Bank of India to deceive unsuspecting users.

The scam entices recipients with a fabricated reward claim of Rs 99,800, urging them to download a malicious application titled ‘SBI REWARD27.apk’.

An official infographic accompanying the alert prominently labels the claim as ‘FAKE’, cautioning users against engaging with such deceptive communications.

Authorities have confirmed that the scheme first surfaced in late 2024 and continues to proliferate into 2026, reflecting the persistence of organised cyber fraud networks.

According to cybersecurity assessments and reports, including those referenced by The Economic Times, the fraudulent application installs malware designed to extract sensitive banking credentials.

This includes login details, financial data, and personal information, thereby exposing victims to significant financial risk. Thousands of users have reportedly been affected by similar schemes.

Officials emphasise that such attacks commonly exploit unsecured downloads and unverified links, making them a prevalent vector for data breaches.

In response, regulators, including the Reserve Bank of India, advise strict vigilance. Users should authenticate any communication directly through official banking platforms, including verified mobile applications or websites.

Experts further recommend enabling two-factor authentication and refraining from downloading APK files from unknown sources. These precautionary measures remain critical to safeguarding digital financial assets amid rising cyber threats.

Also Read: PIB Fact Check Debunks Fake Video Claiming Free Washing Machines For Women