Crime Maharashtra

Retired soldier in Pune loses Rs 28.7 lakh to pension verification link

A 65-year-old retired Army soldier from Shirur in Pune district lost Rs 28.7 lakh in a suspected remote-access cyber fraud, police said. On the morning of September 11 he received a WhatsApp message from an unknown number with a link to an APK file titled 'Pension Card Verification Retired Personnel'. After he installed it, a caller posing as a bank employee asked him to keep his phone on and not disclose OTPs. Nine transactions in three hours drained his accounts. Shirur police registered an FIR.

Written by AI from Indian Express — Cities · not yet reviewed by an editor · Published 16 Sept 2026, 2:16 pm IST

Source

Indian Express — Cities · read the original report ↗

#cyber fraud#apk scam#pension#pune#police

Desk check · compared with the source

What the desk checked (5)

A 65-year-old retired Army soldier from Shirur in Pune district lost Rs 28.7 lakh in nine transactions within three hours. — Attributed to police; headline of source says Rs 28 lakh while body says Rs 28.7 lakh — internal figure discrepancy.
The victim received a WhatsApp message on the morning of September 11 with a file titled 'Pension Card Verification Retired Personnel' and installed the APK. — Date and file name appear in source, attributed to police account.
A caller claiming to be from a bank asked him to keep his phone on and not disclose OTPs. — Direct quote attributed to an unnamed officer from Pune rural police.
The fraud was reported via the National Cyber Crime Reporting Portal and Shirur police registered an FIR. — Stated in source; no case or FIR number given.
Police advise against installing apps received via WhatsApp or SMS from unsolicited messages. — Advisory attributed to police, no named official.

Written by AI from Indian Express — Cities · not yet reviewed by an editor · How we use AI · Report an error

Analysts’ view opinion

AI Legal Analyst

This is, in legal terms, a fairly standard cheating-plus-computer-intrusion case: an FIR has been registered by Shirur police, and such matters are typically built on provisions dealing with cheating and impersonation under general criminal law read with the information technology statute's offences on identity theft, dishonest use of computer resources and unauthorised access. The reported facts — an APK file sent over WhatsApp, a caller impersonating a bank official, and nine debits totalling Rs 28.7 lakh within three hours — go to intent and deception, which are the core ingredients the investigation must establish. The other significant legal question the story raises but does not answer is civil: whether the victim can recover from his bank under the regulatory framework on customer liability in unauthorised electronic transactions, which generally turns on how quickly the fraud was reported and whether negligence is attributed to the customer.

The FIR is only the trigger for investigation; the substantive test will be tracing the money trail and the mule accounts, since the accused are described only as unknown numbers at this stage.
Cases of this kind usually engage both general penal provisions on cheating and impersonation and the IT law's offences relating to identity theft and unauthorised access to a device.
Reporting through the National Cyber Crime Reporting Portal is procedurally important, as prompt reporting is what typically enables freezing of the beneficiary accounts and shapes any later claim for reimbursement.
The disclosure of OTPs is legally double-edged: banks often cite it to attribute customer negligence, while consumer fora and courts have in various matters weighed whether the customer was deceived by impersonation and whether the bank's fraud-detection systems failed to flag nine rapid high-value debits.
The victim's status as a senior citizen and a pensioner may be relevant to how the case is prioritised and to any grievance he raises with the bank, though the story does not state that any such claim has been made.

What to watch — Watch whether investigators are able to freeze or recover any part of the Rs 28.7 lakh, whether any arrests follow, and whether the question of bank liability for the nine transactions is raised through the banking ombudsman or consumer route.

The story establishes a complaint and an FIR, not guilt, and it does not identify any accused, state which specific offences have been invoked, or say whether any money has been frozen or whether the bank has been asked to bear any liability.

Deep dive

Research brief · 8 facts · 4 dates · exam-ready

The brief

Context

A 65-year-old retired Army soldier from Shirur in Pune district lost Rs 28.7 lakh from his pension and savings accounts in what police suspect was a remote-access cyber fraud. It began with a WhatsApp message from an unknown number carrying a link to an APK file titled "Pension Card Verification Retired Personnel", which he installed believing it related to his Army pension. In remote-access scams, fraudsters pose as bank officials, utility providers or government departments to get victims to install apps that can let them view or control the device and push through fraudulent transactions. Shirur police have registered an FIR.

Key facts

The victim is a 65-year-old retired Army soldier from Shirur in Pune district.
He lost Rs 28.7 lakh in nine transactions within three hours from his pension and savings account.
On the morning of September 11 he received a WhatsApp message from an unknown number with a link to a file titled 'Pension Card Verification Retired Personnel'.
The file was an APK — the format used to install applications on Android phones.
After opening the file, a caller claiming to be from a bank said he would help prepare a senior-citizen pension account and asked him to keep his phone switched on.
The victim received multiple OTPs and was told by the caller not to disclose them.
The fraud was reported through the National Cyber Crime Reporting Portal with help from his daughter; Shirur police registered an FIR.
Police advised people not to install applications received via WhatsApp, SMS or other unsolicited messages, especially when asked to bypass app stores or grant unusual permissions.

Timeline

Morning of September 11The retired soldier receives a WhatsApp message from an unknown number, then a link to the 'Pension Card Verification Retired Personnel' APK file, and downloads and opens it.
Soon after opening the fileA caller from another number, posing as a bank employee, offers to prepare his senior-citizen pension account and asks him to keep his phone switched on; multiple OTPs arrive, which he is told not to disclose.
That afternoon, within three hoursHe receives transaction messages; Rs 28.7 lakh is drained in nine transactions from his pension and savings account.
After discovering the lossHe informs his daughter, who helps report the fraud on the National Cyber Crime Reporting Portal; Shirur police register an FIR.

Who has a stake

The 65-year-old retired Army soldier (complainant) — Lost Rs 28.7 lakh of pension and savings; awaiting investigation and any recovery.
Pune rural police / Shirur police — Registered the FIR and must trace the fraudsters and the money trail in a suspected remote-access fraud.
Senior citizens and pensioners — Prime targets of pension- and KYC-themed lures because such messages appear routine and urgent.
Banks and service providers (gas, electricity, government departments) — Their identities are impersonated; police stress genuine providers never ask customers to install unknown APK files.
National Cyber Crime Reporting Portal — Serves as the reporting channel through which victims like the complainant register cyber fraud complaints.

Why it matters

A single unsolicited WhatsApp link was enough to compromise a pensioner's phone and empty his life savings within hours, showing how remote-access scams bypass the usual safeguards once permissions are granted. Because such frauds exploit routine obligations — pension verification, KYC, electricity bills — elderly and less digitally aware users are disproportionately vulnerable. The case underlines that awareness about APK files, app permissions and OTP secrecy is now basic financial safety.

UPSC angle

Prelims pointers

APK: the Android Package file format used to install applications on Android phones; the fraud began with an APK link on WhatsApp.
National Cyber Crime Reporting Portal is the channel used by the victim's family to report the fraud.
Amount lost: Rs 28.7 lakh in nine transactions within three hours.
Location: Shirur, Pune district; case handled by Shirur police under Pune rural police.
Modus operandi: fraudsters pose as bank officials, electricity or gas providers or government departments to get an APK installed and OTPs used.
Police advisory: never install apps sent via WhatsApp/SMS or bypass official app stores or grant unusual permissions.

Mains framing

The Pune case illustrates the anatomy of remote-access cyber fraud: a lure built around a routine, credible obligation (pension card verification), delivery through a trusted messaging platform, installation of a malicious APK outside official app stores, and a follow-up voice call impersonating a bank official to secure device permissions and control of OTPs. The causes are structural as much as technical — low digital literacy among elderly pensioners, the ease of sideloading apps on Android, the social authority of anyone claiming to be from a bank or government department, and the speed with which nine transactions can be executed in three hours before detection. Implications include erosion of trust in digital financial services, large uninsured losses to individuals dependent on pensions, and heavy investigative burdens on district police tracing money trails across accounts. The way forward, as reflected in the source, lies in prevention and rapid reporting: police advisories against installing apps from unsolicited messages or granting unusual permissions, clear public messaging that genuine service providers never require APK installs for bill payment or verification, targeted awareness for senior citizens, and prompt use of the National Cyber Crime Reporting Portal so complaints are registered quickly.

Key terms

Remote-access fraud: A scam where victims are tricked into installing an app that lets fraudsters view or control their device, access sensitive data and enable fraudulent transactions.
APK file: The file format used to install applications on Android phones; malicious APKs are often sent through messaging apps to bypass official app stores.
OTP (One-Time Password): A single-use code sent for transaction verification; here the fraudster used OTPs arriving on the victim's phone while telling him not to disclose them.
National Cyber Crime Reporting Portal: The official platform on which cyber fraud complaints are lodged; the victim's daughter used it to report the loss.
FIR (First Information Report): The police document registering a cognisable offence; Shirur police registered one in this case.

Practice questions

Discuss how remote-access cyber frauds exploit routine service obligations such as pension verification and KYC, and suggest measures to protect elderly citizens.
Examine the role of institutional mechanisms such as the National Cyber Crime Reporting Portal and district police in responding to high-value digital financial frauds.
'Digital financial inclusion without digital literacy creates new vulnerabilities.' Critically analyse in the light of APK-based scams targeting pensioners.

Grounded only in the source report — figures and dates are the source's, not inferred.

Next storyBhagyashree, parents in dispute over Sangli Ganesh temple aarti →

← All stories