New Delhi, February 16, 2026 (Read) — A new WhatsApp scam is targeting government employees in the name of the 8th Pay Commission, prompting a warning from the Indian Cybercrime Coordination Centre (I4C) under the Ministry of Home Affairs.
Cyber criminals are sending WhatsApp messages claiming to help employees calculate their revised salaries after the implementation of the 8th Pay Commission. The messages ask users to download a malicious APK file. Once installed, the file allegedly allows fraudsters to take control of the victim’s mobile phone and gain access to banking details, leading to financial loss within minutes.
The alert has been issued through the official social media handle of I4C under its Cyber Dost initiative.
How the Scam Works
According to I4C, government employees are receiving WhatsApp messages asking them to download an APK file to check updated salary details under the 8th Pay Commission. After installation, hackers gain access to the device, retrieve sensitive information, and withdraw money from bank accounts.
The agency has clarified that no official information to salary revision, pension or pay commission updates is ever shared through WhatsApp APK files.
Safety Advisory Issued
I4C has advised government employees to:
Ignore suspicious WhatsApp messages, emails or calls to salary revision.
Avoid downloading APK files from unknown or unverified sources.
Remember that the government never sends .APK files through WhatsApp.
Check official information only on the authorised website:
Downloading APK files from unknown sources can expose users to malware and put personal and financial data at serious risk.
What Are APK Files?
APK (Android Package Kit) files are used to install applications on Android smartphones. While most users download apps from the Google Play Store, APK files allow manual installation of apps.
Android devices have a built-in security feature that blocks installations from unknown sources by default. To install third-party APK files, users must manually enable the “Unknown Sources” option in device settings. I4C has advised users to keep this option disabled to protect their devices from malware and financial fraud.
