India’s Ministry of Home Affairs has issued a public alert about a new wave of cyber fraud targeting Android users through porn-themed mobile applications. The ministry urged people to stay vigilant as such scams are increasingly aimed at stealing money from bank accounts.
According to a report from the National Cyber Crime Threat Analytics Unit under the Indian Cyber Crime Coordination Centre, these risky apps are being pushed through advertisements on platforms such as Facebook and Instagram. Users who click the ads are redirected to porn websites, where they are persuaded to download apps from outside the Google Play Store.
The report noted that apps circulating under names such as “Night Play”, “Reelup”, “Kiss”, “Vimo”, “Rivo”, “Nexo” and “Vixa” seek extensive permissions after installation. In particular, they obtain Android’s “Accessibility” permission and run in the background, allowing criminals to take control of the phone and carry out bank transactions without the user’s knowledge.
It also warned that some of these apps download additional malware in the name of an “update”, leading to theft of overall mobile data. Users were advised to install apps only from Google Play Store or authorised sources, avoid suspicious links and ads, never grant Accessibility access to unknown apps, and remove unfamiliar apps immediately.
The ministry further recommended keeping Google Play Protect enabled, updating phone software regularly, and monitoring bank and UPI accounts frequently. Victims or those who spot such fraudulent apps can report immediately via the national helpline 1930 or the official portal www.cybercrime.gov.in.
