That WhatsApp Wedding Card Could Be Emptying Your Bank Account

A .apk file sent as a 'wedding card' or 'bill app' is a program, not a document — installing it hands over your phone.

The malware abuses Android's Accessibility Service to read OTPs on screen and approve transfers without you.

Never install apps from WhatsApp, Telegram or SMS links — use only the Play Store, and keep Play Protect on.

If you already installed one: switch on airplane mode, uninstall in Safe Mode, then call your bank and 1930.

Android 17's Advanced Protection Mode now blocks unknown installs and rogue accessibility apps — turn it on.