That Wedding Invite APK on WhatsApp Can Empty Your Phone

A file ending in .apk is an app installer, not a wedding card or PDF — never tap it.

The malware abuses Android Accessibility to read your screen, steal OTPs and approve payments silently.

Turn off 'Install unknown apps', keep Play Protect on, and only install from the Play Store.

If you already installed one: enable airplane mode, uninstall in Safe Mode, then change banking passwords.

Audit Settings > Accessibility regularly and remove any service you don't recognise.