{
  "type": "article",
  "title": "CA Loses Rs 1.70 Lakh on WhatsApp Just by Typing 'No', New Scam Steals Money Without Links or OTP",
  "summary": "A chartered accountant lost Rs 1.70 Lakh from his bank accounts simply by replying 'No' to a fraudulent WhatsApp message regarding a transaction. The cybercriminals executed the hack without making the victim click any link or share an OTP.",
  "content": "The ever-growing landscape of online fraud and digital scams now features sophisticated methods capable of wiping out years of hard-earned savings in a single moment of carelessness. A hasty step taken without adequate caution can deliver a lifelong financial blow. Recently, a brand new cyber fraud technique has emerged, causing widespread alarm. Consider how easily a qualified chartered accountant fell victim to this scam and lost money from his account, illustrating just how difficult it is for ordinary citizens to escape such traps.\n\n \n\nThe New WhatsApp Banking Fraud Tactic\n\nA recent case has brought to light a novel banking fraud operating entirely through WhatsApp. In this incident, a chartered accountant lost Rs 1.70 lakh from his accounts merely by typing 'No' in response to a transaction inquiry message on the messaging platform. What makes this case particularly alarming is that the cybercriminals executed the hack without requiring the victim to click on any link or share a single OTP, showcasing an entirely new vector of unauthorized access.\n\n \n\nHow the Scam Was Executed\n\nThe victimized chartered accountant initially received a notification claiming a transaction of Rs 90,000 had occurred. The message asked whether he had performed the transaction, instructing him to reply with 'No' if he had not. The moment he complied and sent the reply, he lost a total of Rs 1.70 lakh from his ICICI and IndusInd bank accounts. He had not clicked on any external links nor shared any OTP; he had simply responded with 'No' and watched his funds disappear.\n\n \n\nThe step-by-step mechanism of this fraud typically unfolds as follows\n \n• Fake Debit Alert: The victim receives a fabricated message stating that a significant amount, such as Rs 90,000, has been debited from their account.\n\n• Prompt to Reply: Immediately afterwards, a follow-up message arrives instructing the user to reply with 'No' if they did not initiate the transaction.\n\n• Hidden Payload: The incoming message contains a concealed auto-execution file embedded within the chat payload.\n\n• Device Takeover: As soon as the user replies with 'No', the hidden file activates, granting hackers complete remote control over the mobile phone.\n\n \n\nInsights From Cyber Experts\n\nKislay Chaudhary, a cyber expert who has resolved complex cases in collaboration with Delhi Police, emphasizes that the most critical elements in this case are WhatsApp and the fraudulent bank notification received through it. He explains that whenever a legitimate banking transaction occurs, customers receive standard text messages via SMS rather than WhatsApp messages. Furthermore, banks never ask customers to click on links within messages, and if a message goes unanswered, banks typically follow up with a call from an official toll-free number. Therefore, if anyone receives a WhatsApp call or message bearing a bank's name, they should never respond, refrain from clicking any links, and instead check their official message inbox.\n\n Chaudhary notes that even in digital arrest scams, fraudsters avoid regular carrier calls and instead initiate video calls over WhatsApp. Citizens are advised to remain vigilant and protect themselves against these emerging fraudulent tactics.\n\n \n\nEssential Precautions to Avoid Fraud\n\nTo protect oneself from falling victim to such elaborate scams, several crucial precautions must be observed\n\n \n• Ignore Unknown Numbers: If you receive a WhatsApp message regarding a debit from an unknown number, do not reply and delete it immediately.\n\n• Verify Through Official Apps: To determine whether a message is genuine or fake, always check your account statement and balance exclusively through your bank's official application.\n\n• Trust Official Channels: Rely solely on official bank alerts and verified customer care numbers rather than unverified messaging contacts.\n\n• No WhatsApp Confirmations: Banks never send such interactive 'Yes/No' confirmation prompts over WhatsApp.\n\nWhat this means for you\nThis emerging fraud directly impacts every mobile phone and bank account holder since money is being siphoned off without requiring any OTP or link interaction.\n\n• For citizens across India: Users must avoid replying to any bank transaction or debit messages received from unknown numbers on WhatsApp. If such a message arrives, verify your account balance immediately through your official banking app.\n\n• On the financial security front: To protect against these scams, prevent unauthorized files from downloading on your mobile device and rely solely on traditional SMS-based official alerts.\n\n• Stopping suspicious communications: Banks never ask customers to confirm financial transactions over WhatsApp using interactive 'Yes/No' prompts.\n\n• Vigilance and identification: If an unknown entity contacts you via WhatsApp calls or messages claiming to represent a bank, refrain from responding without independent verification.\n\nWhy this happened\nThis scam leverages advanced technical vectors where auto-execution files hidden behind chat messages quietly seize control of the user's mobile device.\n\n• Exploitation of messaging features: Cybercriminals utilize malicious files concealed within WhatsApp messages that automatically execute the moment a simple 'No' reply is sent.\n\n• Absence of OTP requirements: Unlike traditional phishing or OTP-based scams, this modern technique relies on psychological urgency and hidden background scripts rather than credential sharing.\n\n• Abuse of institutional trust: Fraudsters send fabricated alerts mimicking official banks, deliberately panicking customers into making hurried responses.\n\n• Ongoing investigations: Law enforcement and cyber experts are currently conducting technical analysis to dismantle the broader network behind this new malware delivery method.\n\nQuestions & Answers\n\n1. What kind of WhatsApp message caused the CA to lose money?\nThe CA received a fake transaction alert of Rs 90,000 instructing him to reply with 'No' if he did not perform the transaction.\n\n2. How much total money was stolen from the accounts?\nA total of Rs 1.70 lakh was siphoned off from the victim's ICICI and IndusInd bank accounts.\n\n3. Was any OTP used during this fraud?\nNo, the hack was executed without clicking any links or sharing any OTP.\n\n4. What activates when replying to the suspicious message?\nReplying with 'No' activates a hidden auto-execution file embedded in the message that grants hackers full control over the phone.\n\n5. Which cyber expert warned about this new scam?\nCyber expert Kislay Chaudhary, who has collaborated with Delhi Police, detailed this new fraudulent method.\n\n6. Through which medium do banks normally send transaction alerts?\nBanks send transaction alerts via standard text messages (SMS) rather than WhatsApp messages.\n\n7. What communication medium do fraudsters use in digital arrest cases?\nFraudsters use WhatsApp video calls instead of regular phone calls in digital arrest scams.\n\n8. What precautions should be taken to avoid this fraud?\nNever reply to debit messages from unknown numbers and check your balance exclusively through the official bank app.",
  "url": "https://trendkia.com/en/crime/whatsapp-par-no-likhte-hi-ca-ke-khate-se-ude-1-70-lakh-rupye-39925",
  "category": "Crime",
  "publishedAt": "2026-09-28",
  "tags": [
    "Cyber Fraud",
    "WhatsApp Scam",
    "Digital Security",
    "Banking Fraud",
    "OTP Scam",
    "Online Scam",
    "Kislay Chaudhary"
  ],
  "language": "en",
  "site": "TrendKia"
}