credit_noob
TF Premier
Today afternoon, I received an OTP for a ₹14,499 transaction on my HSBC credit card via Amazon.
This raised an immediate red flag — I rarely use this card, and only one relative occasionally uses it for discounts. He isn’t educated and doesn’t read English.
I called him right away and asked if he had requested an OTP.
He said no — he was out ploughing the field and had been receiving nonstop messages from the bank. Alarmed, he started walking home to show his phone to someone who could understand them.
Later, he did a video call with me and shared his screen. That’s when the full picture became clear.
A hacker had sent an APK file via WhatsApp disguised as a “Kisan Subsidy” app, promising ₹2,000 upon registration. My brother believed it and installed the app.
After installation:
First, he tried my brother’s Axis Bank credit card, but it failed due to the per-transaction limit.
Then he attempted to use my HSBC card, which is how I received the OTP.
I immediately contacted Flipkart and asked them to block gift card deliveries, but by the time the call was underway, the gift cards were already delivered.
I then logged into my brother’s Amazon account:
Now, we have critical information about the scammer:
This raised an immediate red flag — I rarely use this card, and only one relative occasionally uses it for discounts. He isn’t educated and doesn’t read English.
I called him right away and asked if he had requested an OTP.
He said no — he was out ploughing the field and had been receiving nonstop messages from the bank. Alarmed, he started walking home to show his phone to someone who could understand them.
Later, he did a video call with me and shared his screen. That’s when the full picture became clear.
A hacker had sent an APK file via WhatsApp disguised as a “Kisan Subsidy” app, promising ₹2,000 upon registration. My brother believed it and installed the app.
After installation:
- The malware read and forwarded OTPs automatically.
- The scammer logged into Flipkart using OTP, added multiple gift cards (₹5K, ₹5K, ₹10K, ₹1K, ₹3K, ₹100) and a ₹15K mobile to the cart.
- He used saved card details and OTPs to try and pay.
- he add his mail id as gift card delivery
- He also entered his own name, mobile number, and delivery address.
First, he tried my brother’s Axis Bank credit card, but it failed due to the per-transaction limit.
Then he attempted to use my HSBC card, which is how I received the OTP.
I immediately contacted Flipkart and asked them to block gift card deliveries, but by the time the call was underway, the gift cards were already delivered.
I then logged into my brother’s Amazon account:
- Canceled all pending orders.
- Logged out all devices.
- We also performed a factory reset on his mobile phone.
Now, we have critical information about the scammer:
- ✅ Name: RAHUL KUMAR
- ✅ Mobile number: 90282 99638
- ✅ Delivery address:
- Rahul
- Gande khori mahuwa
- Khori mahuwa
- DEOGHAR, JHARKHAND 815312
- India
- ✅ Gift card details 5K+5K+100 INR FLIPKART
- ✅email id: jujumuha8809@gmail.com
- Total loss my brother incurred 10100 inr
- kindly suggest the action and incase of any extra data required let me know