Police have warned of a rise in financial fraud linked to online dating applications, in which scammers persuade victims to install malicious software on their phones.
According to police, several incidents have been reported in which victims were deceived through friendship requests, romantic relationships and marriage proposals started on dating apps.
Police said the fraudsters send persuasive and appealing messages over short or extended periods to gain the trust of their targets. They then contact victims on popular platforms including Facebook, WhatsApp and Telegram, posing as people offering sexual services or companionship.
Victims are then persuaded to download and install specific mobile applications. Police said these applications may contain malicious software that can access sensitive financial information and login credentials when victims make online banking transactions. Scammers can then steal money from the victims’ accounts.
In one common method, fraudsters distribute malicious Android application packages (APK files) disguised as dating apps. Once installed, the software can compromise a device and capture banking usernames, passwords and other sensitive information entered during online transactions, police said.
Police said financial scams run through social media and messaging platforms are becoming more sophisticated, with criminals exploiting the promise of love, romance and companionship.
Background
An APK file is the installation package used by Android phones. Apps from the official Google Play store are checked before they are listed, whereas files shared directly through a chat message or a link are not. Android phones normally ask for extra permission before installing an app from outside the store, and that prompt is a sign that the file has not come from an official source.
Fraud that starts with a romantic approach online is often called a romance scam. It relies on building trust over time before a request for money or access to an account is made. Police have previously urged the public to treat unsolicited online approaches with caution, and the latest warning applies the same advice to dating apps.
What it means
Police advised the public not to download applications from unknown or unverified sources. They also asked people not to share sensitive personal information with strangers, including banking details, passwords, one-time passwords (OTPs), personal photographs and video recordings.
The warning applies to anyone in Sri Lanka who uses dating apps or messaging platforms, and to Sri Lankans abroad who use the same services or who bank online with Sri Lankan accounts. Police urged people to take appropriate precautions to protect their personal information, mobile devices and financial accounts from cybercriminals.
Anyone who believes they have installed a suspicious app, or who has lost money, can report the matter to the police. Customers who bank online may also wish to contact their bank, which can advise on securing an account.
