Cybercriminals have once again allegedly used APK files as a tool to carry out online fraud. In two separate incidents in Noida, elderly victims were allegedly lured with offers of assistance in obtaining a credit card and accessing Income Tax Form 16 information before being persuaded to download APK files. Soon after the files were downloaded, a total of ₹17 lakh was transferred from their bank accounts. Both victims approached the Cyber Crime Police Station on Friday and filed complaints. Police are now examining the bank accounts, mobile numbers and transaction trails linked to the alleged fraud.

The first case involves a textile businessman from Sector 61. On May 18, 2025, Rajesh allegedly received a phone call from a person claiming to be a bank employee. The caller offered to help him obtain a credit card from home and told him that the application process could be completed online. During the conversation, the caller allegedly sent Rajesh an APK file, claiming it was required to complete the application.

Rajesh followed the instructions and downloaded the APK file. The caller subsequently told him that his credit card application had been successfully completed and that the card would be delivered shortly. However, the following day, ₹8 lakh was transferred from Rajesh’s bank account. He realised that he had allegedly fallen victim to a cyber fraud after noticing the unauthorised transactions.

The second case involves Hemant, a retired railway employee living in Sector 107. He had searched online for information related to Income Tax Form 16. On July 3, he allegedly received a call from a person who claimed that he could provide information and assistance regarding the form. The caller allegedly used this pretext to persuade Hemant to download an APK file.

After Hemant downloaded the file, ₹9 lakh was allegedly transferred from his bank account. He discovered the fraud after noticing the unauthorised withdrawal of funds. Following complaints from both victims, cybercrime investigators have begun examining the circumstances surrounding the two incidents.

APK, or Android Package Kit, is the file format used to install applications on Android devices. However, cybercriminals can misuse APK files to distribute malicious applications. Once installed, such applications may potentially allow criminals to access sensitive information, monitor device activity or manipulate victims into carrying out financial transactions.

Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said cybercriminals are increasingly combining technology with social engineering to gain the trust of victims. Fraudsters often pose as bank employees, government officials or representatives of service providers and then persuade people to install APK files or other suspicious applications. He cautioned that downloading an application at the instruction of an unknown caller can expose users to serious financial and privacy risks.

In these two cases, the alleged fraudsters exploited different requirements of the victims. In one case, the lure involved a credit card, while in the other, the fraudsters used the victim’s search for Form 16 information. Such tactics allow criminals to create a sense of urgency and legitimacy before directing victims towards potentially malicious files.

Police are now tracing the mobile numbers used to contact the victims, the bank accounts that received the money and the subsequent movement of the funds. Investigators are also examining whether the ₹17 lakh was transferred to common accounts or moved through a connected network of mule accounts.

The possibility of a common cybercrime network is also being examined. If investigators find similarities between the mobile numbers, bank accounts, digital identifiers or transaction routes used in the two cases, they could help establish links between the incidents and identify additional members of the alleged network.

The investigation will also focus on the digital evidence available on the victims’ devices. Police may examine the APK files, installation records, communication history, mobile numbers and banking transactions to determine how the alleged fraud was executed and where the stolen money was ultimately transferred.

Cybersecurity experts advise people not to download APK files sent by unknown callers, even when the caller claims to represent a bank, the Income Tax Department or another government or financial institution. Information about such services should be obtained through official websites or verified channels. If a suspicious application is installed accidentally, users should immediately contact their bank, secure their accounts and report the incident to the cybercrime authorities.

The growing importance of privacy governance and responsible data management took centre stage at the FutureCrime Summit 2026, where industry experts discussed how Indian organizations can strengthen accountability for personal information.

A panel titled “Data Fiduciary Accountability: Governance, Audits and the Role of Data Protection Officers in India” examined the changing responsibilities of businesses as India’s digital ecosystem and privacy framework continue to evolve.

The discussion featured Suditi Tandon, Senior Officer, Global Data Privacy Office Specialist, Corporate Legal & Compliance at Hella India Automotive Private Limited; Krishan Kumar, Vice President at SPECTRA; Dipanshu Parashar; and Nirmal Raj M, Principal Officer & Risk Compliance Lead at Onmeta.

Data Governance Is Becoming a Business Responsibility

A key message from the discussion was that data protection can no longer be viewed solely as a legal or compliance exercise.

Organizations handling personal information need to establish clear oversight over the entire data lifecycle. This includes understanding what information is collected, the purpose for collecting it, where it is stored, who has access to it and when it should be deleted or retained.

The challenge becomes more complex as businesses increasingly depend on cloud infrastructure, digital platforms and external technology providers. Maintaining visibility over personal information across these interconnected systems requires stronger internal governance and clearly defined accountability.

Privacy policies and consent mechanisms remain important, but they are only part of an effective data protection framework. Organizations also need operational controls that translate privacy principles into everyday business practices.

Data Audits Can Reveal Hidden Governance Gaps

The panel also highlighted the role of audits in determining whether privacy policies are working in practice.

A well-designed data audit can assess areas such as information inventories, access permissions, retention procedures, third-party relationships and internal controls. Such reviews can identify weaknesses that may not be apparent from written policies alone.

Third-party data processing was another important consideration. When organizations rely on outside vendors or technology platforms, they need adequate oversight of how information is processed throughout its lifecycle. Simply transferring data to a service provider does not remove the need for effective accountability.

Regular audits can therefore serve as an important mechanism for identifying operational shortcomings before they become larger compliance, privacy or security concerns.

DPOs Moving Beyond Traditional Compliance

The evolving role of Data Protection Officers was another major theme of the session.

DPOs increasingly operate across several areas, including privacy law, technology, risk management and corporate governance. Their responsibilities can extend beyond maintaining documentation to advising senior leadership, assessing privacy risks and helping organizations build stronger data-handling processes.

The professional backgrounds of the panelists also reflected the multidisciplinary nature of modern privacy governance, bringing together corporate privacy, legal technology, artificial intelligence, compliance, risk management and cybercrime-related perspectives.

This broader role positions DPOs as an important part of an organization’s internal accountability structure rather than simply as administrative compliance personnel.

Building Trust Through Stronger Accountability

The FutureCrime Summit discussion underlined a broader shift in the way organizations approach personal data.

Effective data protection requires cooperation between management, legal and compliance teams, technology professionals, security functions and other business units. Clearly assigned responsibilities, regular audits and appropriate technical safeguards all contribute to a stronger governance framework.

As businesses become increasingly dependent on personal information and digital services, responsible data management is also becoming closely linked to consumer confidence and digital trust.

The panel’s central takeaway was clear: accountability for personal data must be embedded across an organization rather than left to a single department or compliance function.

Engineering and infrastructure major Larsen & Toubro (L&T) has announced plans to invest ₹5,000 crore in a new electronics business aimed at expanding India’s capabilities in advanced hardware manufacturing.

The strategic initiative will focus on developing high-value electronic systems for sectors including defense, energy, industrial automation, automotive technology, and infrastructure. The company aims to build a strong position in a growing electronics market estimated to have a total addressable opportunity of around $4.85 billion.

Moving Beyond Traditional Engineering Operations

The expansion represents a major step in L&T’s transition from its traditional engineering, procurement, and construction (EPC) business toward technology-driven manufacturing.

The company plans to use its engineering expertise and industrial experience to develop end-to-end capabilities covering electronic system design, precision manufacturing, testing, and system integration.

The new business is expected to serve both Indian customers and international markets, supporting demand for locally developed and manufactured electronic solutions.

Focus on Defense, Energy and Industrial Electronics

Rather than competing in low-margin consumer electronics, L&T’s new venture will concentrate on specialized, high-reliability systems.

Key focus areas are expected to include:

• Power electronics systems
• Renewable energy control solutions
• Industrial automation equipment
• Defense and aerospace electronics
• Smart grid technologies
• Advanced embedded systems

The initiative aligns with India’s efforts to strengthen domestic electronics production and reduce dependence on imported hardware through government programs, including Production Linked Incentive (PLI) schemes.

Investment to Support Manufacturing and Research

L&T plans to deploy the ₹5,000 crore investment in phases to establish advanced manufacturing facilities, research and development centers, and testing infrastructure.

The company is also expected to explore technology partnerships and strategic acquisitions to expand its capabilities and accelerate product development.

By building a complete electronics ecosystem, L&T aims to compete in sectors where reliability, security, and specialized engineering expertise are critical.

India Benefits From Global Supply Chain Shift

The expansion comes as global companies continue diversifying their supply chains under the “China Plus One” strategy, creating new opportunities for India’s electronics manufacturing sector.

Growing demand for electric vehicle components, renewable energy systems, industrial automation, and smart infrastructure is expected to drive long-term growth in locally produced electronic components and systems.

Industry observers view L&T’s move as a significant investment in India’s advanced manufacturing ambitions. The company joins other major Indian corporations expanding into areas such as electronics manufacturing, semiconductor-related industries, and technology hardware.

Strengthening Domestic Technology Capabilities

L&T’s electronics business is expected to contribute to India’s broader goal of developing a stronger domestic hardware ecosystem.

By combining engineering capabilities with advanced manufacturing, the company aims to create solutions for critical industrial and national security applications while reducing reliance on imported electronic systems.