A Facebook group advertising free tai chi or day-trip events asks you to download an app — it installs a banking trojan
Scammers run fake Facebook community groups offering tai chi, dancing, day trips, or hiking for seniors using AI-generated content. After joining, an "admin" sends a link to download an app to register. The app is the Datzbro Android trojan, which harvests banking PINs and passwords by showing fake credential screens. Scamwatch and Australian banks have issued warnings.
Also known as: fake tai chi group Facebook scam, Datzbro Android banking trojan Australia, fake senior community group malware, fake activity group Facebook scam
Already happened to you? Do this in the next few minutes
- 1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
- 2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
- 3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.
- ! If you installed any "support", "server", "refund", or remote-access app at their request (AnyDesk, TeamViewer, Quick Support, etc.): disconnect the internet now, then run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
What to do right now
- 1 Do not install any app sent to you via Facebook Messenger, WhatsApp, or a private message — real community groups never require sideloaded apps
- 2 If you have already installed the app, factory-reset your device immediately and call your bank on the number on the back of your card to freeze accounts and check for unauthorised transactions
- 3 Report the Facebook group using the in-app 'Report group' option so Meta can review it
- 4 If you installed any 'support' or 'server' or 'refund app' or remote-access app at the scammer's request (AnyDesk, TeamViewer, Quick Support, etc.), run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
- 5 Report to Scamwatch at https://www.scamwatch.gov.au/report-a-scam or ReportCyber at https://www.cyber.gov.au/report.
Was remote-access software installed?
If a scammer asked you to install AnyDesk, TeamViewer, Quick Support, or any remote-access app, your device may still be compromised.
Run SeraphSecure to detect and remove it →Red flags
- ⚠ A Facebook group for local senior activities (tai chi, hiking, dancing, day trips) that you didn't actively seek out — suspicious groups often use AI-generated content and may have names like 'Au TaiChi Wellness Club'
- ⚠ You are moved to Messenger or WhatsApp before you can participate, where a 'group admin' contacts you personally
- ⚠ You are asked to install an app from a link in a message — not from the Google Play Store or Apple App Store
- ⚠ The class location or time is vague, hard to verify, or requires 'registration' via the app before details are shared
- ⚠ The group has many generic-looking posts about seniors exercising, with stock-like photos and no real member interaction
Sources
- ACS Information Age — Tai chi scams target elderly Australians (2026)
- Malwarebytes — Scam Facebook groups send malicious Android malware to seniors (October 2025)
- ThreatFabric / The Record — Seniors targeted: Facebook Android malware scam
- Scamwatch — Malware scam using fake social media groups
- New Zealand CERT — Scammers target Facebook users with free tai chi and social dancing classes (May 2026)