Fake doctor number on Google Maps sends an APK that drains your bank account
Scammers replace hospital numbers on Google Maps with their own. When you call, they send a fake booking APK via WhatsApp. Installing it gives them remote phone access; accounts are drained within minutes through silent OTP forwarding.
Also known as: fake doctor appointment app fraud, doctor appointment APK scam India, hospital Google Maps number fraud, TOKEN BOOK APK scam, Doctors_Appointment.apk scam
Already happened to you? Do this in the next few minutes
Call 1930 now- 1 Call 1930 — the national cyber-crime helpline — right now. The sooner you report, the better the chance of freezing the money before it moves.
- 2 Call your bank to freeze the account and block the card immediately. Use the number printed on your card, never a number from the message or caller.
- 3 File a report at cybercrime.gov.in and keep every message, screenshot, and transaction ID.
- ! If you installed any "support", "server", "refund", or remote-access app at their request (AnyDesk, TeamViewer, Quick Support, etc.): disconnect the internet now, then run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
What to do right now
- 1 Book appointments only through the hospital's official website, or call a number you find there — not a number from a web search or Google Maps
- 2 Never install an APK from WhatsApp for any appointment, service, or booking — genuine hospitals use links to their own website or to apps on Google Play Store
- 3 If you installed the APK: uninstall it immediately, call your bank's fraud line to block all transactions, change your UPI PIN and net-banking password from a different device
- 4 If you installed any 'support' or 'server' or 'refund app' or remote-access app at the scammer's request (AnyDesk, TeamViewer, Quick Support, etc.), run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
- 5 Report at https://cybercrime.gov.in or call 1930 (national cyber helpline).
Was remote-access software installed?
If a scammer asked you to install AnyDesk, TeamViewer, Quick Support, or any remote-access app, your device may still be compromised.
Run SeraphSecure to detect and remove it →Red flags
- ⚠ You found the 'hospital' or 'doctor' phone number through a web search or Google Maps — always use the contact page of the hospital's official website
- ⚠ After calling, the person shifts the conversation to WhatsApp and sends a file to download
- ⚠ You are asked to install an APK (outside the Google Play Store) to 'confirm' a medical appointment
- ⚠ A tiny 'token fee' of ₹10–₹50 is asked before the appointment is confirmed — this verifies your bank app is active
- ⚠ The app requests Accessibility Services or SMS permissions — no genuine appointment app needs these
Sources
- The Quint — Fake Appointment App Scam: When Your 'Doctor Visit' Turns Into a Digital Heist
- The420.in — 'Doctor Appointment' App Trap: Ailing Man Loses Lakhs After Fraudsters Gain Phone Access Through Fake Medical Booking Link
- The420.in — Malicious APK Used in Doctor Booking Scam, Police Say (Hyderabad)
- The420.in — Man Loses ₹50,000 in Doctor Appointment App Scam in Agra
- The420.in — Fraudsters Exploit Malicious APK File to Drain Kanpur Builder Accounts
- Mission Ki Awaaz — Investigative Report: The ₹9 Crore 'Digital Dacoity' via Fake Doctor Appointments
- Dainik Jagran English — Rewa Man Duped of ₹1 Lakh Through Fake Doctor Appointment APK Scam
- Medical Dialogues — Hyderabad: Man installs fake app for doctor appointment, loses Rs 4.5 lakh