Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →A wedding invitation that arrives as an Android .apk file is an app installer—not a card to open. Don’t install it. India’s Cyber Swachhta Kendra reported that a SpyMax remote-access trojan was distributed through fake wedding-invitation apps on messaging platforms including WhatsApp. Its June 25, 2025 alert warns that, after installation and access to sensitive permissions, the malware can steal contacts, SMS messages, bank OTPs and notification content.
How to tell an invitation from an app installer
A normal invitation image or document can be viewed as a picture or file. An .apk is an Android application package: opening it prompts you to install an app. A message may claim the APK is a wedding card, but that does not make it one.
As an Amazon Associate I earn from qualifying purchases.
The Cyber Swachhta Kendra alert names a sample, Wedding Invitation[.]apk. The risk described is tied to installing the malicious app and granting access—not simply receiving or viewing a WhatsApp message.
How the wedding-invitation scam works
- The lure: A message or link presents itself as a wedding invitation and encourages you to download an APK.
- The installation: The file asks you to install an app. During setup or afterward, it may seek powerful device permissions.
- The access: The Cyber Swachhta Kendra says the SpyMax campaign requested Accessibility, notification access, SMS, package-installation and “Set as Home App” permissions. With those permissions, the app could access sensitive information, including contacts, SMS, bank OTPs, notification content, keystrokes and other device data. The alert also says the app’s launcher icon may be hidden after installation.
A separate Indian Express report dated July 21, 2026 described a Bengaluru forest department official allegedly losing nearly ₹10 lakh after receiving a WhatsApp wedding-invitation link. Police reportedly suspected APK-based phishing that exposed banking credentials. That is one reported case, not a typical or expected loss figure, and it does not establish that every incident uses the same method.
#1 Best Overall
![Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
What to do before installing anything
- Do not install an unsolicited APK from WhatsApp. Union Bank of India’s Cyber Security Customer Awareness Guide says not to download software applications or APKs from WhatsApp links because they may disguise malicious files as useful apps.
- Get apps from authorized app stores. The Cyber Swachhta Kendra advises users to avoid APKs from outside Google Play.
- Keep Android updated and turn on Google Play Protect. These are recommended precautions; they do not make an unsolicited APK safe to install.
- Check permissions against the app’s purpose. Be especially cautious about requests for Accessibility, SMS, notification access or permission to install packages. Do not enable Accessibility Services for an unknown or unverified app.
- Do not share financial details with unknown people.
If you already installed the APK
Treat requests for sensitive permissions, an app icon that disappears, or unexpected account activity as warning signs. The advisory does not provide a complete cleanup sequence for every Android model, so don’t rely on a one-size-fits-all set of removal steps. Contact your device maker or a qualified incident-response professional for device-specific help.
If you notice unusual banking activity, contact your bank immediately. Union Bank’s guide also identifies India’s 1930 cyber-fraud helpline and the National Cyber Crime Reporting Portal as reporting routes. Reporting is important, but it does not guarantee a refund.
Rank #2
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
What the current alerts do—and don’t—say
The SpyMax wedding-invitation advisory was issued by Cyber Swachhta Kendra on June 25, 2025. CERT-In’s Current Activities page, updated October 2, 2026, lists other campaigns: a June 2026 WhatsApp Desktop/Web campaign involving malicious VBScript attachments and a March 2026 Android campaign using fake RTO/e-Challan APKs. Those are separate alerts; they should not be mistaken for the SpyMax wedding-invitation campaign.
The official guidance is straightforward: “All users should avoid downloading APKs from outside Google Play and be cautious with risky permission requests while installing any app.”
Quick Recap
Best Value
- POWERFUL, LIGHTNING-FAST ANTIVIRUS: Protects your computer from viruses and malware through the cloud; Webroot scans faster, uses fewer system resources and safeguards your devices in real-time by identifying and blocking new threats
- IDENTITY THEFT PROTECTION AND ANTI-PHISHING: Webroot protects your personal information against keyloggers, spyware, and other online threats and warns you of potential danger before you click
- ALWAYS UP TO DATE: Webroot scours 95% of the internet three times per day including billions of web pages, files and apps to determine what is safe online and enhances the software automatically without time-consuming updates
- SUPPORTS ALL DEVICES: Compatible with PC, MAC, Chromebook, Mobile Smartphones and Tablets including Windows, macOS, Apple iOS and Android
- NEW SECURITY DESIGNED FOR CHROMEBOOKS: Chromebooks are susceptible to fake applications, bad browser extensions and malicious web content; close these security gaps with extra protection specifically designed to safeguard your Chromebook
Rank #4
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Rank #3
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
