• Spread of fake greeting messages carrying malware on WhatsApp and Telegram
• Security warnings over theft of users’ data and bank accounts

Authorities in several countries have issued urgent warnings about a new scam targeting users during New Year 2026 celebrations, where fraudsters hide malicious software inside fake greeting messages on popular messaging apps like WhatsApp and Telegram, aiming to steal personal data and withdraw money from bank accounts.

India’s security bureau explained that scammers exploit the surge in digital greetings during the holiday season, with messages appearing normal and promising digital greeting cards, gifts, or exclusive rewards, but clicking the embedded links leads to severe financial losses.

The fraudsters send messages via WhatsApp or Telegram, impersonating known contacts of victims, sometimes after compromising their accounts. Messages include phrases like “Click here for your special New Year greeting,” “Open your digital card,” or “Claim your surprise gift.”

Clicking the link downloads a malicious file that installs spyware on the device, giving hackers the ability to read text messages, access photos and contacts, control the device remotely, and hijack WhatsApp accounts to automatically forward scam messages.

Cybersecurity chief Shikha Goel warned about the deceptive nature of the scam, emphasizing that users think they are opening a greeting card, while in reality they hand over the keys to their bank accounts.

Authorities advised caution: do not click suspicious links, use plain text greetings or official images and videos, enable two-step verification, and avoid installing apps outside official stores.