startlink internet scam

There is a real scam pattern circulating in India that uses “satellite internet / Starlink” as the bait, and the important part is that the scam is often not about selling internet at all—it is about getting the victim to install a malicious Android app (APK) and then obtaining access to the phone or financial information. A recent fact-check reported a fake “free satellite internet” campaign using a fake page and an app called SkyConnect VPN. ManoramaOnline +1 How the scam works 1. Fake advertisement You may see Facebook, Instagram, WhatsApp or Telegram advertisements saying things like: “Starlink Internet now available” “Free satellite internet for 3 months” “₹199/month unlimited satellite internet” “Register now for Starlink” “Download app to activate satellite internet” The advertisement may use Starlink's name, logo, satellite pictures and professionally designed graphics to look genuine. ManoramaOnline 2. They move you to WhatsApp/Telegram or a fake website The victim is asked to contact a “representative” or click a link. 3. They ask you to install an APK This is the major danger. Instead of directing you to the official Google Play Store/App Store, they send an .apk file or a link to download an app. An APK itself isn't automatically malicious, but an APK sent through WhatsApp, Telegram, SMS or a random website is a major warning sign. India's CERT-In specifically advises against installing APKs from WhatsApp, SMS, Telegram or random websites. CERT-In 4. The app asks for powerful permissions A malicious app may request access to: SMS Contacts Photos/files Notifications Accessibility Screen contents Device administration Phone/call information The particularly dangerous one is Accessibility access. Malicious applications can abuse it to observe and potentially control what happens on the phone. Indian authorities have recently warned about malicious Android applications using this technique. Akashvani News What can happen after installation? Depending on the malware, attackers may attempt to: Steal OTPs SMS messages can contain banking, UPI, email and other verification codes. Steal banking information The attacker may try to capture information displayed in banking/UPI applications. Take control of WhatsApp Some scams trick users into linking WhatsApp to an attacker's device. I4C has specifically warned about schemes that use QR codes to obtain WhatsApp linked-device access. Cyber Crime Portal Steal personal information Contacts, photographs, documents and other files may become accessible if the malicious application receives the relevant permissions. Monitor the screen With abusive Accessibility permissions, malware can potentially observe and interact with what is displayed on the device. Redirect internet traffic Some malicious applications marketed as VPNs can route traffic through attacker-controlled infrastructure. Akashvani News Attempt financial fraud The ultimate objective may be unauthorized UPI/banking transactions or harvesting information that can facilitate later fraud. One very important point A normal mobile phone cannot simply receive Starlink satellite broadband by installing an app. Satellite broadband such as Starlink requires specialized satellite-terminal hardware. An app can configure/manage a Starlink system, but installing an ordinary VPN/app cannot turn a phone into a Starlink satellite terminal. This is one of the major clues in the current fake “free satellite internet” advertisements. � ManoramaOnline +1 How to identify the fake offer 🚩 APK sent on WhatsApp/Telegram 🚩 “Free Starlink internet” activated by an app 🚩 Very cheap/unrealistic price 🚩 They ask for Accessibility permission 🚩 They ask you to enable “Install unknown apps” 🚩 They ask for SMS/contacts/files permissions 🚩 They ask for OTP, UPI PIN, debit-card PIN or banking password 🚩 They ask you to share a screenshot after installation 🚩 Payment through a personal UPI ID or third-party website 🚩 Website address doesn't belong to Starlink Starlink itself says that legitimate Starlink information should be entered through its official website or official iOS/Android applications and warns about phishing messages requesting account or payment information. Starlink If someone has already installed the fake app Act quickly. Turn off mobile data and Wi-Fi. Don't open the suspicious app again. Check Settings → Apps and remove the suspicious application. Check Accessibility, Device admin apps, VPN, Notification access, and other special permissions and revoke anything suspicious. From a different, trusted phone/computer, change passwords for email, banking and other important accounts. Change your UPI PIN if there is any possibility the phone or credentials were compromised. Check bank/UPI transactions immediately. Contact your bank if anything suspicious has occurred. If money has been lost or there is suspected financial fraud, call 1930 immediately. The Indian Cyber Crime Portal also accepts reports. Cyber Crime Portal +1 Keep screenshots, the APK, phone number, WhatsApp conversation and payment information as evidence. If the malicious application cannot be removed or keeps returning, CERT-In advises considering a factory reset after backing up important data. CERT-In You can also use India's Cyber Crime Portal to report suspicious URLs, WhatsApp numbers, Telegram handles, phone numbers, email IDs and social-media URLs. Cyber Crime Portal