A Navratri 2026 cyber scam is targeting Garba enthusiasts with messages offering free passes through links that can lead to malicious APK files, according to a report by Sandesh. The scheme exploits the rush for entry to popular Garba events and could expose users’ private information and bank accounts to cyber criminals.
The reported fraud is being circulated through social media platforms and WhatsApp. Messages claim that users can obtain a free Garba pass by clicking a link. To appear credible, scammers may misuse the names and photographs of well-known Garba organisers or event grounds, the report said.
After clicking the link, users are allegedly prompted to download an APK file in the name of obtaining the pass. APK files are Android application packages. Installing an application from an unknown or suspicious source can lead users to grant permissions that expose sensitive information stored on their phones.
According to the Sandesh report, the permissions sought by such applications may allow fraudsters to access incoming SMS messages and one-time passwords. This can create a risk to banking and other accounts linked to the device. The fraudulent application may appear to display a Garba pass while malicious activity takes place in the background, the report said.
The warning also applies when the message appears to come from a known WhatsApp contact. A familiar number does not necessarily confirm that a file or link is safe, because compromised accounts can be used to distribute malicious files to the account holder’s contacts.
The reported pattern highlights how large public festivals can become a setting for digital fraud. Demand for event access, urgency around limited passes and reliance on informal links shared through messaging platforms can make residents more likely to act before checking the source. In this case, the scam is tied to the digital circulation of event information rather than to an official ticketing process identified in the supplied report.
Residents are advised not to click suspicious links offering free Garba passes on social media or WhatsApp. The report also warns users not to download or install unknown APK files under any circumstances. Passes should be obtained only through a verified organiser or authorised channel, although the supplied report does not identify a specific official ticketing platform.
Anyone who believes they have been defrauded should call the cyber-crime helpline 1930 immediately. Sandesh reported that a quick complaint can improve the possibility of blocking or stopping the movement of the money. The report did not provide details of a specific organiser, police case or confirmed loss linked to the warning.
