The Indian government has put a full stop to a massive cyber fraud operation by taking down the Android app called Wingo. The app, after investigation, was found to be secretly abusing users’ phones to send scam messages and siphon money. Additionally, the centre has also issued a public warning asking Android users to stay alert and avoid downloading suspicious apps promising easy income.
After a spike in complaints, the Indian Cyber Crime Coordination Centre, which operates under the Ministry of Home Affairs, moved to dismantle the digital infrastructure behind the scam. Officials said the app was designed to mislead users with claims of quick financial returns, while quietly exploiting device permissions and personal data.
As part of the action, servers controlling the Wingo app were blocked in India. Law enforcement also shut down four Telegram channels linked to the scam, totalling over 1.5 lakh subscribers, and removed more than 50 related videos from YouTube that were allegedly used to promote the scheme.
The investigators explained that Wingo followed a common fraud pattern. Users were encouraged to deposit money to complete small online tasks or make short-term investments with the promise of quick payouts. After funds were transferred, accounts were frequently frozen or the app stopped responding completely. Payments were processed via UPI IDs and personal wallets rather than regulated financial channels, making recovery difficult.
The application also requested extensive permissions, such as access to contacts, photos, location data, and SMS, raising significant concerns about data misuse. Victims were also given fake customer support numbers, and many discovered that help channels vanished as complaints piled up. In several cases, the app was pulled from app stores soon after reports surfaced. Officials also stated that users were incentivised to bring in more participants, indicating a referral-driven Ponzi-style setup.
In its advisory, the centre advised Android users to avoid apps that promise daily or fixed profits, to check an app’s history before installing it, and to deny permissions that are not required for basic functionality. Users have been warned against paying upfront fees to earn rewards, sending money to unknown UPI accounts, or disclosing sensitive information like OTPs and banking information.
Authorities have asked users to immediately uninstall any suspicious apps and report them to the national cybercrime reporting portal. Those who believe they have been affected are advised to contact the cybercrime helpline at 1930 immediately and notify their bank or UPI service to prevent further transactions.