Fake KYC PDF on WhatsApp: How to Check It Before Opening

Fake KYC PDF on WhatsApp: How to Check It Before Opening Key takeaways

• A "KYC update" PDF that reaches you on WhatsApp, SMS or email is a well-known scam lure in India: banks and wallets do not complete KYC through a chat attachment, and the file or the link inside it is the way in.
• A PDF does not have to contain a virus to be dangerous. Many scam PDFs hold only a persuasive message and a link to a fake login page, so an antivirus can report "clean" while the link is the scam.
• The safest check is to skip the attachment and open your bank's own app or website, or call the number printed on your card or passbook.
• You can check a PDF before opening it: share it to Arjuna's Scan a File feature (Premium, Android and iPhone), which looks at the links inside it and at risky PDF features. Arjuna: Fraud & Scam Guard is an Android and iOS app that scans links and websites for phishing and malware in real time — download it here. How a fake KYC PDF on WhatsApp works The lure is simple. A message that looks like it comes from your bank, a wallet or a telecom company says your KYC is "pending", your account will be blocked, or a service will stop today. A PDF is attached, with a name like "KYC Update Form" or "Bank Notice", because a PDF looks official and opens without any warning. Inside the file there is usually one of two things. The first is a link or a button, such as "Update KYC now", that leads to a fake page asking for your card number, net banking login, OTP or Aadhaar details. The second, less common on phones, is a file or script designed to run something on the device. Security researchers have also described PDFs delivered by SMS that hide the link in ways ordinary security tools do not always catch (reported by TechRadar, citing Zimperium). The urgency is deliberate. Scam messages push you to act before you think, and the PDF gives the page a business-like look. Why "my antivirus says it's clean" is not enough Antivirus apps and online file scanners look for known malicious code. A scam PDF that is only a message and a link may contain no malicious code at all. The danger is where the link leads, and that has to be checked separately by following the link and comparing it with threat lists and look-alike domains. Security guides say the same thing: a clean scan result does not prove a PDF is safe when it carries a link. Red flags in a KYC message
• It arrives on WhatsApp, SMS or a personal number, not from your bank's registered sender ID or app.
• It asks for an OTP, PIN, CVV or Aadhaar number, or says you must act today.
• The file name is generic ("KYC_Update_Form.pdf") and the text does not use your name or the last digits of your account.
• The link is shortened, or the domain is a near-copy of the bank's name.
• It asks you to install an app or open a file on a computer. What to do with a KYC PDF

1. Do not tap links in it and do not enter any details.
2. Open your bank's app (already installed) or type its website address yourself. If KYC is really pending, it will show there.
3. Call the number on your card or passbook, not the number in the message.
4. If you are unsure about a PDF, check it before opening it (next section).
5. In WhatsApp, you can also turn off media auto-download under Settings > Storage and data. Where Arjuna fits — and where it doesn't Arjuna's Scan a File feature, part of Premium on Android and iPhone, checks a PDF when you ask it to. You share the PDF to Arjuna from the share menu (or pick it inside the app) and get a verdict of Safe, Caution or Unsafe with reasons in plain language. It checks the links in the PDF, including URLs written in the page text, against threat lists and look-alike domains, and flags risky PDF features such as embedded scripts, auto-run actions, embedded files and forms that send data to a website. The file is checked in memory and not saved, and no record of the scan is added to your account. Server logs keep the file's fingerprint and the links found in it for up to 8 days, and only the fingerprint is used for reputation lookups. Files are limited to 10 MB. Its limits are real. Scan a File works on PDFs only, and you start each scan: Android and iOS do not let Arjuna read other apps' files in the background. On Android, Arjuna can show a "You received a PDF" reminder when a PDF arrives in WhatsApp or SMS. It needs an internet connection. It can miss some things, such as a link whose domain is only a one-letter typo of a bank name with no other lure words. Nothing here is a guarantee, and Arjuna cannot tell you whether a message really came from your bank. Use your bank's own app for that. Fake KYC PDF on WhatsApp: frequently asked questions Can a PDF on WhatsApp have a virus or phishing link? Yes. A PDF can carry a phishing link, a button that opens a fake login page, or, less often, scripts or embedded files. Many scam PDFs are only a message and a link. Do banks do KYC through WhatsApp or SMS attachments? No. Banks and wallets ask you to complete KYC in their official app, on their website or at a branch. A KYC form sent as a chat attachment is a red flag. Is an antivirus or online file scanner enough to check a PDF? It is a useful check, but it looks for known malicious code and files. A scam PDF that is only a link can pass it. A link check, which follows the URLs and compares them with threat lists, is a separate step. How do I check a PDF I got on WhatsApp before opening it? Do not open links in it. Share the PDF to a scanner such as Arjuna's Scan a File, or skip the file and verify the request in your bank's own app or by calling the number on your card. Is it safe to upload a PDF to a scanner? Only use a service that says how it handles the file. Arjuna's Scan a File checks the PDF in memory and does not save the file or add a record of the scan to your account. Server logs keep the file's fingerprint and the links found in it for up to 8 days, and only the fingerprint is used for reputation lookups, never the file itself. Still, avoid scanning a PDF that holds your own sensitive details. Is there an app that checks this? Arjuna: Fraud & Scam Guard's Scan a File feature (Premium, Android and iPhone) checks the links and risky features inside a PDF you share to it. It works on PDFs only and does not scan automatically.

Sources

• Moneylife: Fraud alert, WhatsApp hacking via bank KYC message
• TechRadar: Malicious PDF files flooding SMS inboxes (Zimperium research)
• Adobe: Can PDFs contain viruses?
• Gridinsoft: Can a PDF have a virus? How to check PDF files safely Where to report and get help If you lose money or shared card, banking or Aadhaar details, call the national cybercrime helpline 1930 immediately and report at cybercrime.gov.in. Tell your bank at once so it can block cards and reset logins. Download and Try Arjuna: Fraud & Scam Guard Arjuna: Fraud & Scam Guard is an Android and iOS app that scans links and websites for phishing and malware in real time, with a free Basic plan. It also includes WhatsApp and SMS scam detection that checks message text for malicious links, and Premium features such as Scan a File for PDFs and QR Code Scam Detection; some features are Android-only. Download Arjuna: Fraud & Scam Guard · Get it on Google Play · Get it on the App Store Stop. Check. Stay Safe. Related on Arjuna: Scan a File · Scam protection · Android protection · Phishing links · More cyber alerts