{"id":85326,"date":"2017-12-14T19:51:32","date_gmt":"2017-12-14T14:21:32","guid":{"rendered":"https:\/\/blogs_admin.quickheal.com\/?p=85326"},"modified":"2017-12-15T17:53:49","modified_gmt":"2017-12-15T12:23:49","slug":"beware-fake-apps-claim-link-mobile-number-aadhaar","status":"publish","type":"post","link":"https:\/\/www.quickheal.com\/blogs\/beware-fake-apps-claim-link-mobile-number-aadhaar\/","title":{"rendered":"Beware of fake apps that claim to link your mobile number to Aadhaar"},"content":{"rendered":"

Are you looking for ways to avoid visiting your cellular network provider\u2019s care center\/store to get your Aadhaar linked to your mobile number? Have you recently searched for apps that can help you do this? Well, here is some important and useful information for you.<\/p>\n

It is now mandatory for all mobile users to link their Aadhaar to their mobile number. According to an advisory issued by the Unique Identification Authority of India (UIDAI), mobile users do not have to visit any store to get the Aadhaar-phone linking done. This can be done with a voice-guided system through a one-time password (OTP) from 1st<\/sup>\u00a0January 2018, as reported by Times of India<\/u><\/a>.<\/p>\n

Quick Heal Security Labs came across an app on the Google Play Store that claimed to help users link their mobile number to Aadhaar. For obvious reasons, we found the occurrence of this app suspicious because the UIDAI has not spoken about any mobile app which can be used for Aadhaar-phone linking.<\/b><\/strong><\/p>\n

As expected, we found the app to be fake and not related to UIDAI. This is what it looks like.<\/p>\n

 <\/p>\n

\"Fig
Fig 1. The fake app\u2019s interface displaying a fake biometric authentication mechanism.<\/figcaption><\/figure>\n

This app was downloaded over 1,00,000 times and was removed from Google Play after Quick Heal Security Labs reported it to Google.<\/strong><\/p>\n

\u00a0<\/b><\/strong>An interesting observation<\/b><\/strong><\/p>\n

One interesting thing which we observed during our analysis is this app can send you an OTP even if you don\u2019t have a SIM card in your phone. Wonder how this works? A simple trick used by the app developer answers this question. The OTP sent for the verification is just a pop-up notification generated by the app to fool the user. This notification looks similar to the ones which are displayed at the top part of your mobile screen whenever you receive a new SMS. Fig 2 below shows how the fake OTP notification appears. Extremely tricky, isn\u2019t it?<\/p>\n

Our verdict<\/b><\/strong><\/p>\n

This fake app is nothing but a source of income for the app developer which they generate by serving unwanted ads to the user. This app does not benefit the user in any way and even worse, it can also be used to steal their Aadhaar information. Such stolen information can be used for identify theft and other such crimes.<\/p>\n

\"Fig
Fig 2: OTP generated by the app.<\/figcaption><\/figure>\n

Quick Heal Security Labs analyzed similar apps on the Play Store and found many with names related to Aadhaar and mobile phone linking. Most of these apps name themselves as \u2018prank\u2019, \u2018guide to linking Aadhaar to mobile\u2019, and \u2018just for entertainment\u2019 in their descriptions which are usually not noticed by most users (fig 3).<\/p>\n

We strongly recommend you to always read the description of an app you want to install on your device. Just because an app describes itself as a prank app, it does not mean it is safe to use.<\/p>\n

\"Fig
Fig 3: One of the app\u2019s description.<\/figcaption><\/figure>\n

 <\/p>\n

Further observations<\/b><\/strong><\/p>\n

There was a sudden rise in the number of people searching the Internet for the term \u201clink Aadhaar number to mobile number\u201d on Dec 1, according to the Google Trends survey for India. Noticeably, on this very day, UIDAI had given its approval to telecom community\u2019s request to make the Aadhaar-mobile linking facility available online. Fig 4 shows the trends.<\/p>\n

\"Fig
Fig 4: Sudden increase on Dec 1 for the search query \u201clink Aadhaar number to mobile number\u201d in India.<\/figcaption><\/figure>\n

To reiterate, currently there is no app which will provide you with in-app biometric Aadhaar to mobile linking facility.<\/b><\/strong><\/p>\n

How to stay safe from fake mobile apps<\/b><\/strong><\/p>\n

    \n
  1. Check an app\u2019s description before you download it.<\/li>\n
  2. Check the app developer\u2019s name and their website. If the name sounds strange or odd, you have reasons to suspect it.<\/li>\n
  3. Go through the reviews and ratings of the app. But, note that, these can be faked too.<\/li>\n
  4. Avoid downloading apps from third-party app stores.<\/li>\n
  5. Use a reliable mobile antivirus<\/u><\/a> that can prevent fake and malicious apps from getting installed on your phone.<\/li>\n<\/ol>\n

    Note: We searched the Play Store and found apps with the following package names. These apps claim to link phone number to Aadhaar but they are mostly prank apps or guides and do not provide the actual facility.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
    Package<\/b><\/strong><\/td>\nApp Name<\/b><\/strong><\/td>\n<\/tr>\n
    com.linkAadhaar.Aadhaarcardlinktomobile<\/td>\nAadhaar Card Link to Mobile Number \/ SIM Online<\/td>\n<\/tr>\n
    com.linkAadhaar.Aadhaarcardlinktomobilenumber<\/td>\nLink Aadhaar Card to Mobile Number \/SIM Card Online<\/td>\n<\/tr>\n
    phototool.app.Aadhaarcardlinktomobile<\/td>\nLink Aadhaar Card with Mobile Number & SIM Online<\/td>\n<\/tr>\n
    smartappcorner.Aadhaarcardlinkwithmobile<\/td>\nLink Aadhaar Card to Mobile Number & SIM Online<\/td>\n<\/tr>\n
    com.IndianServices.LinkAadhaarCardwithMobileNumber<\/td>\nLink Aadhaar With Mobile<\/td>\n<\/tr>\n
    fabia.dev.linkAadhaarwithsim<\/td>\nAadhaar Card Linkk To Mobile Number<\/td>\n<\/tr>\n
    com.stoff.linkAadhaartomobile<\/td>\nFree Link Aadhaar Card to Mobile Number \/SIM Online<\/td>\n<\/tr>\n
    smartappcorner.onlineAadhaarlinksim<\/td>\nFree Aadhaar Card Link to SIM Card<\/td>\n<\/tr>\n
    world.studio.classes.mobileno.toadhar.lab<\/td>\nLink Aadhaar Card to Mobile Number & SIM Online<\/td>\n<\/tr>\n
    com.link.Aadhaar.card.with.mobile.number<\/td>\nLink Aadhaar Card with Mobile Number Online<\/td>\n<\/tr>\n
    com.tomobilenumber.linkAadhaarcard<\/td>\nLink Aadhaar to Mobile Sim Number<\/td>\n<\/tr>\n
    com.crazy.linkAadhaarwithsimcard<\/td>\nLink Aadhaar To Mobile No<\/td>\n<\/tr>\n
    com.link.adhartomob<\/td>\nLink Aadhaar Card with Mobile Number<\/td>\n<\/tr>\n
    com.photovideovalley.linkAadhaarwithmobile<\/td>\nLink Aadhaar Card with Mobile Number & SIM Online<\/td>\n<\/tr>\n
    daily.apps.linkAadhaarwithmobilenumber<\/td>\nLink Aadhaar to Mobile Number<\/td>\n<\/tr>\n
    com.smartdev.linkAadhaar<\/td>\nLink Aadhaar Card with Mobile Number free<\/td>\n<\/tr>\n
    adhar.tool.Aadhaarcardlinktomobile<\/td>\nAadhaar Card Link to Mobile Number<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    Subject Matter Expert<\/p>\n

    Omkar Gurav | Quick Heal Security Labs<\/p>\n","protected":false},"excerpt":{"rendered":"

    Are you looking for ways to avoid visiting your cellular network provider\u2019s care center\/store to get your Aadhaar linked to your mobile number? Have you recently searched for apps that can help you do this? Well, here is some important and useful information for you. It is now mandatory for all mobile users to link […]<\/p>\n","protected":false},"author":37,"featured_media":85332,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[431,1524],"class_list":["post-85326","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-android","tag-android","tag-fake-app"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/85326"}],"collection":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/users\/37"}],"replies":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/comments?post=85326"}],"version-history":[{"count":11,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/85326\/revisions"}],"predecessor-version":[{"id":85345,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/posts\/85326\/revisions\/85345"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/media\/85332"}],"wp:attachment":[{"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/media?parent=85326"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/categories?post=85326"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.quickheal.com\/blogs\/wp-json\/wp\/v2\/tags?post=85326"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}