Skip to content
Gulabi Card

Safety & security

Real wedding invitation link or fake APK file: how to tell

With wedding invitations increasingly shared on WhatsApp, cyber fraudsters have started circulating malicious Android .apk files disguised as wedding invitations. Here is how to distinguish a genuine wedding website link from a harmful download, and what precautions to take.

By the Gulabi Card team · Published 6 October 2026

Warning signs of a fake wedding card (.apk scam)

Be alert if you receive an unfamiliar message claiming to be a wedding invitation with any of the following characteristics:

  • The attachment ends in .apk: A real wedding invitation is a webpage link (https://), never an app install file.
  • Asks for Accessibility or SMS permissions: Malicious APK files attempt to intercept banking OTPs.
  • Sent from an unknown number: Often accompanied by generic text like “Shaadi me zaroor aana, card download karein”.

What a legitimate digital wedding invitation looks like

A genuine digital invitation created by platforms like Gulabi Card opens directly in your standard mobile browser (Chrome, Safari). It requires:

  • No app installation: It runs purely as web HTML.
  • No passwords or login: Guests view events freely.
  • No special device permissions: It never requests access to your contacts or SMS.

What to do if you tapped or installed a suspicious file

  1. Immediately disconnect mobile data and Wi-Fi by toggling Airplane mode.
  2. Go to Phone Settings > Apps, locate the unfamiliar application and tap Uninstall.
  3. Check banking apps for unexpected transactions and call your bank helpline immediately if needed.
  4. Report cyber fraud to the national helpline 1930 or at cybercrime.gov.in.

Source: Indian Cyber Crime Coordination Centre (I4C) public advisories.

Frequently asked questions

Can a real wedding invitation be an .apk file?
Never. Legitimate wedding invitations are shared as secure website links (https://) or PDF documents. A real wedding invitation will never ask you to download or install an .apk file onto your phone.
What should I do if I accidentally installed a suspicious .apk wedding card?
Immediately turn on Airplane mode, uninstall the suspicious application from your phone settings, change your net-banking and UPI passwords from a different secure device, and contact your bank if you notice unauthorized activity. Report incidents at cybercrime.gov.in or helpline 1930.