Thanh Hoa Provincial Police recently issued a warning about a scam exploiting the "watch movies, get rewards" model to trick users into installing unverified applications, leading to the theft of personal data and money.

Promising "millions of dong daily with just a few taps on a phone", these applications attract participants by crediting bonus money immediately upon registration. To continue earning, users are required to watch videos, engage with advertisements, download additional applications, or complete assigned tasks.

However, the balance displayed within the application does not represent actual withdrawable funds. Upon reaching a reward threshold, users may be prompted to verify their account, upgrade to a VIP status, or pay transaction fees. Should they transfer money as instructed, they risk losing their funds without ever receiving the promised rewards.

Interface of a short film application advertising the "watch movies, earn money" scheme. *Photo: Bao Lam.*

From movie rewards to bank account theft

According to Thanh Hoa Police, users undertaking these tasks may be directed to download APK installation files from unfamiliar websites, bypassing official application stores such as Google Play or the App Store.

Installing software from unverified sources can infect phones with malware, resulting in unauthorized data collection or the persistent display of unusual advertisements.

Depending on the type of malware and the access permissions granted, malicious software can attempt to retrieve contacts, messages, images, and login credentials. If bank passwords or authentication codes are compromised, criminals can gain unauthorized access to accounts, subsequently stealing funds.

Furthermore, some applications demand permissions to read messages or administer the device, even though these are unnecessary for movie viewing. Once users grant approval, the malicious software can exert deeper control over the phone's operations.

Interface of a reward notification when watching short film videos. *Photo: Bao Lam.*

What to do if a suspicious application is installed

Thanh Hoa Police advise citizens to remain vigilant against invitations promising easy money through movie watching. They caution against transferring funds to unlock accounts, upgrade VIP status, or claim rewards.

Users should only download applications from official stores, thoroughly review requested access permissions, and refrain from providing passwords, one-time passwords (OTPs), or bank information to unverified platforms.

If a suspicious application has been installed, users should immediately disconnect from the internet and inspect their device. In cases where bank information has been compromised or unusual transactions are detected, users must promptly contact their bank to secure the account, change passwords from a different secure device, and report the incident to the police for further assistance.

Previously, numerous cybersecurity experts also issued warnings about the tactic of creating fake applications and websites designed to trick users into installing malware, thereby stealing personal data and bank information.

Pham Hai