Meta has removed dozens of advertisements from Facebook and Instagram after the Indian government raised concerns about a growing cyber-fraud campaign involving malicious Android applications disguised as adult-content apps. The advertisements reportedly directed users to phishing websites where they were encouraged to download APK files outside official app stores.

Indian authorities warned that the malicious applications could potentially access sensitive information on infected devices, including banking credentials, one-time passwords and PINs. Several app names were identified in the government advisory, while authorities also warned that similar variants could be used in future campaigns.

Meta subsequently removed the identified ads after being contacted about the campaign.

The incident highlights the continuing challenge social media platforms face in detecting fraudulent advertising before it reaches users. Cybersecurity experts generally advise users to avoid downloading APK files from unfamiliar websites and to install Android apps only through trusted official sources.