A cyber security expert has raised a serious alarm after revealing that a fake AI app has been used to steal over Rs 80 crore from Nepalis’ bank accounts.
Saroj Lamichhane, a well-known Nepali cybersecurity specialist, says the fraud is being carried out in a planned and organized way. The scam uses an app called ‘Nepse AI’, promoted through Facebook and Instagram ads, to trick people into giving away their banking details.
How the NEPSE AI scam works
Lamichhane shared two real-life cases to explain the method. In one incident, his own relative suddenly received Rs 1.14 lakh in their bank account from an unknown person. Shortly after, the account was blocked by the bank following a request from the Cyber Bureau. Investigations revealed that the sender’s own bank account had been hacked, and the stolen money was routed through other accounts, including his relative’s.
In another case, more than Rs 14 lakh was transferred from a man’s account within a week to multiple bank and wallet accounts without his knowledge. Both victims had one thing in common: they had installed the ‘Nepse AI’ app after seeing an online advertisement.
Lamichhane said that after installation, the app opened a remote session on the victim’s phone and then disappeared. Money began moving out of their accounts soon after. Both victims were Android users.
The danger behind the app
According to Lamichhane, the app’s website and contact numbers keep changing, making it difficult to track. In one case, a Nepali-speaking person even helped a victim install the app over the phone, suggesting that local criminals may be involved.
One victim’s laptop was completely wiped, leaving only the BIOS, to destroy evidence. Lamichhane believes that such scams have already caused losses of more than Rs 80 crore and are part of an ongoing, organized crime operation.
His urgent warning
Lamichhane is urging the government and cyber authorities to immediately issue a public alert to prevent more people from falling victim. He advises anyone who sees such ads to report them immediately.
Tips to protect yourself
- Never install apps from unknown sources. Only use Google Play Store or Apple App Store.
- Avoid installing apps from ads or unknown links, especially if they ask for banking or trading access.
- Do not give remote access to your device via AnyDesk, TeamViewer, or similar tools.
- Use SMS for two-factor authentication instead of email.
- Change passwords regularly and avoid reusing them on multiple sites.
- Check your bank statements daily and report suspicious activity immediately.
- Verify financial tools advertised on Facebook/Instagram before clicking.
- Keep your devices updated and use antivirus software.
- Inform friends and family about such scams, as most victims are unaware of these tricks.
