8th Pay Commission Calculator Scam: The Fake APK Trap — citizen guide 2026

Thousands of government employees, pensioners and their families are searching for an “8th Pay Commission salary calculator”. Scammers know this, and they have built fake “calculator” apps that empty your bank account the moment you install them. Here is the truth in one line: there is no official 8th Pay Commission calculator app, so any APK promising your exact new salary is a trap. This guide shows you the scam, the warning signs, and exactly what to do if you already tapped one.

The 8th Pay Commission is good news. Your curiosity about your new salary is completely natural. But scammers have turned that natural curiosity into a weapon, and government employees are the perfect target. Let us walk through it together, the way a friend would warn you before you lose money.

Short on time? Jump to the emergency checklist.

Picture Rakesh. A clerk in a government office. Hard-working. Careful with money. Two kids, one home loan, one salary account that everything depends on.

One evening his office WhatsApp group lights up. Someone forwards a file: “8th Pay Commission Salary Calculator (Official) - check your new salary and arrears. Download APK.”

Rakesh is curious. Everyone is. He taps the file. His phone warns him. He ignores the warning, because the group is full of colleagues, so it feels safe. The app asks for a few permissions. He says yes to all of them, like we all do.

The app shows a basic salary box. He types his pay. It “calculates”. Nothing exciting. He puts the phone down.

Twenty minutes later, his phone buzzes. Then again. And again. Debit. Debit. UPI sent. By the time he opens his banking app, his salary account is empty.

This story is a composite. But the office WhatsApp group, the curiosity, the one careless “Allow” tap, those parts are painfully real, and they are happening across India right now.

Scammers do not pick targets randomly. They follow attention. Right now, all the attention is on the 8th Pay Commission.

• Everyone wants the number. Lakhs of employees and pensioners want to know their new salary and arrears. That hunger is what scammers feed on.
• There is real anxiety. Pay revisions touch your home loan, your kids' fees, your retirement. Emotion makes people click fast and think later.
• WhatsApp forwards feel trustworthy. When a file comes from your own office group, your guard drops. But the colleague who forwarded it was tricked too.
• An APK can look official. Scammers paste a government logo or the Ashoka emblem on the app. It looks real on a small phone screen.
• You have a stable salary account. A regular government salary, a pension or PF is a reliable target worth attacking.

The bigger your trust in “official-looking” things, the more carefully scammers copy them. Looking official is the oldest trick there is.

Let me explain it in plain words.

What is an APK? An APK is an Android app installation file. When you install an app from the Google Play Store, Google checks it first. An APK sent over WhatsApp or Telegram skips that check completely. Nobody has inspected it. It can do whatever its code is written to do.

A fake “salary calculator” APK is not really a calculator. The calculator screen is just a costume. Behind it sits malware that does this:

• Reads your SMS. This is the deadly one. Your bank OTPs arrive by SMS. If the app reads your messages, it reads your OTPs.
• Abuses “Accessibility” permission. This Android feature is meant to help people with disabilities. Malware misuses it to see your screen, read what you type, and even tap buttons for you, including approving a transaction.
• Captures your typing. Your UPI PIN, card number and net-banking password.
• Hides the alerts. Some malware silences or deletes the bank's debit SMS, so you do not notice until it is too late.

Put simply: you think you are calculating your salary. The phone is quietly handing your bank to a stranger.

If a “salary calculator” shows even one of these signs, stop. Do not install it.

• It is an APK file, not a link to the Google Play Store or Apple App Store.
• It is shared through Telegram channels, WhatsApp forwards, or a random website.
• The name says “Mod APK”, “Premium unlocked”, “Leaked”, or “Latest official calculator”.
• It asks for SMS, Accessibility, “Display over other apps”, or Phone permissions. A calculator needs none of these.
• It uses fake government logos to look official.
• The text has spelling and grammar mistakes, or odd English.
• It promises your exact 8th CPC salary and arrears, which is impossible, because the official numbers are not finalised yet.

Golden rule: A calculator only needs to add and multiply. If it wants to read your messages or watch your screen, it is not a calculator. It is a thief.

The whole chain can run in under half an hour. Often the victim is still holding the phone when it happens.

If you installed a suspicious APK, even if no money is gone yet, act now, in this order. Speed decides how much you save.

1. Turn off the internet immediately. Switch on Aeroplane Mode, or turn off Wi-Fi and mobile data. This cuts the malware off from the scammer.
2. Call your bank's official helpline and freeze the account. Use the number on your debit card or passbook, not any number from the app. Ask them to block UPI, debit card and net-banking.
3. Call 1930, the national cyber-fraud helpline. The first few hours are the “golden hour”. Reporting fast gives the best chance of freezing the stolen money before it moves further.
4. Uninstall the fake app. Go to Settings, Apps, find it, and uninstall. If it will not uninstall, restart the phone in Safe Mode and remove it there.
5. Change your passwords from a different, clean device. Net-banking, UPI PIN, email. Do not type new passwords on the infected phone.
6. File a complaint at the cybercrime portal. Keep the transaction SMS, screenshots, and the time it happened.
7. Tell the WhatsApp group to stop sharing the file. You may save a colleague tonight.

Under RBI rules, if you report unauthorised electronic fraud quickly, your liability can be zero or limited. But the protection shrinks the longer you wait. Report in hours, not days.

You do not need an app at all.

• Use a website in your phone or computer browser, not a downloaded app. A web page cannot read your SMS or control your screen.
• Stick to trusted sources only: official government portals, established newspapers, or well-known financial websites.
• Never install an APK to do basic maths. There is zero reason a salary calculator needs to be installed.
• Treat exact-figure promises as a lie. As of 2026 the 8th CPC recommendations and fitment factor are still being worked out. Any tool quoting your final salary to the rupee is guessing, or phishing.
• Wait for the official notification. Real, accurate numbers come from a government gazette notification, not a WhatsApp forward.

If you must use an Android app for anything, install it only from the Google Play Store, and still check the developer name and reviews first.

We are not careless people. We are busy, trusting people. That is exactly the gap scammers walk through.

• Trusting a file because a colleague sent it. They were fooled first. Trust the source, not the sender.
• Tapping “Allow” on every permission just to get past the pop-ups.
• Ignoring the phone's “this file may harm your device” warning. That warning is your last friend.
• Believing a logo. Anyone can paste an emblem onto an app.
• Feeling too shy to report. Silence only helps the scammer and loses your money.
• Thinking “it will not happen to me”. It happens to careful, educated, senior people every single day.

• Never install an APK from WhatsApp, Telegram or SMS. Ever.
• Download apps only from the Google Play Store on Android, or the App Store on iPhone.
• Never grant “Accessibility” permission to an app you do not fully trust. It is the single most abused permission in banking fraud.
• Keep “Install unknown apps” turned OFF in your phone settings.
• Treat every “viral government update” file as suspicious until proven otherwise.
• Keep banking on one clean phone, and do not load random apps on it.
• Turn on transaction alerts, and read every debit SMS the moment it arrives.
• Talk to your parents and senior pensioners. They are the softest targets for these forwards.

Remember the one line that protects you: a calculator never needs to read your messages.

One fake salary calculator can wipe out years of savings in 20 minutes. Curiosity should never become vulnerability. Share this with your office group, not the next APK.

No. As of 2026, the 8th CPC recommendations and fitment factor are not finalised, so no accurate “official” calculator app exists. Any APK claiming to show your exact revised salary and arrears is misleading at best and malware at worst. Use trusted websites in a browser, and wait for the official government notification for real figures.

An APK is an Android app installation file. Apps from the Google Play Store are checked by Google first. An APK sent over WhatsApp or Telegram skips that check entirely, so nobody has inspected it. A malicious APK can read your SMS and OTPs, watch your screen, capture your passwords, and hide bank alerts. Install apps only from the official Play Store.

The “calculator” is a disguise. After install, it asks for SMS and Accessibility permissions. SMS access lets it read your bank OTPs. Accessibility access lets it see your screen and tap buttons for you. With both, it can log in, approve a UPI or net-banking transfer using the stolen OTP, and hide the debit message, all while you think you are just checking your salary.

You are safer than someone who installed it, but do not assume you are fine. Tapping a file can begin a download or install. Go to Settings, Apps and check for anything unfamiliar. Turn off “Install unknown apps”. If you actually installed it, follow the emergency steps: cut the internet, uninstall, freeze your bank, change passwords from a clean device, and call 1930.

Call 1930, the national cyber-fraud helpline, as fast as possible. The first hours are the “golden hour” for freezing stolen money. Also call your bank's official helpline, from your card or passbook, to block UPI, card and net-banking. Then file a written complaint at the cybercrime portal with screenshots and the time of the fraud.

It depends on how fast you report. Under RBI rules, if you report unauthorised electronic fraud quickly and the loss was not your own negligence, your liability can be zero or limited. The longer you wait, the smaller your protection. Report in hours, not days, and keep written proof of when you reported.

Accessibility is an Android feature built to help people with disabilities; it can read the screen and perform taps. Banking malware abuses this to watch everything you do and act on your behalf, including approving transactions. A salary calculator has zero need for it. If any app asks for Accessibility permission, treat that as a major red flag and refuse.

No. Your colleague was almost certainly tricked too, and forwarded it in good faith. Malware spreads by hijacking trust inside groups. Judge the file, not the sender. A real calculator comes as a website link or a Play Store app, never as a forwarded APK. Politely warn the group to stop sharing it.

On Android, go to Settings, Apps, Permissions, and check SMS, then look under Accessibility in Settings. Remove access from anything you do not recognise or trust. Also open Settings, Security, “Install unknown apps” and make sure it is turned off for WhatsApp, Chrome and your file manager.

Follow official government sources and established news outlets in your browser, not downloaded apps. Do not act on forwarded files. When the commission's recommendations are notified in the official gazette, accurate salary figures will be public everywhere. Until then, treat every “exact salary calculator” and “leaked fitment chart APK” as bait.

• National Cyber Crime Reporting Portal — file a cyber-fraud complaint online.
• Cyber-fraud financial helpline — 1930, run by the Indian Cyber Crime Coordination Centre under the Ministry of Home Affairs.
• Reserve Bank of India — Customer Protection circular on limiting customer liability in unauthorised electronic banking transactions.
• CERT-In — advisories on malicious Android apps and accessibility-service malware.
• 8th Central Pay Commission — figures pending as of 2026; verify against the official gazette notification before relying on any number.

• 1930 cyber-fraud helpline: the exact script to use
• AePS fraud: money gone without OTP, what to do
• Account hacked or locked: recovery steps
• Why your salary is lower this month, deductions decoded
• Pension not credited: RTI format to use
• AI RTI Drafter to file an RTI on the action taken
• The RTI Playbook for the full citizen guide, from drafting to second appeal.