The 'Angel Nuzhat 12-Minute Video' Is Not What You Think: It's a Malware Scam Stealing Your Bank Details

If you have seen the 'Angel Nuzhat 12-minute video' link circulating on WhatsApp, yaar, stop right there. Do not click it. No such video exists. The name is bait, engineered to travel through trust networks, arriving from contacts you know, in a format that looks like something a friend would share. Behind that link is a malware trap designed to access your bank accounts, UPI apps, saved passwords, and personal photographs without you ever knowing it is happening.

Cybersecurity researchers have confirmed: the scam is live, and it is spreading fast.

The WhatsApp message arrives with a preview image and a link that appears to go to a video-sharing platform. When you tap it, bhai, the link does not open any video. Instead it either prompts you to download an APK file to unlock the content, or it silently downloads a malicious script in the background while a loading screen plays.

Once installed, the malware called Ghost File can read OTPs as they arrive on your phone, screenshot your banking apps, log your keystrokes, and beam all of this data to a remote server. Bank accounts have been drained within hours of a single tap. Yaar, this is not a video link. It is a surveillance tool pointed directly at your UPI wallet.

Zee News published a detailed fact-check confirming there is no real Angel Nuzhat video, and that the keyword is being exploited to distribute Ghost File malware across WhatsApp and Telegram in India. Digital forensic experts confirmed that clicking the link on an Android device with default settings is enough for the malware to install, with no further interaction from you required.

How the Angel Nuzhat WhatsApp Malware Scam Works in India

iPhone users are not safe either. The link redirects iOS users to phishing pages built to capture Apple ID credentials and banking details through fake verification screens. The scam runs on both platforms because the scammers know exactly where India's lakh-strong digital population actually lives.

The reason this scam has spread so fast through Indian WhatsApp networks, bhai, is the same reason India's digital adoption was so rapid overall. Hundreds of millions of Indians use WhatsApp daily, most of them in large family and community groups where links get forwarded without scrutiny. The scam exploits exactly this culture of communal sharing.

As India built a zero-commission ride app that 21 lakh people adopted almost overnight, the infrastructure for mass digital participation is now so strong that scammers have an enormous attack surface. It was engineered to arrive from contacts you already trust, which is what makes it so much harder to dismiss than a cold phishing email.

India's digital economy has expanded at a pace that creates real security gaps. While the government pushes ambitious targets like the 39 lakh rooftop solar installations planned for this year, cybersecurity literacy at the same scale has not kept pace. The Ghost File malware is not sophisticated by international standards. It is effective because its targets have not been given the tools to recognise it.

Cybercrime units in Delhi, Mumbai, and Bengaluru have issued public alerts about the Angel Nuzhat scam, but those alerts are reaching government channels, yaar, while the scam itself is travelling through family WhatsApp groups that are much harder to reach with public safety messages. That is the gap the scammers are living in, and they know it.

How to Protect Your Bank Account from WhatsApp Video Scams in 2026

The rules are simple but the scam is designed to make you forget them in the moment. Never download an APK file from a WhatsApp link, even if the message comes from someone you know. Never enter your UPI PIN or banking credentials on any page that opened from a WhatsApp or SMS link. If a link asks you to install an app to watch a video, that is malware. Every time. No exceptions.

DesiDodo tracks everything happening in India right now, from viral trends to real threats, much like the stories we follow from cities nobody expected to become India's next cultural hubs. But among everything we have covered, yaar, this is the one that can cost you your entire bank balance if you ignore it.

If you have already clicked the link, act immediately. Turn on airplane mode to cut the malware's connection to its remote server. Do a factory reset before reconnecting to the internet. Change your banking passwords and UPI PINs from a different device. Contact your bank to flag potential unauthorised access. File a complaint at cybercrime.gov.in or call 1930, the national cybercrime helpline, available 24 hours.

The Angel Nuzhat scam will get a new name within weeks. The format is reusable and the scammers cycle through new bait on a schedule. Tab tak, the jhol remains the same: a fake viral story travelling through your WhatsApp contacts. The real question is this: will you be the one who catches it before it catches you?