Meta has removed dozens of advertisements from Facebook and Instagram that were allegedly being used to lure users into downloading malicious Android applications disguised as pornography apps, following an alert from the Indian government.
The fraudulent advertisements reportedly operated under names including “Night Play” and “Kyss” and used sexually explicit images and videos to attract users. The ads directed users to websites where they were encouraged to download applications outside official app stores.
According to India’s advisory, these malicious applications could secretly access sensitive information stored on users’ phones, intercept one-time passwords (OTPs) and bank PINs, and potentially transfer money from bank accounts without the users’ knowledge.
Reuters found that at least 39 such advertisements remained active even after the government issued its advisory. The ads were subsequently removed by Meta after Reuters contacted the company for comment.
The incident highlights growing concerns over the use of social media platforms to distribute financial fraud and malware. India recorded nearly $2.4 billion in cyber-fraud losses in 2025, according to government data, as scammers increasingly exploit the country’s rapid adoption of digital payments.
Meta’s advertising policies prohibit adult sexual content as well as deceptive or misleading advertisements designed to scam users. However, the latest incident has renewed questions about how quickly fraudulent advertisements are detected and removed from its platforms.
The development comes weeks after the Indian government raised similar concerns involving Google’s Firebase platform, where fraudulent accounts were reportedly being used by criminals to impersonate major banks.
The latest action underscores the increasing challenge faced by technology companies and governments in tackling sophisticated online scams, particularly those that combine social engineering, misleading advertisements and malicious mobile applications.