Meta Pulls Scam Ads After India Uncovers Porn-Bait Banking Malware

Meta has removed numerous ads from Facebook and Instagram following a discovery by Indian authorities. The ads, which used sexually explicit content to lure users, allegedly tricked people into downloading malware that could steal sensitive banking information. The ads were directed to phishing websites and promoted malicious Android apps disguised as pornographic applications.

One ad, for instance, promised hundreds of pornographic videos and 24-hour access, leading users to download an Android package named "Movexa.apk." The malicious apps could access device information, intercept one-time passwords, and capture banking PINs, potentially allowing criminals to transfer money without the account holder's knowledge.

Despite the government's advisory, at least 39 ads remained active. Meta, which prohibits adult nudity, sexual activity, deceptive practices, and scams in its advertising policies, removed the ads promptly after being alerted. The incident highlights India's growing cyber-fraud problem, with losses reaching nearly $2.4 billion in 2025.

This follows another recent Google investigation, where Indian authorities ordered the shutdown of hundreds of Firebase accounts used to impersonate major banks.