Meta removes malicious ads after Indian government warning.

Explicit Facebook and Instagram promotions linked to malware targeting banking data.

Meta has removed dozens of advertisements from Facebook and Instagram after the Indian government raised concerns about a surge in fraudulent campaigns disguised as pornography apps. These ads, operating under names such as Night Play and Kyss, used sexually explicit imagery to lure users into downloading malicious Android applications capable of stealing sensitive financial information.

According to government officials, the apps directed unsuspecting users to phishing websites and prompted them to install files outside official app stores. Once downloaded, these apps could secretly access stored data, intercept one‑time passwords and PINs, and siphon money directly from bank accounts. The advisory emphasized that such schemes are part of a growing wave of cyber‑fraud exploiting India’s booming digital payments ecosystem.

India reported nearly $2.4 billion in cyber‑fraud losses in 2025, highlighting the scale of the problem. Reuters found at least 39 of these ads still active even after the advisory was issued, but Meta removed them shortly after being contacted for comment. The company did not respond to further queries.

Meta’s advertising policies explicitly prohibit adult nudity, sexual activity, and deceptive practices designed to scam users. However, internal projections reported last year suggested that scam and banned goods advertising could account for nearly 10% of Meta’s 2024 revenue- around $16 billiondespite ongoing efforts to curb such activity.

This incident marks the second time in recent weeks that India has flagged financial fraud on major technology platforms. Earlier, the government directed Google to shut down hundreds of accounts on its Firebase service after discovering criminals were using it to impersonate banks.

One of the fraudulent ads linked users to a site promoting a video app called Movexa.apk, which promised unlimited pornographic content. Access required downloading the app directly, bypassing official app stores- a tactic cybercriminals often use to spread malware.

The government’s advisory warned that these malicious apps could compromise user privacy and financial security by capturing authentication codes and enabling unauthorized transactions. The crackdown underscores India’s growing vigilance against digital fraud and the responsibility of global tech companies to safeguard users from deceptive advertising practices.