Push-notification phishing that mimics the bank app is still deception — prove the send path

Cyber Desk · Insight. Series: Digital disputes, as Indian courts actually see them.

Push-notification phishing that mimics the bank app is still deception — prove the send path.

A fake push alert appears. Victims swear it looked like the bank. There is no malicious APK on the Play Store. The case still turns on deception — and on whether you can prove how the notification was generated, routed, and displayed. “It looked real” is the complaint. Attribution needs the send path: device logs, notification service records, campaign identifiers, and what the user actually tapped. Without that, you have a story about appearance, not a map of the fraud machinery.

Looked like the bank.

Prove the send path.