Hackers empty the account even without OPT, how is this scam?

Cyber ​​criminals now send fake messages in the name of banks or any big company. In these messages, one is lured to win discount, cashback, gift voucher or prize. As soon as the person clicks on the link given in the message, malware or fake app may be installed in his mobile. After this, hackers gain control over the mobile and access the banking app and in many cases make transactions without OTP.

Some time back, a similar attempt had also happened with a woman from Delhi. The woman had bought a laptop from an electronic store, after which a few days later the woman received a message that she had received a voucher in return for her shopping. In the message, she was asked to fill the bank details and click on the link, however, due to the wrong name of the company in the message, the woman became suspicious and she was saved from becoming a victim of fraud.