Imagine waking up to find money deposited in your account—money you never asked for. Hours later, your phone starts ringing nonstop. You receive intimidating messages, even threats toward you and your family. You didn’t request a loan, but suddenly, you’re being treated like a debtor.
This isn’t an isolated case—it’s the new modus operandi of “Debt Trap 2.0” apps, a more aggressive and sophisticated evolution of digital fraud that’s affecting thousands of users across Mexico and Latin America.
That’s how the story of “Atlas” (a pseudonym to protect their identity) began. Without downloading an app or applying for any credit, they received an unexpected deposit. Days later, the nightmare started: more than 50 phone calls and WhatsApp messages from both local and international numbers, filled with insults and threats.
“They told me I had to pay a debt or they’d contact my family. I didn’t understand—I'd never asked for money,” Atlas recalled.
This new type of fraud turns unsolicited deposits into tools of extortion. Criminals invent a fake debt, demand repayment under threat, and in some cases publish victims’ personal information or photos online to pressure them.
Publimetro Mexico documented a case in which money was deposited without being requested, and then more than 50 threats were sent. (Source: Publimetro Mexico)
The scheme is simple but insidious: create fake debts and harass victims digitally.
Unlike the earlier “loan shark apps” that required invasive permissions when installed, this new generation acts first—depositing money without consent and using stolen personal data to appear legitimate.
Here’s how it works:
In some cases, victims have reported identity theft, as criminals use their data to open new accounts, verify deposits, or even apply for real loans in their name.
Victims should save evidence, file a report, and request bank trace of the deposit to follow the money trail. (Source: Publimetro Mexico)
The issue extends far beyond fake loans. Cybersecurity experts, such as Martina López of ESET Latin America, warn that many of these apps come with built-in malware. Even when they appear harmless—or are listed in official stores like Google Play or the App Store—they can steal banking data, passwords, and identity documents.
At the 2025 ESET Cybersecurity Forum, López stated:
“We’ve detected trojans in loan apps that steal personal information even if the user never completes the credit request.”
In other words, one careless click or a moment’s distraction can put your personal data directly into the hands of a criminal network.
The Citizens' Council has identified 1,073 apps with debt-collecting methods; more than 35% continue to operate outside of official app stores. (Source: App Store)
Among the apps under investigation is Coparfin Dinero, developed by Coparfin Empresarial S.A. de C.V.. On the App Store, it has over 1,000 reviews and a 4.6-star rating—but many comments describe harassment and threats.
One user wrote:
“You don’t accept the loan, but they deposit it anyway. Then they harass and threaten to call your contacts.”
Another said:
“They messaged me saying they’d publish my personal data if I didn’t pay. I never asked for a loan.”
Although Coparfin Dinero was removed from Google Play, it continues to circulate outside official stores, available via third-party sites and APK files. According to Mexico City’s Citizen Council for Security and Justice, the app appears among 1,073 identified “debt trap” platforms, with at least 50 victim reports to date.
The Citizen Council reports that over 35% of fraudulent apps remain active, either under new names or outside regulated platforms. Some even change logos and descriptions to appear legitimate.
This evolving model merges social engineering, malware, and psychological extortion, creating a hybrid threat that blends finance and cybercrime.
Put simply: scammers no longer wait for you to ask for a loan—they deposit money first to trap you.
Learn more: ChainLink Phishing: Trusted Domains Used as Threats
If money suddenly appears in your account, don’t touch it. At TecnetOne, we recommend the following steps to protect yourself:
Prevention is easier than recovery. At TecnetOne, we recommend following these digital safety practices:
The case of Atlas—and hundreds of similar reports online—shows that Debt Trap 2.0 scams combine digital harassment, identity theft, and financial extortion.
They no longer rely on fake loan offers; now they create debts, use your personal data, and manipulate you emotionally.
This type of fraud thrives on misinformation and emotional vulnerability. That’s why the best defense is digital education—learning to spot red flags, verify sources, and guard your personal data.
The rise of “debt trap” apps proves that cybercriminals don’t need to hack complex systems—they just need your trust and data.
At TecnetOne, we believe that digital safety begins with awareness. If unexpected money lands in your account, don’t see it as luck—see it as a warning.
Report it, document it, and protect your information.
Digital extortion may start with a deposit—but it ends with your caution.