Wrong domain
Mirror sites copy the layout but cannot copy the domain. wecap-app.in, wecapapp.net, wecap-fantasy.com are all clones. The official domain is wecapapp.com only.
Official website
The official Wecap domain is wecapapp.com. Verify before you sign in.
Phishing sites copy the Wecap brand, the layout, and the login path. This page documents the official domain, the verification path, and the warning signs to watch for.
18+ only
Permitted states
Responsible play
Verification checklist
APK →
Five steps before you sign in.
1
Check the domain
The official domain is wecapapp.com. Any other domain is not the operator. Mirror sites on .in, .net, .org, or country-specific TLDs are not the operator.
2
Check TLS
The browser address bar shows a padlock and wecapapp.com. If the certificate is invalid, expired, or self-signed, do not sign in.
3
Check the package name
The Android APK carries the package name in.weccap.fantasy. Anything else is not the operator's build.
4
Check the SHA-256
Run shasum -a 256 on the APK. Compare to the value on /apk-download/. Mismatch means the file was tampered with.
5
Check support reachability
Open the app, Settings → Customer care. Confirm a real response within an hour. Fake APKs have dead support paths.
Phishing warning signs
Customer care →
What an imposter looks like.
Shortened URLs
bit.ly, tinyurl, and other shortened URLs are common phishing vectors. The official APK page is on wecapapp.com/apk-download/ with no redirect.
Telegram channels
Wecap does not distribute the APK through Telegram channels. A Telegram link claiming to be the operator is a clone.
Bonus offers in the install flow
Wecap surfaces offers only after sign-in and KYC. If the install wizard asks for a deposit, you are looking at a clone.
Customer care unreachable
A legitimate build has a working in-app support path. If the support button bounces to a dead form or a generic email, uninstall.
Aggressive permissions
Accessibility services, device admin, or full-storage access are not features of the Wecap app. Refuse and uninstall.
What to do if you find a clone
Customer care →
Report it.
Report to the operator
Reach customer care inside the app under Settings → Customer care → Report a clone. The operator's compliance team works with hosting providers and domain registrars to take clones down.
Report to CERT-In
The Indian Computer Emergency Response Team (CERT-In) accepts phishing reports at [email protected]. Include the clone URL, screenshots, and the timing of your encounter.
Do not enter credentials
If you suspect a site is a clone, do not enter your mobile number, OTP, or password. Close the site and use the official domain only.
If you already entered credentials
Open the official Wecap app, change your password, revoke all trusted devices, and contact customer care. Anomaly alerts on the account will trigger the standard review.
FAQ — Official website
Six short answers about domain verification.
What is the official Wecap domain?
The official domain is wecapapp.com. The desk does not operate any other domain. Mirror sites on alternative TLDs are not the operator.
How can I tell if a site is the operator?
Check the domain (wecapapp.com only), the TLS certificate (padlock + correct domain), and the package name on the APK (in.weccap.fantasy).
Does Wecap distribute through Telegram?
No. Wecap does not distribute the APK through Telegram channels, WhatsApp groups, or third-party file hosts. The official source is /apk-download/.
What if I already entered credentials on a clone?
Open the official app, change your password, revoke all trusted devices, and contact customer care. Anomaly alerts will trigger the standard review.
Where do I report a phishing site?
Report to the operator's customer care (in-app) and to CERT-In at [email protected]. Include the URL, screenshots, and timing.
Does Wecap have a customer-care phone?
No. The Wecap desk does not publish a customer-care phone number on the web. A phone number on a third-party mirror is not the operator's number.
Today's the day
Verify inside the app. Then build your team.
Wecap publishes what the desk has read and verified. Deposit limits, contest structures, and welcome terms are governed by the operator — confirm inside the app before you commit.