Why These Files Spread So Effectively
Because the screenshot is real. A modified client genuinely displays a balance of two lakh rupees, and the person sharing it is not lying about what they saw on their screen. The gap between what the screen shows and what the account holds is invisible until a withdrawal is attempted, and by then the file has been forwarded to a dozen people.
The second reason is timing. These packages surface in searches at the point where somebody has lost more than they intended, which is the moment when a shortcut is most persuasive and scrutiny is lowest.
What a Mod Would Have to Do to Be Real
It would have to reach the server that generates the digit and the ledger that records balances, neither of which is on your phone. That is a network intrusion rather than an app modification, it would be a serious criminal matter, and whoever managed it would have no reason to publish the file on a forwarding chain.
The permission checklist that keeps most of this at arm's length is on the download safety page, and the wider argument about what any client can and cannot see is on the home page.