India - Specific Scams & Legal Context
India's digital economy is one of the fastest-growing in the world. Its fraud economy has kept pace.
Six Hours on a Video Call
Suresh, a 58-year-old retired school principal in Ahmedabad, received a WhatsApp call in November 2023.
The caller said he was from the Narcotics Control Bureau. He shared a screen showing a FIR with Suresh's Aadhaar number and a photograph. He said Suresh's phone number had been used to launder Rs 3.2 crore. He said Suresh was now under "digital arrest" and could not speak to anyone until the case was cleared.
Suresh stayed on the call for six hours.
By the end, he had transferred Rs 6.5 lakh to a "verification account." A second caller then said the freeze required an additional Rs 4 lakh to lift.
His daughter noticed the transfers and intervened.
The NCP does not make video calls. No government agency does. Digital arrest is not a legal concept. It does not exist.
The Scale of the Problem
Rs 1,750 crore
lost to digital arrest scams in the first half of 2024 alone.
7,061 complaints were registered in the same period. The Indian Cyber Crime Coordination Centre (I4C) identified 92,334 WhatsApp-based fraudulent accounts operating from abroad.
Source: Ministry of Home Affairs I4C Report, 2024Rs 485 Crore Lost to UPI Fraud in 2024
India processes over 14 billion UPI transactions monthly. Fake payment requests, social engineering OTP theft, and QR code fraud are the three dominant UPI attack types. The 24-hour reversal window closes most recovery paths.
Over 1,100 Illegal Loan Apps Removed in 2023-24
MeitY and RBI removed over 1,100 predatory lending apps from Indian app stores between 2023-2024. These apps charge illegal interest rates, access contacts and photos, then harass borrowers if payments are delayed.
India's Most Active Scam Types
Digital Arrest Scams
The caller impersonates CBI, NCB, TRAI, Customs, or Income Tax. They claim your Aadhaar or phone number is linked to a crime. They insist you stay on video call - "digital arrest" - until you pay to "clear" the case.
What makes it work: The caller has your real Aadhaar number, address, and sometimes your photo. This data is purchased from breach markets. The official-sounding language and fake ID screens create enough fear to override critical thinking.
The rule: No government agency in India conducts arrests over video call. Hang up. Block. Call 1930.
Aadhaar, PAN, and Income Tax Impersonation
Scammers use your Aadhaar number to impersonate you, claim your PAN is linked to black money, or threaten Income Tax action. They ask you to "verify" by sharing OTPs or making payments to a "verification account."
The rule: UIDAI, IT Department, and TRAI communicate by official letter - not by WhatsApp call. Verify your Aadhaar status at myaadhaar.uidai.gov.in. Lock your biometrics if you receive any suspicious call.
UPI Fraud and Fake Payment Requests
Three patterns dominate:
- Fake payment requests: Sent via UPI apps appearing to be receipts - accepting them sends money out, not in.
- Social engineering OTP theft: Caller claims to be bank staff or UPI helpdesk and asks for your OTP to "verify" or "fix" your account.
- QR code fraud: A scammer sends a QR code claiming it will credit money to your account. QR codes in UPI can only debit - they never credit.
The rule: Scanning a QR code or entering a UPI PIN always sends money. No legitimate payment requires your PIN to receive funds.
Matrimonial Site Fraud
Fake profiles on Shaadi, Jeevansathi, and BharatMatrimony target people seeking marriage partners. The fraud follows a pattern: build trust over weeks or months, introduce a financial emergency, request money for travel, medical, or visa costs.
In 2024, India's NCRB recorded over 12,000 matrimonial fraud complaints - a 34% increase year-on-year.
Predatory Loan Apps
Illegal loan apps advertise instant credit with no paperwork. Once installed, they access your contact list and photos. When repayment is delayed, they contact your family and colleagues with fabricated messages claiming you are a defaulter. Some send morphed photos.
All legitimate digital lenders are registered with the RBI. Check at rbi.org.in before downloading any lending app.
SIM Swap Targeting Aadhaar-Linked Numbers
Attackers call your telecom operator posing as you, use your Aadhaar details (often from breaches), and request a SIM swap. Once your number is on their SIM, all OTPs - banking, UPI, email - go to them.
Signs: your SIM stops receiving calls and messages suddenly. Call your operator within minutes. Every hour increases the damage.
India's Cybercrime Laws
| Law | What It Covers |
|---|---|
| IT Act 2000, Section 66C | Identity theft using electronic means |
| IT Act 2000, Section 66D | Cheating by impersonation using a computer |
| IT Act 2000, Section 67 | Publishing obscene material (loan app blackmail) |
| BNS 2023, Section 318 | Cheating (replaces IPC 420) |
| BNS 2023, Section 319 | Cheating by impersonation |
| DPDP Act 2023 | Unlawful processing of personal data |
| Aadhaar Act 2016, Section 29 | Misuse of Aadhaar identity information |
India Scam Response Kit
Select what happened to you. Get the exact reporting steps and time-critical actions.
Three Things Worth Knowing
1. The 24-hour rule for UPI fraud. Banks and NPCI can attempt to freeze and reverse UPI transactions if reported within 24 hours. After 72 hours, money is typically moved through multiple accounts and recovery becomes very unlikely. Calling 1930 immediately gives the best outcome.
2. Lock your Aadhaar biometrics. Go to myaadhaar.uidai.gov.in and lock your fingerprint/iris biometric authentication. This prevents anyone from using your biometrics for authentication even if they have your Aadhaar number. Unlock only when you need it. Relocking takes 30 seconds.
3. DPDP Act 2023 is now in force. India's Digital Personal Data Protection Act 2023 gives you the right to know what data organisations hold about you, to correct inaccurate data, and to have your data erased. The Data Protection Board is the enforcement body. Complaints once the board is fully operational will go to its portal.
One Question Before You Continue
Suresh received a WhatsApp video call from someone claiming to be from the NCB, saying he was under 'digital arrest'. The caller had his real Aadhaar number and photo. What should Suresh have done the moment the caller mentioned 'digital arrest'?