Author: Veer

An elderly woman in Mangaluru has reportedly lost ₹16.20 lakh in an investment scam that began with a Facebook advertisement. According to her complaint at the Mangaluru Cyber Economic and Narcotics (CEN) police station, she clicked an investment-related link in April and was added to a Telegram group, where assurances from the group convinced her to start transferring money.

Her first payment was a modest ₹20,372 on April 18. Over the following months the amounts grew sharply: ₹3 lakh on June 12, another ₹3 lakh on June 22, ₹4 lakh on June 24, and ₹6 lakh on June 30 — bringing her total loss to ₹16.2 lakh. When she asked the group to return her money and got no response, she realised she had been deceived and filed a complaint. Police have registered the case, and an investigation is underway.

Investment scams can be persuasive because they are presented as financial opportunities rather than obvious threats. A professional-looking message, website or account should not be treated as proof that an offer is genuine.

What is known about the reported Mangaluru case?

The core details above — the Facebook-to-Telegram route, the escalating payment pattern, and the ₹16.2 lakh total — come from her police complaint and are consistent across news reports. What isn’t yet public is who ran the scheme, whether the accounts used to receive the money have been traced, or whether any of it has been recovered — that depends on how the CEN police investigation proceeds.

That distinction matters less than the pattern itself, which is the real lesson here: a small first payment (₹20,372) followed by steadily larger ones over two months is a classic trust-building sequence. Every unsolicited or unusual investment proposal needs independent checking before money or personal information is shared — regardless of how small the first ask seems.

Why investment approaches deserve careful checking

Cloudflare identifies phishing among common cyberattack methods and provides guidance on detecting and preventing such attacks. Phishing generally depends on deception: a message or online page is made to appear trustworthy so that the recipient takes an action.

In an investment setting, the requested action may involve opening a link, sharing information, creating an account or making a payment. The important safety principle is the same: do not rely only on what appears inside the message or page.

A polished design is not evidence of legitimacy. Nor are confident claims, charts, account dashboards or screenshots supplied by the person promoting an opportunity. Treat these as material to be checked, not as independent confirmation.

Warning signs that justify a pause

• Unexpected contact: A person you do not know approaches you with an investment proposal.
• Pressure to act: You are told that the opportunity, price or withdrawal window will disappear quickly.
• Unclear identity: It is difficult to confirm who operates the service or who will receive the money.
• Link-based instructions: You are directed to a website through a message instead of reaching the organisation through a channel you found independently.
• Requests for more money: Additional payments are demanded before an investment, profit or balance can supposedly be released.
• Secrecy: You are discouraged from discussing the offer with family members or another trusted person.

One sign alone does not prove fraud. Several signs together, however, are a strong reason to stop and investigate before proceeding.

Checks to make before sending investment money

1. Step away from the conversation. Do not let the sender control the pace. End the call or pause the chat so you can assess the proposal without pressure.
2. Write down the exact claim. Record the organisation’s stated name, the product being offered, the amount requested and what you have been promised. Vague explanations are difficult to verify.
3. Find contact details independently. Do not use only a phone number, email address or link supplied by the person making the offer. Look for a separate, trusted route to the organisation they claim to represent.
4. Inspect the web address. Look for misspellings, added words and unfamiliar domains. You can place a suspicious address into ScamDekho’s URL Checker as an additional screening step. A favourable automated result is not a guarantee that an investment is genuine.
5. Review the message itself. Check for urgency, inconsistent names, unusual payment instructions and demands for secrecy. ScamDekho’s Scam Message Checker can help you examine suspicious wording, but it should not replace independent verification.
6. Ask a trusted person to review it. A family member or financially experienced person may notice inconsistencies that are easy to miss during a persuasive conversation.
7. Do not send money just to test a platform. A small initial payment can still expose personal or payment information and may lead to pressure for larger transfers.

These checks are useful even when the amount requested seems small. The purpose is to verify the recipient and the offer before any financial commitment is made.

How families can help elderly relatives

Consumer safety works better when it is supportive rather than judgmental. Scams are designed to create trust, urgency or fear. Blaming a person after a loss may make them less willing to disclose further contact or payment requests.

Families can agree on a simple routine for unexpected financial proposals:

• Pause all payments until another trusted person has reviewed the offer.
• Keep bank, payment and login information private.
• Use contact details found independently instead of numbers supplied in messages.
• Discuss unusual investment calls or chats without embarrassment.
• Save suspicious messages and transaction records rather than deleting them immediately.

It can also help to identify one or two trusted contacts in advance. An elderly relative then knows whom to call when an online offer feels urgent or confusing.

What to do after a suspected loss

If money may have been sent to a scammer, stop further payments. Do not send another amount merely because someone claims it is needed to unlock a withdrawal, refund or account balance.

Preserve the information already available. This may include messages, email addresses, phone numbers, web addresses, payment confirmations and transaction details. Keeping the original records can help explain what happened when the incident is reported.

Contact the relevant bank or payment provider promptly through an official channel and describe the transaction accurately. Do not rely on contact information supplied by the suspected scammer.

The Government of India’s National Cyber Crime Reporting Portal is the official online channel for reporting cybercrime. A report should clearly distinguish what you personally observed from what the other party claimed. Avoid guessing about the offender’s identity or location.

Be cautious if another person later offers to recover the money in exchange for an advance payment or sensitive information. Verify any such approach independently before responding.

Key lesson from the reported case

This case is a reminder of how gradual these scams can be — it took over two months and five separate payments before the loss reached ₹16.2 lakh. Financial decisions should not be made inside a Telegram or WhatsApp group built specifically to create urgency. Stop, verify the identity of the person or business independently, inspect links carefully, and discuss the proposal with someone you trust before sending anything — including the first payment.

If a suspicious interaction has already led to a payment, preserving evidence and reporting the incident through official channels are practical next steps. Acting calmly is more useful than continuing to negotiate with the person requesting money.

Frequently asked questions

Was the Mangaluru loss independently verified by ScamDekho?

No. This draft is based on the supplied topic referring to a Deccan Herald report. The detailed facts and investigation status were not available in the provided sources.

Does a professional investment website prove that an offer is genuine?

No. Design, charts, screenshots and account balances displayed online should not be treated as independent proof. Verify the operator and offer through channels you find separately.

What should I do if an investment promoter is rushing me?

Pause the conversation and do not pay. Write down the claims, verify the identity independently and ask a trusted person to review the proposal.

Where can cybercrime be reported in India?

The Government of India’s National Cyber Crime Reporting Portal is the official online reporting channel. Keep relevant messages, web addresses and transaction records available when making a report.

Should I pay a fee to release a supposed investment balance?

Do not send more money solely because an unverified person says a fee is required. Stop and independently verify both the recipient and the underlying investment claim.

Hyderabad Cyber Crime Police registered two separate FIRs on July 31 against the head of Apple’s App Store in India and officials responsible for Telegram’s compliance and grievance-redressal functions, after two city residents alleged combined losses of over ₹21 lakh in unrelated online fraud cases.

In the first case, a 62-year-old retired resident of Somajiguda told police he lost ₹12.7 lakh after clicking an Instagram advertisement for a stock-trading platform and downloading an app from the App Store, then transferring money in installments over several weeks. In the second, a homemaker from Almasguda said she lost around ₹8.57 lakh after an Instagram job listing led her into a Telegram channel offering paid work rating Google reviews — she was first paid small amounts to build trust, then asked for larger “deposits.”

Cases were registered against the individuals accused of directly running the scams, along with the platforms’ India-level officials, under relevant provisions of the IT Act and the Bharatiya Nyaya Sanhita. This is where readers need to slow down: naming a company official in an FIR is a procedural step, not a finding of guilt. It means police believe there’s enough to investigate that person’s role — often tied to intermediary-liability rules about how a platform responds to takedown requests — not that wrongdoing has been established. It’s also not an isolated move: Hyderabad police have named country-level heads at Google and Meta as co-accused in similar fraud cases in recent weeks, so this fits a wider pattern rather than singling out Apple or Telegram.

What can be addressed reliably is the consumer-safety issue behind such reports. Fraudsters frequently use phishing and other online attack methods to deceive users. Cloudflare’s security guidance identifies phishing among common cyber threats, while the Government of India’s National Cyber Crime Reporting Portal provides an official channel for citizens to report cybercrime.

What is known and what remains unverified

The basic facts above — the ₹21 lakh combined loss, the Hyderabad location, and who was named in the FIRs — are consistent across multiple news reports. What remains unverified is everything downstream of the complaint: how the investigation actually unfolds, and whether it results in any finding against the named officials.

Until primary records or reliable reporting are reviewed, readers should not assume:

• that the named or described officials personally communicated with the victim;
• that the platforms knowingly enabled the alleged fraud;
• that every account, app or message mentioned in the complaint was controlled by the same person;
• that the reported loss and other details have been established by a court; or
• that the filing of a complaint proves criminal liability.

It is also important not to dismiss the broader risk. Messaging services, websites and mobile applications can be misused by impersonators. A logo, profile name, app listing or familiar platform interface is not sufficient proof that the person behind a message is genuine.

How platform-based fraud can reach consumers

Online fraud does not always begin with an obviously suspicious message. A scammer may first create urgency, claim to represent a company or authority, and then direct the recipient to a link, account or application. Phishing is designed to make a person disclose information or take an unsafe action.

Common warning signs include:

• unexpected requests to pay immediately;
• threats of account suspension, arrest, penalties or loss of access;
• requests for passwords, one-time codes or other login information;
• links that imitate the name or appearance of a familiar service;
• instructions to move a conversation away from an official support channel;
• requests to install an unfamiliar app or grant unnecessary permissions; and
• pressure to keep the conversation secret from family, a bank or the police.

Any one sign may not prove fraud. Several signs together, particularly urgency plus a request for money or credentials, should prompt the recipient to stop and verify.

Similar pressure tactics can appear under different stories. For example, parcel impersonation scams may claim that a shipment is detained and demand urgent action. ScamDekho’s guide to the FedEx and DHL parcel scam in India explains how that type of lure can be framed.

Safety checks before trusting a message or app

Whether a message arrives through Telegram, SMS, email or another service, the safest response is to verify it outside the conversation. Do not use the contact number or link supplied by the sender for that verification.

1. Pause before acting. Urgency is often used to prevent careful checking. A genuine issue can be verified through an independently located official channel.
2. Inspect the destination. Look at the full website address rather than the visible button text. Misspellings, extra words and unusual domains deserve caution. You can also submit a suspicious address to ScamDekho’s URL Checker for an additional check. A tool result should be treated as one signal, not a guarantee.
3. Review the message language. Look for demands for secrecy, immediate payment, credentials or one-time codes. ScamDekho’s Scam Message Checker can help identify suspicious wording, but it does not replace independent verification.
4. Find the official contact yourself. Open the service’s official app directly or type its known website address. Do not rely on a search advertisement, forwarded number or link supplied by the unknown sender.
5. Check permissions. Before installing an app, consider whether its requested access matches its stated purpose. A simple service should not need broad control over unrelated information or device functions without a clear reason.
6. Do not share authentication details. Passwords and one-time codes can allow another person to access an account. Treat requests for them as a serious warning.

These checks cannot determine who is legally responsible in the reported Hyderabad matter. They are preventive steps for reducing exposure to phishing and impersonation attempts.

What to do if money or account access is at risk

If you suspect fraud, stop communicating through the suspicious channel. Do not send additional money in the hope of recovering an earlier payment. Do not install more software or follow instructions from someone claiming they can reverse the transaction for a fee.

A practical response is to:

1. contact the relevant bank or payment provider using a verified channel;
2. change affected passwords from a device you trust;
3. review the account for unfamiliar activity;
4. retain messages, usernames, payment details, website addresses and transaction records; and
5. submit a report through the Government of India’s National Cyber Crime Reporting Portal.

The National Cyber Crime Reporting Portal is the official government channel included in the source material for reporting cybercrime. Provide accurate information and distinguish what you directly observed from what another person told you. Do not alter screenshots or invent details to make a complaint appear stronger.

How to read claims about companies and officials

Cyber fraud may involve several layers: an impersonator, a messaging account, a payment route, a website, an application and the infrastructure used to reach a victim. The appearance of a platform’s name in a complaint does not explain the role of every person associated with that platform.

Readers should look for case-specific documentation before reaching conclusions. Useful questions include:

• Which police unit reportedly registered the case?
• Does the report cite a complaint or another primary record?
• Are the statements allegations, police findings or court findings?
• Have the organisations or individuals concerned responded?
• Is the reported amount a claimed loss or an amount established through investigation?

On this story, most of those questions now have straightforward answers: Hyderabad Cyber Crime Police registered the FIRs on July 31 under IT Act and BNS provisions, based on two victims’ complaints. What’s still open is the one that matters most — whether the investigation finds any actual wrongdoing by the named officials. That’s the part no one can answer yet, including this article.

Frequently asked questions

Were App Store India and Telegram officials confirmed guilty?

No such conclusion is supported by the supplied sources. The source pack does not include case records or a court finding. A report that someone was booked should not be presented as proof of guilt.

Is the reported ₹21 lakh Hyderabad loss confirmed?

Multiple Hyderabad news outlets report the same figure — a combined ₹12.7 lakh and ₹8.57 lakh lost by two separate complainants. That’s consistent sourcing, but it’s still the amount victims told police they lost, not a figure a court has verified.

Does a Telegram message or app-store listing prove legitimacy?

No. The presence of a message on a known platform or an app in a familiar environment does not by itself verify the identity or intentions of the person contacting you. Verify claims through an independently found official channel.

Where can an Indian consumer report suspected cybercrime?

The Government of India’s National Cyber Crime Reporting Portal is an official reporting channel. If an account or payment is at risk, the consumer should also contact the relevant bank or service provider through verified contact details.

A customer shows you a Google Pay success screen and says the money has been sent. A buyer shares a UPI screenshot on WhatsApp and asks you to hand over an item. Your phone may even play a payment-style sound. But none of these, by themselves, proves that money has reached your account.

The safest response to a suspected fake payment UPI GPay claim is simple: pause and check the credit through your own UPI app or bank account. Do not rely on the other person’s phone, screenshot, message or sense of urgency.

NPCI’s UPI safety guidance says a UPI PIN is used to deduct money from your account, not to receive money. This distinction is particularly important when someone asks you to scan a QR code or enter a PIN to accept a payment.

What does a fake GPay payment look like?

A fake payment claim can involve an edited screenshot, a screen designed to resemble a payment app, or a transaction that has not actually been completed. The person may use the apparent payment as a reason to collect goods, obtain a refund or persuade you to approve another UPI transaction.

Common warning signs include:

• The person shows only their own phone instead of waiting for you to verify the credit.
• A screenshot is cropped so that transaction details are missing.
• The sender pressures you to release an item immediately.
• The amount, recipient name or transaction details do not match the expected payment.
• You are asked to scan a QR code or enter your UPI PIN to receive the money.
• The person claims to have paid extra and asks you to return the difference.

A polished screen is not reliable evidence. Images can be edited, while imitation apps or interfaces can display convincing payment messages. Our guide to spotting a fake GPay UPI screenshot explains the visual checks in more detail.

How to verify whether a UPI payment is genuine

Verification should happen on a device and account you control. Do not let the supposed payer guide the check from their phone.

1. Open your own UPI or banking app. Use the app directly rather than opening an unexpected link in a message.
2. Check the relevant account. Confirm that you are looking at the bank account linked to the UPI ID or QR code used for the payment.
3. Look for the incoming transaction. Match the amount and payer details available in your account’s transaction history.
4. Check your bank record. If the app screen is unclear, inspect the account statement or transaction history supplied by your bank.
5. Do not act while the result is uncertain. If you cannot confirm the credit, do not hand over goods, provide cash or issue a refund.

A transaction reference shown by the other person is not a substitute for checking your account. Likewise, an SMS or notification should not be your only check. What matters is whether the expected credit appears in the account you control.

You can also use ScamDekho’s Fake Payment Screenshot Checker to examine suspicious visual details. However, no screenshot check should replace verification through your own bank or UPI transaction history.

Why scanning a QR code can be dangerous

A QR code can contain payment information, but scanning one does not prove that another person is paying you. NPCI’s safety guidance says users should scan a QR code only for making a payment and should not share their UPI PIN.

If someone says you must scan their code and enter your PIN to receive money, stop. Entering the PIN can authorise money to leave your account. You do not need to disclose or enter a UPI PIN merely to receive a normal incoming payment.

The phrase fake payment UPI scanner is sometimes used for suspicious QR-based flows or screens that imitate a genuine payment process. Whatever the label, apply the same rule: read what the app says before approving anything. Check whether the screen is asking you to pay, approve a request or authorise a debit.

Never proceed simply because the other person says the step is required for a refund, reward, account test or payment activation. For more examples, see our guide to UPI QR code scams in India.

What shopkeepers and online sellers should do

Fake payment claims are especially relevant when a transaction is happening quickly at a shop, during a delivery or through an online marketplace. A short verification routine can reduce the chance of acting on a false screen.

• Check every incoming payment on the merchant’s own device or bank record.
• Match the received amount before releasing goods.
• Do not accept a customer’s success screen as final proof.
• Keep payment verification separate from the customer’s phone.
• If someone claims to have overpaid, first confirm the original credit in your own account.
• Do not send a refund to a different UPI ID merely because the customer requests it.

For marketplace sales, avoid allowing urgency to replace verification. A buyer may say that a courier is waiting or that the payment will expire. You can review related warning signs in our article on fake advance payment tricks on OLX and Facebook Marketplace.

What to do if money has left your account

If you entered a UPI PIN, approved an unfamiliar request or notice an unauthorised debit, contact your bank immediately through its official channel. Ask the bank to record the complaint and retain the complaint or reference number.

The Reserve Bank of India’s customer-protection framework links a customer’s liability in unauthorised electronic banking transactions to factors including how the transaction occurred and how quickly it was reported. It also states that where loss is caused by a customer’s negligence, such as sharing payment credentials, the customer bears the loss until the unauthorised transaction is reported to the bank. Loss occurring after the report is borne by the bank under the framework.

Because the circumstances matter, do not assume that reimbursement is automatic. Report the transaction promptly and follow the bank’s formal dispute process. Preserve screenshots, transaction identifiers, messages, phone numbers and complaint acknowledgements. Do not share your UPI PIN, one-time password or other credentials with anyone offering to recover the money.

A quick fake-payment safety checklist

• Verify the credit in your own UPI app or bank account.
• Match the amount and available transaction details.
• Do not trust screenshots, sounds or the payer’s phone alone.
• Never enter a UPI PIN to receive money.
• Do not scan a stranger’s QR code to accept a payment.
• Do not refund an alleged overpayment until the original credit is confirmed.
• Report an unauthorised debit to your bank immediately.

Frequently asked questions

Can a Google Pay payment screenshot be fake?

Yes. A screenshot can be edited or created to resemble a successful payment screen. Confirm the incoming credit through your own UPI app or bank account before providing goods, cash or a refund.

Do I need to enter my UPI PIN to receive money?

No. NPCI’s safety guidance says the UPI PIN is used to deduct money from your account, not to receive money. Stop if someone asks you to enter it to accept a payment.

Should I scan a QR code sent by a buyer?

Not to receive a payment. NPCI advises scanning a QR code only when making a payment. Read the app screen carefully and do not approve a debit or payment request by mistake.

Is a transaction ID enough to prove payment?

A transaction ID shown by the payer should not be your only evidence. Verify that the expected credit appears in your own account and that the amount and available details match.

What should I do after an unauthorised UPI debit?

Contact your bank immediately using an official channel, register a complaint and keep the acknowledgement. RBI’s customer-protection framework makes prompt reporting important when liability is assessed.