Category: Blog

Every day, thousands of Indians lose their hard earned money to online shopping scams. From fake shopping sites offering “90% off” deals to pyramid schemes like Safe Shop, digital scams are growing faster than ever in India.

If you have ever wondered what is online fraud and how it actually works, you are in the right place. In this guide, I will break down real online shopping fraud cases, show you how to identify fake shopping websites, and give you practical steps to protect yourself in 2026.

Let me be honest. I have personally come across multiple fake shopping sites while researching for this blog. Some of them looked so real that even I had to double check. That is exactly why this guide exists.

What is Internet Fraud and Why Should You Care?

Internet fraud is any illegal activity where someone uses the internet to steal money, personal data, or both. When we talk specifically about what is online fraud in the context of shopping, it means scammers creating fake platforms or offers to trick you into paying for products that never arrive.

India reported over 11 lakh cyber crime complaints in 2024 alone, according to the National Cyber Crime Reporting Portal. And a large chunk of these were related to online shopping scams in India.

The problem? Most people do not even report these scams because the amount lost feels “too small.” But when you add it all up, we are talking about thousands of crores every year.

How Do Online Shopping Scams Actually Work?

Before I list the types, let me explain the basic pattern that most digital scams follow. Understanding this pattern will help you spot any new scam, even the ones that do not exist yet.

The usual flow looks like this:

1. You see an unbelievable deal on social media or WhatsApp
2. You click and land on a website that looks professional
3. You place an order and make the payment
4. Either the product never arrives, or you get a cheap knockoff
5. When you try to contact customer support, the number is dead

Simple. Effective. And thousands of Indians fall for it every single week.

Types of Online Shopping Fraud in India (2026)

1. Fake Shopping Sites with Huge Discounts

These are standalone websites that copy the design of popular brands. They run Instagram and Facebook ads showing branded products at 70 to 90 percent off.

Red flags to watch for:

• Domain registered only a few weeks ago
• No physical address or GSTIN mentioned
• Only prepaid payment options, no cash on delivery
• Too good to be true pricing
• Poor grammar and blurry product images

Quick tip: Before buying from any new website, check its domain age on Whois. If it was registered less than 6 months ago, stay away.

2. Fake Seller Accounts on Legitimate Platforms

Even on trusted platforms like Amazon, Flipkart, and Meesho, some sellers create fake accounts. They list products at low prices, collect orders, and either send empty boxes or never ship at all.

How to protect yourself:

• Always check seller ratings and reviews
• Look for “Fulfilled by Amazon” or “Flipkart Assured” tags
• Avoid sellers with zero reviews or brand new accounts

3. Social Media Shopping Scams

This is probably the fastest growing category of online scams in India right now. Scammers run paid ads on Instagram and Facebook with stolen product photos. They create urgency with phrases like “Only 2 left” or “Sale ends tonight.”

I personally tracked one such Instagram page last month. It had 50,000 followers, all bought. The comments were full of bots saying “Received my order, quality is amazing.” But when I reverse searched their product photos, they were stolen from AliExpress listings.

4. WhatsApp and Telegram Shopping Scams

You get added to a group. Someone shares a Google Form or a direct UPI link for discounted electronics or branded clothes. You pay. Product never comes. And you get removed from the group.

This is extremely common in tier 2 and tier 3 cities where people trust WhatsApp forwards more than official websites.

Safe Shop Scams: India’s Biggest MLM Shopping Fraud

Let me talk about this in detail because Safe Shop frauds have affected lakhs of Indians, mostly in smaller towns and rural areas.

Safe Shop, also known as Safe Shop India, presented itself as a direct selling or network marketing company. They sold overpriced products like tablets, health supplements, and educational courses. But the real “business” was not about selling products. It was about recruiting new members.

Here is how the Safe Shop scam worked:

• You paid a joining fee, usually between Rs 3,000 to Rs 12,000
• You received a low quality product that was worth a fraction of what you paid
• To earn money, you had to recruit more people under you
• The people at the top made money while those at the bottom lost everything

The FTC and even Indian consumer courts have flagged such models as pyramid schemes. Multiple complaints were filed on consumer forums and the National Consumer Helpline against Safe Shop.

Why did so many people fall for it?

Because the pitch was emotional. Recruiters showed fake income proof, rented luxury cars for seminars, and promised “financial freedom.” In states like Bihar, Jharkhand, UP, and Rajasthan, thousands of students, unemployed youth, and small town workers invested their savings.

If someone is pitching you a “business opportunity” where the income depends more on recruitment than actual product sales, it is almost certainly a scam. Walk away.

How to Identify Fake Shopping Websites in 2026

Here is a quick checklist you can use every time you shop on a new website:

Check This	What to Look For
URL	Should start with https, look for misspellings
Contact Info	Real phone number, email, and physical address
GSTIN	Legitimate Indian businesses display this
Payment Options	COD available or only prepaid?
Return Policy	Clearly mentioned or hidden?
Domain Age	Use Whois lookup, avoid sites less than 6 months old
Reviews	Search “[website name] + review” or “+ scam” on Google

Pro tip : Use the Government of India’s Sanchar Saathi portal to verify suspicious numbers. Also, check the DPIIT recognition page if a website claims to be a registered startup also you can check website on scamdekho

What to Do If You Have Been Scammed

If you have already lost money to an online shopping fraud, do not panic. Take these steps immediately:

Step 1: Take screenshots of everything. The website, payment confirmation, WhatsApp chats, ads, everything.

Step 2: Report on the National Cyber Crime Portal at cybercrime.gov.in. You can also call 1930, which is the cyber crime helpline.

Step 3: File a complaint with your bank or UPI app (Google Pay, PhonePe, Paytm) to initiate a chargeback or reversal.

Step 4: Report the website or social media page. On Instagram, use the “Report” option. For websites, report to Google Safe Browsing.

Step 5: If the amount is significant, file an FIR at your local police station under the IT Act.

The faster you act, the higher your chances of getting your money back.

5 Simple Rules to Stay Safe While Shopping Online

1. If the deal feels too good, it probably is. No one sells an iPhone for Rs 5,000.
2. Never share OTP with anyone. No legitimate company will ever ask for it.
3. Use credit cards instead of debit cards for online shopping. Credit cards offer better fraud protection.
4. Avoid clicking on links from unknown WhatsApp messages or SMS. Type the URL manually.
5. Keep your apps and browser updated. Security patches fix vulnerabilities that scammers exploit.
6. Never trust payment screenshots as proof. Scammers use fake payment screenshot generators to show you fabricated UPI or bank transfer confirmations. Always verify the payment directly in your bank app or UPI app before handing over any product or service.

Final Thoughts

Online shopping scams in India are not going away anytime soon. If anything, they are getting smarter. From fake shopping websites that look identical to real brands, to pyramid schemes like Safe Shop that prey on people’s dreams, the threats are real and evolving.

Your best defence is awareness. Bookmark this guide, share it with your family and friends, and always verify before you pay. A two minute check can save you from losing thousands.

Stay alert. Shop smart. And if something feels off, trust your gut.

FAQ: Online Shopping Scams in India

Q: What are some common online shopping scams examples in India?
Fake discount websites, duplicate product listings on marketplaces, WhatsApp group scams, Instagram page frauds, and MLM schemes like Safe Shop are the most common examples in 2026.

Q: How do I report online shopping fraud in India?
Visit cybercrime.gov.in or call 1930. You can also file a complaint on the National Consumer Helpline at 1800-11-4000.

Q: Are all direct selling companies scams?
No. Legitimate direct selling companies follow the Consumer Protection (Direct Selling) Rules, 2021. The difference is that real companies focus on product sales, not recruitment.

Q: Can I get my money back after being scammed?
Yes, if you act fast. Contact your bank, file a complaint on the cyber crime portal, and request a chargeback through your payment app.

Two friends from a small city in Chhattisgarh built a betting app from Dubai. That app made ₹200 crore every single day. It pulled in Bollywood stars, a former Chief Minister, and top agencies like ED and CBI.

And even after arrests, raids, and court orders, the app came back during IPL 2026.

This is the full story of the Mahadev App scam. Everything in one place, no confusion.

What Is the Mahadev App Scam?

Mahadev App was an illegal betting platform. People used it to place bets on cricket, tennis, card games, poker, and even elections.

It was run by two people: Saurabh Chandrakar and Ravi Uppal. Both from Bhilai, Chhattisgarh. Both operating from Dubai.

But here is what made this different from a regular gambling website.

They did not run it alone. They created over 3,200 “panels.” Think of each panel like a franchise. A local operator would get a panel, find users in their area, collect money, and send it up the chain. The app kept 70% of all profits. The operator kept 30%.

This is how ₹200 crore was flowing in every single day.

The numbers:

• Total scam size: over ₹6,000 crore
• Panels active across India: 3,200+
• Assets attached by ED so far: over ₹2,600 crore
• Daily earnings at peak: ₹200 crore

All this money was hidden through fake bank accounts, hawala, shell companies, and crypto.

Also Read: What Information Is Safe to Share Online? A Real Guide for Indian Users

₹508 Crore or ₹6,000 Crore? What Is the Real Number?

You will see different numbers in different news articles. Here is what each one means:

• ₹508 crore is what ED attached or froze in the early part of the investigation. It was just the beginning.
• ₹6,000 crore is the total estimated size of the whole scam. This includes all betting money, laundered funds, and assets.
• ₹2,600 crore is the total value of properties and assets ED has attached so far across India and Dubai.

So no number is wrong. They are just measuring different things. The scam itself is ₹6,000 crore.

The Full Timeline: 2022 to 2026

1. 2022: Mahadev App quietly starts. The network grows fast in Chhattisgarh and then spreads across India.
2. February 2023: Saurabh Chandrakar gets married in Ras Al-Khaimah, UAE. The wedding reportedly costs ₹200 crore. Bollywood artists are flown in. This wedding is what first caught the attention of ED.
3. 2023: The ED begins investigation. An Interpol Red Corner Notice is issued against Chandrakar.
4. Late 2023: Ravi Uppal is briefly detained in Dubai but is later released. He does not remain in custody.
5. 2024: CBI and ED both run investigations at the same time. Raids happen across 29 locations in five districts of Chhattisgarh. The name of former Chief Minister Bhupesh Baghel comes up in the probe.
6. October 10, 2024: Saurabh Chandrakar is formally arrested by UAE authorities. Indian officials are officially informed on this date. Extradition proceedings begin.
7. March 26, 2025: CBI conducts searches at around 60 locations including Bhupesh Baghel’s homes in Raipur and Bhilai.
8. March 2025: ED attaches ₹1,700 crore worth of properties in Dubai and New Delhi.
9. November 2025: Ravi Uppal flees the UAE. The Supreme Court of India directs ED to trace him and calls out how the main accused keep escaping the legal system.
10. April 2026: Mahadev App is active again during IPL season. Despite everything, the betting network is still running.

Scammers often send fake payment screenshots, you can detect fake payment proof here.

Who Are Saurabh Chandrakar and Ravi Uppal?

• Saurabh Chandrakar grew up in Bhilai. He moved to Dubai and built the Mahadev App with his childhood friend Ravi Uppal.
  
  His February 2023 wedding in Ras Al-Khaimah is what really blew the cover off this scam. When investigators asked how a person could spend ₹200 crore on one wedding, the trail led straight to the app.
  
  He was formally arrested on October 10, 2024 by UAE authorities. Extradition to India is still ongoing.

• Ravi Uppal was the co-founder. He was briefly detained in Dubai in late 2023 but was released. After that he stayed mostly off the radar. In November 2025, he fled the UAE completely. He is now officially a fugitive. The Supreme Court has ordered ED to find him.
  
  His escape is a big problem for investigators. Because as long as the people who built this network are free, the operation can always start again somewhere.

Check: Fake UPI Payment Screenshot Scam: Complete Guide for Indian Shopkeepers

How Did They Hide ₹6,000 Crore?

This is the part that made ED and CBI both take this case so seriously. The money did not just sit in one bank account. It went through many layers on purpose.

Step 1: Fake bank accounts Real people’s KYC documents were stolen and used to open thousands of fake accounts. Betting money came in through these first.

Step 2: Shell companies The money then moved into fake companies that existed only on paper. This made the money look like business income.

Step 3: Hawala Hawala moved money across borders with zero paper trail. No bank. No record.

Step 4: Crypto Some money was converted to cryptocurrency. This made it almost impossible to track using normal banking systems.

Step 5: Real estate Finally, the cleaned money was used to buy properties in Dubai and India. This is why ED has been able to attach ₹2,600 crore worth of assets.

Every rupee passed through several of these steps. That is why untangling this has taken years.

The Bollywood and Baghel Connection

The Ras Al-Khaimah wedding is connected to both parts of this story.

Several Bollywood celebrities attended or performed at Chandrakar’s wedding. ED called many of them in for questioning. The main question was whether they were paid in cash and whether they knew where the money was coming from. As of now, no celebrity has been formally charged.

Bhupesh Baghel is a more serious name in this case. He was the Chief Minister of Chhattisgarh when the app was growing fast. His name came up in ED’s probe. On March 26, 2025, CBI searched around 60 locations including his homes in Raipur and Bhilai.

Baghel publicly called the raids politically motivated and said they were timed to serve political purposes. His role in the case is still being investigated.

The political angle makes this more than just a money laundering case. It is also a story about how illegal networks can grow when the right people look the other way.

Where Does the Case Stand in 2026?

Here is the current status of everything:

• Saurabh Chandrakar arrested in UAE in October 2024, extradition pending
• Ravi Uppal is a fugitive, Supreme Court has ordered ED to trace him
• ₹2,600 crore in assets attached across India and Dubai
• Bhupesh Baghel under investigation, CBI raids done in March 2025
• EaseMyTrip CEO Nishant Pitti has also been probed by ED
• The app came back during IPL 2026, showing the network is still alive

Why Did Mahadev App Come Back During IPL 2026?

This is the part that should worry everyone.

In April 2026, reports confirmed that Mahadev App was running again during IPL season. Bans, arrests, raids, Supreme Court orders, nothing stopped it fully.

The reason is how the network was designed. With 3,200 panels spread across India, the platform was never dependent on just two people at the top. When one operator gets caught, another picks up from where they left off. The whole thing was built to survive exactly this kind of pressure.

This is also why Ravi Uppal still being free matters so much. The architects of this system have not been fully brought to justice. And until they are, the Mahadev betting scam will keep finding ways to come back.

What This Case Is Really About

The Mahadev app case is not just about two guys running a gambling website. It is about a much bigger problem:

• Online gambling rules in India are still weak and easy to work around
• Thousands of fake KYC accounts were created without anyone catching it for years
• Hawala and crypto together make money almost untraceable
• When powerful people are involved, investigations slow down
• IPL season is peak time for illegal betting in India every single year

The case is still going on. Until Ravi Uppal is caught and extradition for Chandrakar is completed, the final chapter of this scam has not been written.

Sources: The Hindu, Moneycontrol, Times of India, Indian Express, ANI News, Tribune India, New Indian ExpressShare

FAQs

Let me be honest with you. Most of us never really think about what we share online until something goes wrong. A scam call that knew your full name. A stranger who somehow had your address. A bank account drained overnight.

That moment of “how did they get this?” is what this guide is trying to prevent.

India Has a Very Specific Problem

We are not talking about hacking in the Hollywood sense. No one is sitting in a dark room cracking codes to get into your accounts.

What is actually happening is much simpler and honestly scarier. People are freely giving away information that criminals piece together like a puzzle. Your name from Instagram. Your workplace from LinkedIn. Your phone number from a WhatsApp group. Your home locality from a food delivery review you left two years ago.

Put it all together and someone has enough to impersonate you, take a loan in your name, or clean out your UPI account.

This is the reality for Indian internet users today. And most people have no idea it is happening.

Start Here Before Anything Else

Before getting into specifics, remember just one thing.

Anything you share online can end up anywhere.

Private Instagram. Closed WhatsApp group. Snapchat with disappearing messages. Does not matter. One screenshot and it lives forever. So before posting anything, ask yourself: would I be okay if this reached a complete stranger?

If the answer is no, do not post it.

So What Information Is Safe to Share Online?

There is plenty you can put out there without any real risk. Your first name. The city you live in. Your opinions on films, cricket, food, or travel. Your professional wins on LinkedIn. Photos from a trip you already came back from. A restaurant review. A product recommendation.

None of that, on its own, can hurt you.

The problem is when you start combining things. Your first name is harmless. Your first name plus your employer plus your city plus your daily gym timing is enough for someone to find you in real life knowing exactly who you are.

So when people ask which one of these is safe to share online, the honest answer is: it depends on what else you are sharing alongside it. A single piece of information is rarely the problem. The combination is.

What Personal Information Should You Never Share Online

This is the section that actually matters. Save it. Send it to your parents. Pin it somewhere.

• Your Aadhaar number. This one gets misused more than anything else in India. With your Aadhaar, someone can get a new SIM issued in your name. With that SIM, they can reset your bank passwords and take over your accounts. You see how fast it goes.
• OTPs. Any OTP. From any service. Ever. No bank, no government office, no legitimate company will ever call you and ask for an OTP. The second someone asks for it over call or chat, you are being scammed. Hang up immediately.
• Your PAN number. Used in loan fraud and fake tax filings more than most people realize.
• Real-time location. Posting “off to Shimla for a week!” tells every person following you that your house is sitting empty. Post the holiday photos when you are back home safe.
• Your children’s details. Not their school name. Not their schedule. Not clear photos of their faces in public posts. This is non-negotiable.
• Intimate photos. Even to someone you completely trust. Relationships end. Phones get stolen. Accounts get hacked. Draw this line firmly and do not move it.
• Your full date of birth combined with your full name. Individually they seem fine. Together they are used to answer security questions and verify identity with banks and telecom providers.
• Your mother’s maiden name. This one surprises people. It is one of the most common security questions used by banks. Once someone has it, they have a key.

Is Sharing Aadhaar Card Number Online Safe?

Short answer: No. Not even close.

People share it in WhatsApp groups for housing societies, office onboarding, school admissions, and all sorts of everyday situations without thinking twice. It feels normal because everyone is doing it.

But is sharing your Aadhaar card number online safe? Absolutely not. Your 12-digit Aadhaar number is linked to your mobile number, your bank account, and your entire financial identity. In the wrong hands, it can be used to get a SIM card issued in your name, which then becomes the key to everything else.

If someone genuinely needs to verify your identity, use a masked Aadhaar instead. The UIDAI website lets you download a version that hides the first 8 digits. That is what you share, not the full card.

And if someone is asking for your Aadhaar number over WhatsApp or email for a reason that feels even slightly off, trust that feeling.

Also Read: Deepfake Scam in India: How AI Is Being Used to Cheat You

The 5 Things Indians Specifically Keep Getting Wrong

• Sending Aadhaar photos in group chats. Housing societies, office groups, school parent chats. It happens every single day and it is one of the riskiest habits on this list.
• Trusting closed groups. A Facebook group with 300 members is not a private conversation. It is a room full of people, many of whom you have never actually met. Treat it like a semi-public space.
• Filling every field in every online form. A food delivery app does not need your blood group. A loyalty card does not need your anniversary. If a field is optional, leave it blank.
• Posting travel plans before leaving. Already said it above but worth repeating because it is that common and that easy to avoid.
• Using the same photo on every platform. When your LinkedIn, Instagram, WhatsApp, and Gmail all use the same profile picture, it becomes easy to connect your identities across every platform you are on. Small change, real difference.

Platform by Platform, Quickly

• WhatsApp: Set your profile photo to contacts only. Turn off Last Seen for everyone outside your contacts. Never join groups from unknown invite links.
• Instagram: If your account has photos of your home, your kids, or your daily routine, keep it private. Avoid location tagging posts taken at or near your house.
• Facebook: Go through your friend list once a year. Remove people you would not recognize if you ran into them. Check your privacy settings every few months because they tend to reset quietly after updates.
• LinkedIn: Do not put your personal phone number on your public profile. It will be scraped by bots and sold to spammers faster than you think.

Check: WhatsApp Bans 9,400 Accounts Linked to Digital Arrest Scams: Supreme Court Told

What the Law Says, Simply Put

India’s Digital Personal Data Protection Act gives you the right to ask any company what data they hold on you and the right to ask them to delete it. Companies that leak your data now face serious penalties.

On the flip side, sharing someone else’s private information, photos, or messages without their permission is a punishable offense under the IT Act. Forwarding an intimate image of someone, even if they once sent it to you willingly, is a criminal offense under Section 67A.

Your data is protected by law. But so is your responsibility with someone else’s.

If Something Has Already Gone Wrong

First, do not panic. Then move quickly.

Delete whatever you can still delete. Change passwords on every account connected to the information that got out. If money is involved, call your bank right now and ask them to freeze transactions while you investigate.

File a complaint at cybercrime.gov.in or call 1930. That is India’s national cyber fraud helpline and it is the right first call to make.

If your Aadhaar was compromised, go to uidai.gov.in and lock your biometrics immediately. It takes two minutes and can prevent a lot of damage.

Conclusion

Being careful online does not mean being paranoid or suspicious of everyone. It just means pausing for two seconds before you share something.

Most privacy violations and scams targeting Indians do not happen through sophisticated attacks. They happen because someone shared the wrong detail with the wrong person at the wrong time, usually without even realizing it.

You now know what that looks like. That already puts you ahead of most people.

Frequently Asked Questions

A father in Pune gets a WhatsApp call. The voice on the other end is his son. Same tone. Same accent. Same way of saying “Papa.”

“Papa, I am in serious trouble. Please transfer money right now. Do not tell anyone.”

He transfers Rs 80,000 within minutes. His son calls him an hour later from his own phone. He had no idea what happened.

This is not a movie scene. This is a deepfake voice scam and it is happening across India right now.

What Exactly Is a Deepfake Scam?

A deepfake is AI generated content, a video, image or audio clip that looks or sounds completely real but never actually happened.

Scammers use this technology in three main ways:

• They clone someone’s voice from just a few seconds of audio and use it to call that person’s family members
• They create fake videos of real people, celebrities, executives, even your relatives, saying things they never said
• They use these fake voices and videos to impersonate someone you trust and convince you to send money

Here is the part most people do not realise. In 2026, an AI tool needs just 3 to 5 seconds of your voice to clone it with frightening accuracy. That audio does not have to come from somewhere obvious. A WhatsApp voice note you sent last month. A video you posted on Instagram. A call you picked up without knowing it was being recorded. Your voice is already out there in more places than you think.

How Big Is This Problem in India?

The numbers are hard to ignore.

A 2025 analysis of AI scams found that 47 percent of Indian adults have either been targeted by an AI voice cloning or deepfake scam themselves or know someone who has. That is almost double the global average of 25 percent.

Of those who were targeted, 83 percent lost money. And nearly half of them lost more than Rs 50,000 in a single scam.

In just the last three months of 2025, the Haryana Cyber Cell alone recorded over 2,300 voice cloning fraud cases. That is a 450 percent jump from the year before.

This is not something that might happen someday. It is already happening, in every city, to people of every age, including people who consider themselves careful.

How Does a Deepfake Scam Actually Work?

There are three main types of deepfake scams targeting Indians in 2026.

Type 1: AI Voice Cloning Scam (Most Common)

This is the “Papa, I am in trouble” scam described above. Here is the full process:

1. The scammer finds a voice sample of someone you trust, from social media, YouTube, or a public video
2. They feed it into an AI voice cloning tool, freely available online
3. The AI generates a clone of that voice in seconds
4. The scammer calls you using that cloned voice and creates a fake emergency
5. You panic and transfer money before verifying

This works on families, colleagues, and employees. A Mumbai CFO authorized a Rs 2.3 crore wire transfer after receiving what sounded like a call from his own CEO. The CEO was in a meeting the whole time. The voice was AI-generated.

Type 2: Deepfake Video Scam (Growing Fast)

In this version scammers create a fake video of a celebrity or trusted public figure promoting a fake investment scheme.

One of the most well known cases in India involved Ankur Warikoo, a popular personal finance educator. AI generated deepfake videos using his face, voice and likeness spread across social media and convinced his followers to join WhatsApp groups for fraudulent stock market advice. The videos looked real enough that the Delhi High Court had to step in and grant emergency relief to get them taken down.

You have probably seen similar videos yourself. Mukesh Ambani promoting a guaranteed return investment app. Narendra Modi endorsing a trading platform. Virat Kohli recommending a scheme that will double your money in 30 days.

All fake. All deepfake. None of them ever said any of it.

Type 3: Deepfake Video Call Scam (Most Dangerous)

This is the newest and most dangerous variant. The scammer joins a video call with you using a real-time AI face filter that overlays someone else’s face onto theirs.

You see the face of your boss, your bank manager, or a government official. You hear their voice. You believe it is them. And then you follow their “urgent instructions.”

In 2024, a Hong Kong company lost the equivalent of Rs 210 crore when an employee attended a video conference where every participant, including the CFO, was a deepfake. This type of attack is now reaching India.

Real Cases from India

Case 1: Indore Deepfake Kidnapping Video Scam

A family in Indore received a video call showing their relative being kidnapped. The visuals looked completely real. The caller was aggressive and demanded money immediately.

The family panicked and transferred the money.

Their relative was sitting at home, completely safe, with no idea any of this had happened. The kidnapping video was entirely AI generated. None of it was real.

Source: Indian Express

Case 2: AI Voice Clone Scam (Kanpur – Nephew Impersonation)

A man in Kanpur received a call from someone who sounded exactly like his nephew. The voice, the tone, everything matched. The caller said he was in serious trouble and needed money urgently.

The man transferred around ₹ 1 lakh without hesitating. Why would he? It sounded exactly like his nephew.

It was not. The voice had been cloned using AI and the real nephew had never made that call.

Source: Times of India

Case 3: ₹2+ Crore Digital Arrest Scam (Mangaluru)

A man in Mangaluru got a call from someone claiming to be a law enforcement official. They told him his SIM card had been linked to illegal activities and that he was under investigation. The pressure was immediate and relentless.

To clear his name, they said, he needed to transfer money.

He transferred over ₹2 crore before he realised what had happened.

Source: Economic times

How to Know If a Voice Call or Video Is Fake

This is getting harder as AI improves. But there are still signs to watch for.

For voice calls:

• The voice sounds slightly flat or emotionless, even if the words are right
• There are no background sounds, no natural pauses, no breathing
• The caller creates extreme urgency and asks you not to call back or verify
• They ask for money via UPI, crypto, or gift cards

For videos:

• The lip movements do not perfectly match the words
• The face looks slightly blurry around the edges, especially when moving
• The lighting on the face looks different from the background
• Eye blinking is unnatural or missing
• The video freezes briefly when the person turns their head

The most important sign in both cases: Someone is creating panic and asking you to act immediately without telling anyone.

What Should You Do If You Get a Deepfake Call?

If you receive a suspicious call claiming to be from a family member, colleague, or official:

1. Do not transfer any money immediately, no matter how urgent they sound
2. Hang up and call the person back on their known number directly
3. Ask a question only that person would know the answer to
4. If a video call looks suspicious, ask them to wave or blink, which trips up some AI filters
5. Report the number immediately by calling 1930

If a suspicious link was shared during the call, paste it into the ScamDekho URL Checker before clicking anything.

How Are Scammers Getting Your Voice Sample?

You might be thinking: I am not a celebrity, why would anyone clone my voice?

The answer is that scammers do not need you to be famous. They target your family members. If your child has even one Instagram Reel or YouTube Short online, that voice can be cloned.

Common sources scammers use to steal voice samples:

• Instagram Reels and Stories
• YouTube videos
• WhatsApp voice notes forwarded publicly
• LinkedIn introduction videos
• Facebook Live recordings
• Podcast appearances

This does not mean you should disappear from the internet. It means your family needs to know this threat exists.

What Is the Indian Government Doing About Deepfakes?

The government has taken some steps in 2026 worth knowing about.

New IT rules that came into effect in February 2026 now require social media platforms to remove deepfakes within 3 hours of receiving a government or court order. For non-consensual intimate imagery the window is even shorter at 2 hours.

Instagram, Facebook and YouTube are now legally required to explicitly ban AI deepfake content in their terms of service and respond to takedown requests quickly. MeitY has also issued advisories requiring platforms to inform users about AI content policies at the time of registration and login.

But here is what experts are saying honestly. Regulation cannot keep up with how fast this technology is moving. By the time a rule is written, the tools have already moved three steps ahead. Your own awareness is still your strongest protection, more than any policy or platform guideline.

How to Protect Yourself and Your Family

You cannot prevent scammers from trying. But you can make it much harder for them to succeed.

• Set a family code word. Agree on a secret word that only your family knows. If anyone calls claiming to be a family member in trouble, ask for the code word before doing anything else.
• Create a verification habit. Any request for money over a call, even from a known voice, must be followed by a callback on the person’s saved number. No exceptions.
• Limit public voice and video content. Not everything needs to be shared publicly. Consider making your social media accounts private.
• Tell your parents and elderly relatives. They are the most common targets because scammers know they trust voice recognition. One conversation about this scam could save lakhs.
• Use multi-factor authentication. For financial transactions, never rely on a phone call alone. Banks and companies should require OTP plus manager approval for large transfers

Also read: AI Voice Cloning Scam in India: How It Works and How to Stay Safe for a deeper look at voice scams specifically.

What to Do If You Already Lost Money

Act within the first hour if possible.

1. Call 1930 immediately, this is India’s cyber crime financial fraud helpline
2. File a complaint at cybercrime.gov.in with all details, the number, the amount, the UPI ID used
3. Contact your bank to freeze or reverse the transaction
4. Keep all evidence: call logs, screenshots, transaction IDs

Also check if any suspicious message or link was involved using the ScamDekho Scam Message Checker.

A Word on AI Voice Cloning Scams Specifically

Your voice is now as sensitive as your fingerprint. It can be copied, replicated, and weaponized against people who love you.

This does not mean living in fear. It means having one honest conversation with your family about how this technology works. Show them this article. Tell them about the family code word. Make a rule that no one transfers money based on a call alone, ever.

Just got a suspicious call from someone claiming to be a bank officer, CBI agent or courier company? You are in the right place.

Reporting that number takes less than 5 minutes. And the faster you do it, the better the chance of stopping that scammer from targeting someone else, or getting your money back if you have already lost some.

This guide covers every official way to report a fraud call in India in 2026, step by step.

Why Reporting a Scam Call Actually Matters

Most people hang up and move on. That is exactly what scammers are counting on.

When you report a fraud number, authorities can trace the SIM card, freeze linked bank accounts and warn others before more people get hurt. The government’s MuleHunter AI system, run by I4C, actively uses reported numbers to track criminal networks operating across India.

One report from you can lead to dozens of arrests. It takes 5 minutes.

Before You Report: Save This Evidence First

Do not call or text the fraud number back. Before you start reporting, take two minutes and gather these:

• Screenshot your call log. The number, the date, the time, all of it
• Save any SMS, WhatsApp message or link they sent you
• If money was transferred, note down the transaction details from your banking app
• Screenshot any UPI ID or account number they shared during the call

The more you have, the stronger your complaint. Now here is how to actually report it.

Method 1: Call 1930 (Fastest Option If You Lost Money)

What is it India’s official National Cyber Crime Financial Fraud Helpline, run by the Ministry of Home Affairs.

When to use it The moment you realise you have been scammed or money has been taken from your account. Speed is everything here. Calling 1930 within the first hour gives authorities the best chance to freeze the fraudster’s account before the money moves further.

How to use it

1. Dial 1930 from any phone in India
2. Tell the operator you received a fraud call or lost money to a scam
3. Share the fraud number, transaction details and your bank name
4. Note down the complaint reference number they give you

The helpline runs 24 hours a day, 7 days a week. It is free to call.

Real example A Delhi resident who lost Rs 45,000 to a fake KYC scam called 1930 within 20 minutes. The transaction was flaggtes. The transaction was flagged and the money was recovered within 3 days through the I4C system.

Method 2: File a Complaint at cybercrime.gov.in (For Detailed Complaints)

What is it The official National Cyber Crime Reporting Portal run by the Indian government.

When to use it Use this for any cyber fraud, even if no money was lost. You can report phishing calls, fake job offers, WhatsApp scams, impersonation and more.

Step by step process

1. Go to cybercrime.gov.in
2. Click on File a Complaint
3. Select Other Cyber Crimes if no financial loss, or Financial Fraud if money was taken
4. Register with your mobile number and OTP
5. Fill in the details, the fraud number, date, time, what happened and any transaction IDs
6. Upload your screenshots or any other evidence
7. Submit and save your complaint ID

You can track your complaint status using the same portal. Your complaint goes directly to the nearest cyber police station.

Method 3: Report on Chakshu Portal at sancharsaathi.gov.in (For Suspicious Calls You Did Not Fall For)

What is it Chakshu is the Department of Telecommunications’ fraud reporting tool on the Sanchar Saathi portal. It is specifically designed for reporting suspicious calls, SMS or WhatsApp messages before you become a victim.

When to use it You got a call that felt like a scam but you did not lose any money. Report it here so telecom authorities can block that number.

Step by step process

1. Go to sancharsaathi.gov.in
2. Click on Citizen Centric Services
3. Select Chakshu from the menu
4. Choose the type of communication, Call, SMS or WhatsApp
5. Select the fraud category such as impersonation of a government official, KYC fraud, fake job offer and so on
6. Enter the suspicious number and the date of the call
7. Upload a screenshot if you have one
8. Submit the complaint

Important note If you have already lost money, do not use Chakshu. Go to 1930 or cybercrime.gov.in instead. Chakshu is only for reporting suspicious activity before any financial loss happens.y before financial loss.

Method 4: File an FIR at Your Local Police Station (For Large Financial Losses)

If you lost a significant amount of money, filing an FIR gives you stronger legal standing to pursue recovery and prosecution.

What to carry

• Your Aadhaar card or any government issued ID
• Printout or screenshots of the fraud call, messages and transactions
• Bank statement showing the fraudulent debit
• Your complaint ID from cybercrime.gov.in, file this first before going to the station

Ask specifically for the cyber crime cell at your nearest police station. If they are unavailable, a regular FIR under Section 66C or 66D of the IT Act 2000 works just as well.

Method 5: Report to Your Telecom Operator Directly

Every telecom provider in India has a spam reporting mechanism. This is the quickest way to get that number blocked at the network level.

• Jio users: Dial 199 or use the MyJio app
• Airtel users: Dial 121 or use the Airtel Thanks app
• Vi users: Dial 199 or use the Vi app
• BSNL users: Dial 1503

You can also SMS SPAM followed by the fraud number to 1909. For example, SPAM 9XXXXXXXXX. This registers the number for review with TRAI within 3 days.. This registers the number for review with TRAI within 3 days.

Method 6: Report on WhatsApp Directly (If the Scam Happened on WhatsApp)

If the fraud call came via WhatsApp specifically:

1. Open the chat or call log from that number
2. Tap on the contact name at the top
3. Scroll down and tap “Report”
4. Select “Report and Block”

WhatsApp shares reported numbers with its safety team. As we saw in the recent Supreme Court case, WhatsApp has already banned 9,400 accounts in India after such reports led to network-wide investigations. Your report matters.

Read more about that crackdown here: WhatsApp Bans 9,400 Accounts Linked to Digital Arrest Scams

Not Sure If That Call Was a Scam? Check Before You Report

Sometimes you are not 100% sure if a call was genuine or fraud. Here is what to do:

If they sent you a link, paste it into the ScamDekho URL Checker before clicking anything. It will tell you in seconds whether the link is safe or known to be malicious.

If they sent you a message or WhatsApp forward, paste it into the ScamDekho Scam Message Checker to verify instantly.

These tools are free and take less than 30 seconds.

What Happens After You Report?

This is the question most people have and most guides never answer.

Here is what actually happens:

• Within hours: The 1930 helpline flags the fraud number with telecom operators. Banks linked to the scammer’s UPI ID or account are alerted.
• Within 1 to 3 days: Cyber crime police review your complaint. If strong evidence exists, they can freeze the receiving account.
• Within 1 to 4 weeks: A formal investigation may begin. You may be contacted by cyber crime police for additional details.
• Long term: Repeat fraud numbers get added to government databases like the Suspect Repository on cybercrime.gov.in. Others searching that number will see it flagged.

Also read: How Law Enforcement Investigates Cyber Scams in India to understand what happens behind the scenes after your report.

What If They Called From a +91 Number But It Felt Like a Foreign Call?

This is common. Scammers operating from outside India (often Cambodia, Myanmar, or Dubai) use VoIP technology to fake Indian mobile numbers.

In this case, you can also report on the RICWIN portal on Sanchar Saathi. It is specifically designed for reporting incoming international calls disguised as Indian numbers. This goes directly to the Department of Telecommunications for investigation.

Quick Reference: Which Method to Use

Your Situation	Best Method
Lost money just now	Call 1930 immediately
Lost money, need legal record	cybercrime.gov.in + local FIR
Got suspicious call, no money lost	Chakshu on sancharsaathi.gov.in
Scam happened on WhatsApp	Report in WhatsApp + 1930
Want to block the number at network level	SMS to 1909 or call your telecom
Got a fake UPI payment screenshot	Check on ScamDekho first

Common Mistakes People Make When Reporting

• Waiting too long before calling 1930 (every hour matters when money is involved)
• Not saving screenshots before reporting
• Using Chakshu when money was already lost (use 1930 instead)
• Blocking the number before taking a screenshot of the call log
• Filing the FIR without first getting a complaint ID from cybercrime.gov.in

Avoid these and your complaint will be processed faster.

One More Thing: Warn Others

After reporting, share the fraud number with your family and friends. A quick WhatsApp message saying “this number is a scam, do not pick up” could stop someone you care about from losing money.

Summary

If you just received a scam call, here is what to do right now:

1. Do not call back or share any information
2. Screenshot the call log and any messages
3. If money was lost: Call 1930 immediately
4. If no money lost: Report on sancharsaathi.gov.in via Chakshu
5. File a detailed complaint at cybercrime.gov.in
6. Report to your telecom provider via 1909 SMS

You have done your part. Now let the authorities do theirs.

WhatsApp has banned over 9,400 accounts connected to digital arrest scams in India. The government revealed this in front of the Supreme Court as part of ongoing suo motu proceedings against cyber fraud.

This is one of the biggest coordinated actions taken against digital arrest scammers in India so far. And if you or someone in your family has ever received a suspicious call from someone claiming to be a CBI officer or a customs official on WhatsApp, this story directly concerns you.

Here is everything you need to know, based entirely on court submissions and verified news sources.

What Happened?

In January 2026, WhatsApp launched a dedicated 12-week investigation specifically targeting digital arrest scams in India. This was done in response to inputs from the Indian Cyber Crime Coordination Centre (I4C), the Ministry of Electronics and Information Technology (MeitY), and the Department of Telecommunications (DoT).

WhatsApp followed a clear strategy for this investigation: identify seed signals, map the full criminal network, ban the entire network, and then build automated defences to prevent new accounts from doing the same thing.

The result was 9,400 accounts banned in one targeted operation.

Critically, WhatsApp went much further than what government agencies had requested. Authorities had flagged around 3,800 scam-related accounts under Section 79 of the IT Act. Of those, only 17 were directly tied to digital arrest scams. But WhatsApp treated each government input as a starting point to map and disrupt entire criminal networks, which led to the much larger ban.

As WhatsApp stated in its submission: “WhatsApp does not treat signals from investigation agencies and Government of India as isolated, one-off reports. Each signal is treated as a seed to map and disrupt the entire criminal network.”

Source: Bar and Bench

Why Is the Supreme Court Involved?

This case began in October 2025 when a senior citizen couple from India wrote directly to the Supreme Court after losing Rs 1.5 crore in just 16 days. Between September 1 and 16, 2025, scammers had called them pretending to be CBI officers, Intelligence Bureau officials and judicial authorities. They showed forged Supreme Court orders on WhatsApp video calls and threatened the couple with arrest unless they paid immediately.

The Supreme Court took suo motu cognizance of the matter. This means the Court registered the case on its own without anyone filing a formal petition. It directed the CBI to investigate the digital arrest scam network and called for coordinated action across all central government agencies.

In December 2025 the Court went further and ordered a full CBI probe specifically into digital arrest scams across India. The agency was also given authority to investigate bankers linked to mule accounts being used to route cyber fraud money.

The update shared in court today was submitted by Attorney General R. Venkataramani on behalf of I4C. It was a formal status report covering all actions taken since the Supreme Court’s last directions on February 9, 2026.

Key Numbers from the Court Submissions

These figures come directly from the government’s status report filed before the Supreme Court today:

• 9,400 WhatsApp accounts banned linked to digital arrest scams
• 2,41,000+ complaints related to digital arrest scams recorded in India
• Rs 30,000 crore in total losses reported by victims across the country
• Rs 22.92 crore lost by a single victim in one Delhi case
• Rs 1.5 crore lost by the senior citizen couple whose letter triggered the Supreme Court case
• 3 major cases re-registered by CBI, each involving losses above Rs 10 crore (two from Gujarat, one from Delhi)

Where Are These Scammers Operating From?

According to WhatsApp’s own investigation findings submitted to the court, most accounts targeting Indian users were being run from organised scam centres in Southeast Asia, particularly Cambodia.

These are not individuals acting alone. They are professional criminal operations running coordinated call centres with scripts, fake uniforms, fake government office setups, and teams working around the clock to target Indian phone numbers.

WhatsApp found that fraudsters were using display names like “Delhi Police,” “Mumbai HQ,” “CBI,” and “ATS Department,” along with official-looking logos as profile pictures to appear credible to victims.

This is also why this problem cannot be solved by Indian law enforcement alone. As WhatsApp noted in its submission, “many scams involve off-platform payment, coercion, and criminal infrastructure. WhatsApp can disrupt the accounts and networks; dismantling the underlying criminal operations requires coordinated multi-jurisdictional law enforcement action.”

Also Read: WhatsApp Wedding Invite Scam: One Tap Can Empty Your Bank

What New Technology Is WhatsApp Deploying?

Beyond just banning accounts, WhatsApp has also built new systems to detect and prevent such scams going forward. These include:

• A logo-matching system to detect accounts impersonating police or government bodies
• Logging of account display names to track scam patterns
• A large language model trained specifically to identify evolving digital arrest scam tactics
• A database of known scam assets to enable faster detection of repeat offenders

WhatsApp is also rolling out user-facing protections, including:

• Warnings for suspicious first-time messages from unknown numbers
• Visibility of account age for unknown contacts
• Suppression of profile photos in high-risk interactions
• Enhanced caller information display for unknown numbers

WhatsApp says these combined measures are expected to create a “material and observable decline” in such scams on the platform.

What Other Agencies Are Doing

The status report also covered steps being taken by other government departments:

• Department of Telecommunications: The proposed Biometric Identity Verification System for real-time SIM verification is currently at proof-of-concept stage. Full implementation is not expected before December 2026.
• Telecom operators have been directed to reduce SIM blocking time for suspicious numbers to 2 to 3 hours, since most fraudulent calls happen within the first few hours of a new SIM being activated.
• Reserve Bank of India: RBI has issued draft directions proposing that victims losing up to Rs 50,000 in fraudulent digital transactions may be compensated up to 85 per cent of the net loss or Rs 25,000, whichever is lower. This compensation would be available once per customer’s lifetime.
• Department of Revenue: No rules have yet been framed under Section 12AA of the Prevention of Money Laundering Act, 2002, which would allow banks to temporarily freeze suspicious transactions. The Department indicated that framing these rules may take 30 to 45 days.
• CBI: Three major digital arrest cases have been re-registered for deeper investigation. The Delhi case involves a single victim who lost Rs 22.92 crore.

Check: LPG Cylinder Scam on WhatsApp

What Is a Digital Arrest Scam?

If this is your first time hearing this term, here is what it means.

Scammers call you on WhatsApp video, dressed in fake police uniforms or sitting in front of what looks like a government office background. They tell you that your Aadhaar card, phone number or bank account has been linked to a serious crime like drug trafficking or money laundering.

Then they tell you that you are under digital arrest. You cannot hang up, cannot contact anyone, and will be physically arrested if you disconnect. They keep you on that call for hours, sometimes days, wearing you down until you transfer money just to make it stop.

Here is the most important thing to understand about digital arrest in India. It does not exist. There is no such thing in Indian law. No police officer, no CBI agent, no court official in India will ever call you on WhatsApp to threaten you with arrest or demand money over a video call.

If you receive a call like this, hang up immediately. It is a scam, every single time.

How to Protect Yourself

You do not need to wait for the government or WhatsApp to protect you. Here is what you can do right now:

• If you receive a WhatsApp video call from an unknown number claiming to be a police officer, CBI agent or any government official, hang up immediately. Do not engage, do not explain yourself, just hang up
• Never share your OTP, Aadhaar number, bank details or UPI PIN during any call, no matter how official the person sounds or looks
• Do not transfer money to anyone who identifies themselves as a law enforcement officer over a call. Real officers do not work this way
• Enable two-step verification on WhatsApp right now. Go to Settings, then Account, then Two-Step Verification. Takes two minutes and makes your account significantly harder to misuse
• Save 1930 in your phone contacts today. This is India’s National Cyber Crime Helpline and the first number you should call if something like this happens to you or anyone in your family.

If you receive a suspicious link on WhatsApp, do not click it. Paste it into ScamDekho’s free URL Checker to find out instantly whether it is safe or a scam.

If You Have Already Lost Money

Act immediately. Every hour matters.

1. Call 1930 right now. This is the National Cyber Crime Helpline and the fastest way to get the right people alerted
2. File a complaint at cybercrime.gov.in with all the details you have, screenshots, transaction records, the scammer’s number, everything
3. Call your bank immediately and ask them to freeze or reverse the transfer before the money moves further
4. Save everything. The scammer’s number, their account details, any screenshots from the call or chat

The Supreme Court has specifically pushed for faster response times from banks in digital arrest cases. The sooner you report, the better your chances of getting something back..

Why This News Matters

Two things stand out from today’s court proceedings.

First, the scale of the problem is enormous. Over 2.41 lakh complaints. Rs 30,000 crore in losses. A single victim in Delhi losing Rs 22.92 crore. These are not isolated incidents. This is a national crisis that is actively growing.

Second, the response is finally becoming coordinated. For the first time, WhatsApp, the CBI, RBI, DoT, MeitY, and I4C are all working together under Supreme Court supervision. That kind of multi-agency coordination has not happened before on this issue.

But even with all of this, scammers create new accounts every single day. No government action replaces personal awareness. Knowing how this scam works is the single most effective protection you have.

Share this article with your family today, especially parents and elderly relatives. One conversation could stop someone from losing everything.

You got a job offer. Or maybe someone is asking you to pay before your first day. It looks real. The logo is there. The letter has your name on it.

But is the company actually real?

Every day in India, people lose money or personal data to companies that exist only on paper or not at all. The scary part is that most victims trusted the offer because it “looked legitimate.”

This guide will show you exactly how to verify any company in India before you join, sign anything, or send a single rupee.

Why Does This Matter?

Fake company scams are not just about job offers. People get scammed when:

• A “company” sends a job offer and asks for a security deposit
• Someone sells a product or service in a company’s name that does not exist
• A recruiter collects your Aadhaar and PAN “for onboarding” and disappears
• A vendor asks for advance payment and ghosts you

The damage is not just financial. Once your documents are out, they can be used for identity fraud.

If someone is asking you to trust a company, verify it first. It takes less than 10 minutes.

Step 1: Check the Company on MCA Portal (Free and Official)

The Ministry of Corporate Affairs (MCA) maintains a public database of every registered company and LLP in India. This is your first and most important check.

Here is how to do it:

1. Go to mca.gov.in
2. Click on MCA Services in the top menu
3. Select View Company/LLP Master Data
4. Enter company name or its CIN (Corporate Identification Number)
5. Click Submit

You will see the company’s registration status, date of incorporation, registered address, director names and filing history. No account needed, no payment, nothing.

What you are looking for:

• Status should be Active. If it says “Strike Off” or “Under Process of Striking Off,” stop immediately. Do not pay, do not share documents, do not join.
• The registered address should roughly match what the company told you.
• There should be recent annual filings (MGT-7 and AOC-4). A company with no filings for years is a red flag.

Important note: This only works for Private Limited companies, Public Limited companies, and LLPs. Sole proprietorships and general partnerships are not registered on MCA. If a company claims to be a “Private Limited” but has no MCA record, that is a major warning sign.

Step 2: Verify the GST Number

Any business in India with a turnover above a certain threshold must register for GST. Most genuine businesses will have a GSTIN.

To verify:

• Go to gst.gov.in
• Click on Search Taxpayer
• Enter the GSTIN shared by the company

This will show the legal name, registration status and business type. If the details do not match what the company told you, something is off.

If a company is claiming to be a large business but has no GST registration, ask them to explain. Most genuine companies will have one.

Step 3: Check the Email Domain

This one is simple but it catches a lot of fakes.

Real companies use their own domain for email. That is just how businesses work.

• hr@infosys.com is a real company email
• infosys.hr.jobs@gmail.com is not

If someone is contacting you from a Gmail, Yahoo or Outlook address while claiming to represent a company, stop and think before you respond. It does not always mean it is a scam but it means something is worth checking.

Google the company name, find their actual website and see if the email domain matches. Takes two minutes.

Also watch out for domains that look almost right but are not. Scammers register things like tata-careers.com or infosys-hr.com specifically because they look convincing at a quick glance. Read the domain carefully every single time.al. Always check the actual official website domain.

Step 4: Look Them Up on LinkedIn

Go to LinkedIn and search for the company by name. A genuine business of any size will have a LinkedIn page with employees, a description, and some activity.

Check:

• Does the company profile exist and look active?
• Can you find the person who contacted you on LinkedIn?
• Do their work history and company connection look real?

If the “HR manager” who sent you an offer has a LinkedIn profile with no connections, a blank history, and was created last month, that is suspicious.

You can also search the name of the company on Google News to see if they have any press coverage, announcements, or complaints.

Step 5: Call the Company’s Official Number

Find the company’s phone number yourself. Go to their official website and get it from there, not from the offer letter and not from the recruiter’s message.

Then call and ask two simple questions:

• Is this person actually employed here?
• Do you have an opening for this role?

Five minutes. That is all it takes. And it catches fake offers almost every single time.immediately. Scammers cannot control calls to the real company.

Step 6: Check Glassdoor and Ambitionbox

These platforms have real employee reviews. Search the company name and see what past and current employees are saying.

Look for:

• Reviews mentioning salary not being paid
• Complaints about fake promises at the time of joining
• Warnings from other candidates who had similar experiences

No reviews at all for a company that claims to have 500 employees is itself a red flag.

You can also check platforms like Trustpilot or simply Google the company name with words like “fraud,” “fake,” or “complaint” to see if others have already flagged it.

Also Read: Matrimonial Scam in India: Fake Profiles, NRI Fraud and How to Stay Safe

Red Flags That Should Stop You Immediately

Before you verify anything else, these signs should make you stop and investigate:

• They are asking for money before you join. No genuine company in India charges candidates for joining, training, a laptop deposit, a security deposit, or anything else. This is the single biggest red flag. If money is being asked before your first working day, walk away.
• The offer came out of nowhere. You never applied. They somehow found you and are very eager to hire you. Real companies that are interested in you will always have a traceable hiring process.
• There is urgency. “Pay within 24 hours or the offer will be cancelled.” Real HR teams do not operate with this kind of pressure. This is a manipulation tactic.
• The salary is unusually high. A fresher being offered 80,000 per month for basic data entry work. Scammers use unrealistic salaries to attract attention.
• They want your documents early. Asking for Aadhaar, PAN, or bank details before you have even confirmed the job or met anyone in person is suspicious. Your documents are valuable. Share them only when you are sure the company is real.

What If You Already Paid or Shared Details?

If you already sent money:

• Call 1930 immediately. The faster you call the better the chance of freezing the transaction before it is withdrawn
• File a complaint at cybercrime.gov.in
• Call your bank and ask them to raise a dispute

If you already shared documents like Aadhaar or PAN:

• Keep a close eye on your bank accounts and credit report for anything unusual
• Lock your Aadhaar biometric temporarily on the UIDAI website
• Report the incident at cybercrime.gov.in

Read our guide on how to recover money lost in an online scam in India for detailed steps.

Quick Summary: Company Verification Checklist

Before you join or pay, check this:

• Search the company on the MCA portal. The status must show Active
• Verify their GSTIN on gst.gov.in
• Check that the recruiter’s email matches the company’s official domain
• Find the person on LinkedIn and make sure their profile looks real
• Call the company’s official number yourself and confirm the offer exists
• Look up reviews on Glassdoor or Ambitionbox
• If anyone asks for money at any point, stop everything and report it

One Rule That Never Fails

Employment is based on your skills, not your money. No real company charges you to work for them. No legitimate HR team asks for a security deposit before your joining date. No genuine recruiter needs you to pay for a background check, a training kit or an ID card.

If anyone at any point during a hiring process asks you to transfer money, pause everything. It does not matter how professional the offer letter looks, how many rounds of interviews you went through or how badly you need the job. The moment money is involved on your end, something is wrong.

Verify before you get excited. Check the company on the MCA portal. Confirm the email domain. Call the official number. Look up the recruiter on LinkedIn. Five minutes of checking can save you months of regret.

And if something feels off, trust that feeling. Not every red flag is obvious. Sometimes it is just a gut sense that something does not quite add up. Do not talk yourself out of it. Check first, join later.

A woman from Mumbai was talking to a man named Michael Williams on BharatMatrimony. He said he was from the UK. They talked every single day. He was sweet, he listened, he remembered things. After weeks of calls she genuinely felt something for him.

He told her he was coming to India to meet her.

On the day he was supposed to land her phone rang. He was panicking. Airport customs had stopped him. Too much foreign currency. He just needed her to send some money for a certificate, something called an anti-terrorist certificate, and he would be out within hours.

She sent it.

He never called again.

 ₹ 2.93 lakh. And a person she thought was real, both gone the same day. When she reached out to BharatMatrimony they told her his profile was already gone and that it had always been her responsibility to check who she was talking to.

She is not alone in this. Not even close. Someone in India is going through this exact thing right now, on some app, trusting someone who does not exist.

India lost  ₹ 22,845 crore to cyber fraud in 2024, a number the Ministry of Home Affairs shared in Parliament. Matrimonial fraud alone has shot up 206% in a year. Romance scams drain over Rs 500 crore annually. More than 12,000 complaints were filed in this one category in 2024. And that is only the people who actually told someone. Most never do because losing money hurts but telling people you fell for someone who was never real hurts differently.

If someone in your family is on BharatMatrimony, Shaadi.com, Jeevansathi or any matrimonial app, please read this carefuly.

What Is a Matrimonial Scam?

Matrimonial scams are planned. The person who made that fake profile was not confused or lonely. They knew exactly who they were looking for. Someone genuine. Someone hoping to find a life partner.

That person then spends weeks, sometimes months, just building trust. Daily messages, emotional conversations, small details that make everything feel real. The victim is not being careless. They are just responding to what feels like a real connection.

By the time money is asked for, the emotional damage is already done. Walking away at that point feels like losing a person, not avoiding a scam.

This is what makes matrimonial fraud so serious. The scammer did not exploit a mistake. They exploited sincerity. And that is a very different thing.

Who Gets Targeted?

Anyone on a matrimonial platform can be targeted, but fraudsters specifically look for:

• Women in their late 20s to 40s under family pressure to get married
• Widows or divorcees who may be emotionally vulnerable
• People from smaller cities who are less experienced with online fraud
• Families with good financial backgrounds who mention assets or property in profiles
• Men and women searching for NRI matches who may be impressed by foreign lifestyles

Delhi, Mumbai, and Bengaluru top the list of most affected cities. But Tier 2 and Tier 3 cities are increasingly targeted because awareness is lower and victims are less likely to report.

Common Types of Matrimonial Scams in India

1. The Fake NRI Groom or Bride Scam

This is the most reported type of matrimonial fraud in India. The scammer shows up as a successful NRI, based in the US, UK, Canada, or Australia. The profile looks convincing. Good English, a professional photo, a clean backstory. Doctor, engineer, businessman. Someone any family would approve of.

Weeks of conversation follow. Sometimes months. Then comes the plan to visit India, meet the family, make things official. And then something goes wrong. A medical emergency. A customs issue. A visa problem. Money is needed urgently. The victim transfers it. The scammer is gone.

In June 2025, Pune Cyber Police arrested Abhishek Shukla an Australian citizen from Lucknow, at Mumbai International Airport. He had been using the name Dr. Rohit Oberoi on Shaadi.com. His target was a 40-year-old divorced woman living in Pune’s Kharadi area. Over time, she transferred Rs. 3.6 crore across four bank accounts, including one in Citibank Singapore. She believed they were going to get married and build a business together.

When police investigated, they found Shukla had reached out to over 3,000 women using fake matrimonial profiles.

One man. Three thousand targets. One got caught.

Source: NDTV

2. The Fake Army Officer Scam

Scammers impersonate Indian Army, Navy, or Air Force officers using fake ID cards and official-looking documents. The military profession creates immediate trust. Parents feel reassured. The victim feels proud.

After building trust, the fraudster claims they need money for a transfer fee, a no-objection certificate to marry, or an urgent personal emergency. By the time the victim realizes the person was never in the military, large amounts have been transferred.

In one case uncovered by police, a family was looking for a groom for their daughter and matched with someone claiming to be an IAS officer. They even verified his profile photo. But when they searched the DoPT (Department of Personnel and Training) database, his name did not exist. He had already collected their daughter’s photographs.

3. Fake Dowry and Wedding Expense Scam

Some fraudsters go further. They actually agree to an engagement or marriage. They meet the family in person or on video call. Everything seems real.

Then they start asking for money. Venue bookings. Travel costs for relatives from abroad. Dowry discussions. “Just transfer the amount and we will settle everything after the wedding.”

Once the money is transferred, they vanish. Sometimes the entire “family” they introduced was also part of the scam.

4. The Sob Story and Emergency Scam

After weeks of emotional bonding, the scammer hits a crisis. Medical emergency. Business loss. Passport stolen. The ask is always urgent and the reason always sounds temporary. Just until we meet. Just until after the wedding.

The victim is not being foolish at this point. They are being caring. They have invested real emotion into this relationship and sending money feels like the natural thing to do for someone you love.

And it does not stop at one transfer. The crisis comes back. A new problem surfaces. Each time the victim gives, it becomes harder to accept that none of it was real. So they keep going.

In 2025, more than 10 women in Visakhapatnam lost a combined Rs. 20 lakh to NRI scammers using this exact pattern. Most of them never filed a complaint. Not because they did not know they were cheated. But because they were ashamed.

That shame is also part of the trap.

5. Fake Matrimonial Websites

In 2025, Chhattisgarh police busted a gang that had built six fake matrimonial websites from scratch. One of them was even called Indian Royal Matrimony. These were not rough, obviously fake pages. They looked legitimate enough for people to pay membership fees and hand over personal information without suspecting anything.

Behind the sites was a full call center operation. Real people calling victims, building conversations, creating relationships. The fraud was not automated. It was run like a business.

By the time the gang was arrested, over 500 people had already been cheated.

6. Document and Identity Theft

Some scammers are not after your money directly. They ask for documents instead. Aadhaar, PAN, passport copies, bank statements. The reason always sounds legitimate. Marriage paperwork. Visa formalities. Legal requirements from their side.

Once they have those documents, the damage goes far beyond the relationship. Your identity can be used to open fake bank accounts, take loans, or your information gets sold on the dark web to people you will never trace.

The financial loss from a scam can sometimes be recovered. Identity theft is a much longer and harder problem to fix.

Never share scanned copies of your personal documents with someone you have only spoken to online. No matter how long you have been talking. No matter how real it feels. Until you have met them in person and verified who they actually are, those documents stay with you.

7. Sextortion Through Matrimonial Platforms

Some scammers are not after money from day one. First comes the relationship. The trust. The late night conversations. And once that is established, things slowly shift toward personal photos or private video calls.

Then comes the threat. Send money or this goes to your family. Your office. Your contacts.

At that point the victim is not just dealing with financial loss. They are dealing with fear. Real, daily fear about their own life being used against them.

Most people in India never report this. Not because they do not know it is wrong. But because coming forward feels more dangerous than staying silent. That is exactly what the scammer wants.

If this has happened to you, understand one thing clearly. You did nothing wrong. Trusting someone is not a crime. What they did is. Call 1930 immediately and report it. The sooner you do, the better your chances of stopping them.

Warning Signs of a Matrimonial Scam

Watch for these red flags before it is too late:

• The profile looks too perfect: highly educated, great job, handsome or beautiful, living abroad
• They fall in love or get serious very quickly, within days or a week or two
• They avoid video calls or make excuses like bad internet or camera not working
• They ask about your financial situation, property, savings, or investments early on
• They always have an emergency that requires money
• They say they are coming to India but always face some problem at the last minute
• They pressure you to keep the relationship secret from family members
• Their English or communication style suddenly changes between messages
• Reverse image search on their photo shows it belongs to someone else

Also Read: Online Gaming Scams in India: Free Fire, BGMI and Roblox Frauds

How to Verify a Matrimonial Profile Before Going Further

Step 1: Do a Reverse Image Search

Save their profile photo and upload it to Google Images or TinEye. If that same photo shows up with a different name or on a stock photo site, you have your answer. This one step alone can save you from months of emotional damage.

Step 2: Video Call First

Before you get emotionally involved, ask for a live video call. Scammers will delay, make excuses, or simply refuse. If someone says they love you but cannot spare five minutes on camera, something is wrong.

Step 3: Verify Their Employer or Business

They say they are a doctor in London or an engineer in Canada. Search the company. Search their name on LinkedIn. Ask them to show their work ID on a call. Takes five minutes. A genuine person will not mind.

Step 4: Check Suspicious Links They Send

Some scammers send links to fake investment platforms, fake booking sites, or fake emergency payment portals. Before clicking any link they share, use ScamDekho’s URL Checker to verify if the link is safe.

Step 5: Check Messages for Scam Signs

If they send you messages that feel scripted, too emotional too fast, or contain requests for money or documents, check the message using ScamDekho’s Scam Message Checker before responding.

Step 6: Meet in Person With Family Present

Before any money, documents, or serious commitment, meet them in person. Take a family member along. Anyone with real intentions will understand this. Anyone who refuses should tell you everything.

Step 7: Never Transfer Money

No matter how long you have been talking or how real it feels, do not transfer money to someone you have not met in person. A genuine partner will never put you in that position.

What to Do If You Have Already Been Scammed

Do not feel ashamed. These people do this for a living. You were targeted, not stupid.

Here is what you need to do right now.

• Block them everywhere: Do not reply to anything, not even to confront them. Every response you give is another opportunity for them to manipulate you.
• Do not send more money: They will come back with a worse story or a direct threat. That is part of the plan. Do not give in.
• Call 1930: This is the national cyber crime helpline. Tell them everything. Transaction IDs, numbers, screenshots, whatever you have.
• Go to cybercrime.gov.in and file a written complaint: This creates a legal record and matters if the case goes further.
• Visit your local police station and file an FIR: Carry every proof you have. Under Bharatiya Nyaya Sanhita 2023, cheating through impersonation can lead to 7 years in prison.
• Report the profile on the platform: There is a Report Abuse option on every matrimonial site. Use it so the next person does not go through what you did.
• Call your bank: If money moved through UPI or a bank transfer, raise a fraud dispute immediately. The sooner you call, the better the chance of getting it back.

You can also read our full guide on how to recover money lost in an online scam in India for a complete step-by-step recovery process.

What Laws Apply to Matrimonial Fraud in India?

Victims have strong legal protection under Indian law:

Bharatiya Nyaya Sanhita 2023 (BNS): Cheating and impersonation through electronic means carries imprisonment of up to 7 years and heavy fines. Organized crime syndicates face enhanced penalties.

IT Act 2000, Section 66C and 66D: Identity theft and impersonation using computer resources. Up to 3 years imprisonment and Rs. 1 lakh fine.

IT Act 2000, Section 66E: Publishing private images without consent (used in sextortion cases). Up to 3 years and Rs. 2 lakh fine.

Aadhaar Act 2016: If your Aadhaar was obtained and misused through the matrimonial scam, additional charges under the Aadhaar Act apply.

How to Use Matrimonial Platforms Safely

Follow these rules every time:

• Never put your phone number or financial details in your public profile. That information does not belong there.
• Use the platform’s internal messaging system until you are genuinely confident about the person. Moving to WhatsApp too early gives them direct access to you outside any platform oversight.
• Do not share personal photos beyond what is already on your profile. Not until you have met them in person.
• Never share scanned copies of Aadhaar, PAN, passport, or bank statements with anyone you have only spoken to online. No matter how far the conversation has gone.
• Always involve a trusted family member before any major decision. A second pair of eyes catches what emotions sometimes miss.
• Trust your instincts. If something feels slightly off, do not ignore it. That feeling exists for a reason.
• Report suspicious profiles immediately even if you are not completely sure. You do not need proof to report. Let the platform investigate and decide.

Akshay Kumar recently revealed that his own daughter was targeted by scammers while playing an online game. If it can happen to a celebrity’s child, it can happen to yours too.

A 14-year-old boy from Panchkula was extorted for Rs. 4 lakh by people he met while playing an online game. A family in Ajmer lost Rs. 10.85 lakh after their child made a “friend” on Free Fire. And in Lucknow, a gang of teenagers ran a fake gaming operation that cheated over 2.5 lakh people out of Rs. 500 crore.

Online gaming scams targeting kids and teens in India are rising faster than most parents realize. Gaming frauds have gone up by 300% since 2023 according to I4C data. And 65% of Indian kids between the ages of 8 and 15 play online games daily.

This guide covers every scam type, real cases, and exactly what parents and kids need to do to stay safe.

Why Are Kids Being Targeted?

Scammers do not randomly pick victims. They specifically go after young gamers because:

• Kids are trusting by nature and less likely to question an offer
• They want to win badly and will take shortcuts for free diamonds or UC
• They have access to their parents phones, UPI apps and bank accounts
• They feel embarrassed to tell parents if something goes wrong
• They do not fully understand what sharing an OTP or password means

Most scams happen not because kids are careless, but because the traps are designed specifically for them.ss, but because the traps are designed specifically for them.

Most Common Gaming Scams Targeting

Indian Kids in 2026

1. Free Diamonds and Free UC Generator Scams

This is the most common trap. Your child is playing Free Fire or BGMI and comes across a YouTube comment, a WhatsApp forward, or an Instagram link that says something like:

“Get 10,000 Free Diamonds instantly! No survey! 100% working!”

They click it, type in their game ID, sometimes even their password. The site looks real enough. What they do not know is that it was built to steal exactly what they just typed in. Some of these sites go further and ask for an OTP to verify the diamond transfer. The moment your child shares that OTP, whoever is on the other end has access to the UPI app or bank account on that phone.

Krafton, the company behind BGMI, ran an awareness campaign in 2025 specifically because thousands of players had fallen for fake UC generator sites designed to look identical to Codashop.

2. Fake Codashop and Top-Up Sites

Codashop is a legitimate platform where players buy BGMI UC and Free Fire diamonds. Scammers build copies of it that look almost identical.

A kid searches for cheap UC India or Free Fire diamonds discount and lands on one of these fake pages. They pay via UPI. The money leaves their account and nothing arrives. Some of these sites also quietly save the UPI details and card numbers entered, and use them weeks later for transactions the family never notices until it is too late.

3. The Fake Friend Scam

This one does not happen overnight. A stranger sends a friend request on the game, on Discord, or on Instagram. They play together for days, sometimes weeks. They seem genuinely friendly. Then slowly things shift:

• They mention a special method to get free UC or diamonds
• They ask for the game account login to transfer the rewards themselves
• They ask for an OTP claiming it is needed for verification
• They start asking for small amounts of money, saying they are in trouble

In the Ajmer case from December 2025, this is exactly how it started. A friendship on Free Fire. Weeks of playing together. Then access to the family’s phone and bank account. Rs 10.85 lakh gone.

4. Fake Game Customer Support Scams

The message comes on WhatsApp or Instagram and sounds urgent:

“Your account has been flagged for suspicious activity. Share your login details within 24 hours or your account will be permanently banned.”

A kid who has spent months building their account reads that and panics. They share what is asked. The scammer gets in, takes over the account, and in many cases comes back demanding money to return it or threatening to report the account themselves.

No game company, whether it is Free Fire, BGMI or Roblox, will ever contact a player through WhatsApp or Instagram. Every real communication from these companies happens through the official app or the registered email address. Nothing else.

5. Fake Mod, Skin, and Cheat Download Scams

Kids searching for “Free Fire mod apk” or “BGMI unlimited UC hack download” end up downloading malicious files. These files infect the phone with malware that:

• Steals saved passwords
• Monitors banking apps
• Sends all OTPs to the scammer without the user knowing
• Accesses the camera and microphone

Kaspersky research shows that over 3 million attack attempts were made on young gamers through malicious mod downloads in just one year.

6. Gaming Tournament and Prize Scams

Fake tournament announcements are sent through WhatsApp groups or Instagram pages. They promise cash prizes of Rs. 50,000 or more for winning a Free Fire or BGMI tournament.

To register, kids are asked to pay a small “entry fee” of Rs. 100 to Rs. 500 via UPI. Once paid, the scammer disappears. There is no tournament. This scam runs on volume. If 1,000 kids each pay Rs. 200, the scammer makes Rs. 2 lakh in a day.

7. Roblox Robux Generator Scams

Roblox is extremely popular among kids below 14 in India. Scammers set up fake “Robux generator” sites promising free Roblox currency. These sites ask for the child’s Roblox username and password to “credit the Robux.”

Once the scammer has the login details, they take over the account and steal any Robux or rare items the child has collected. In some cases, they access the email linked to the account and use it for further fraud.

Warning Signs Your Child May Be Getting Scammed

Watch out for these red flags:

• Your child has become secretive about what they are doing on their phone
• You notice UPI transactions or bank debits you never authorized
• Your child seems anxious, scared or unusually emotional after gaming
• They keep asking for money for game items more than usual
• Their game account suddenly loses all progress or gets locked out of nowhere
• They are receiving calls or messages from unknown numbers related to gaming
• You find unfamiliar apps downloaded on your phone or theirs that nobody can explain

How to Protect Your Child: A Step-by-Step Guide for Parents

Step 1: Have an Open Conversation First

Before you set any rules or take away any devices, just talk to your child. Ask them what games they play, who they talk to online, and what kind of rewards they are chasing. Kids who feel safe talking to their parents are the ones who come to them when something feels wrong. That conversation is worth more than any parental control app.

Step 2: Disable In-App Purchases

This one is simple and takes two minutes. On Android, open Google Play Store, go to Settings and turn on purchase authentication so every transaction needs a password. On iPhone, go to Screen Time and block in-app purchases from there. Do this today before you forget.

Step 3: Never Link Your Main Bank Account to a Gaming App

If your child wants to make a legitimate purchase, set up a separate prepaid card or wallet with a small fixed amount. Your primary salary account or main UPI ID should never be anywhere near a gaming app.

Step 4: Teach Kids These Rules

Sit down with your child and go through these one by one:

• Free diamonds, free UC and free Robux do not exist. Every single site claiming otherwise is trying to steal something
• Never share your game password with anyone online, even someone you have been playing with for months
• Never share an OTP with anyone claiming to be from game support
• Real game support never reaches out on WhatsApp or Instagram. Ever
• Never download mod APKs or cheat tools from outside the official app store
• If anything feels uncomfortable or wrong, come and tell us. No scolding, no lecture, just tell us

Step 5: Check Suspicious Links Before Clicking

Your child gets a link promising free rewards or entry into a tournament. Before anyone clicks it, run it through ScamDekho’s website Checker free. Takes five seconds and could save a lot of trouble.

Step 6: Check Suspicious Messages

Someone claiming to be from BGMI or Free Fire support slides into your child’s WhatsApp or Instagram. Before your child replies or clicks anything, put that message through ScamDekho’s Scam Message Checker first.

Step 7: Enable Google Play Family Library and Parental Controls

Google Play lets you set up a family group where every purchase your child tries to make needs your approval first. Set this up on every device they use for gaming and you will never get a surprise transaction again.

What to Do If Your Child Has Already Been Scammed

Act fast. Here is exactly what to do:

Immediately:

• Call your bank or open your banking app and block the UPI ID or card that was used
• Change the passwords of every account your child may have shared, their game account, email and Google account
• Check for any apps downloaded recently and uninstall them right away

Within a few hours:

• Call 1930, India’s national cyber crime helpline. The sooner you call the better the chance of freezing the transaction before the money is withdrawn
• File a complaint on cybercrime.gov.in

Within 24 hours:

• File a formal FIR at your nearest police station
• Carry all screenshots, transaction IDs and the scammer’s contact details with you

One last thing. Do not blame your child and do not let them feel ashamed. These scams are built to fool adults too. What happened is not their fault. What matters right now is moving fast.

You can also read our complete guide on how to recover money lost in an online scam in India for a detailed recovery process.

Safe Ways to Buy In-Game Currency in India

If your child wants to buy diamonds, UC or Robux, here are the only safe ways to do it:

• Free Fire Diamonds: Only through the official Free Fire app or Garena’s official website
• BGMI UC: Only through the in-game store or the official Codashop website at codashop.com
• Roblox Robux: Only through roblox.com or through the app on Google Play or the App Store
• Google Play Gift Cards: Only from authorized retailers like Amazon, Flipkart or a physical store you trust

Never buy from individual sellers on Instagram, no matter how cheap the price looks or how many positive comments their post has. That is where most of these scams begin.

A Note for Parents

Your child is not stupid for falling for these scams. These traps are designed by adults who spend hours studying what kids want and how they think. The 14-year-old in Panchkula, the child in Ajmer, and Akshay Kumar’s daughter were all targeted by professionals at manipulation.

The best protection is not restrictions alone. It is trust. A child who knows they can come to you without being shouted at will come to you when something feels wrong. That conversation can save your family from serious financial and emotional damage.

Frequently Asked Questions

A 34 year old man from Rajasthan woke up one morning to find police at his door. It was not a one time thing. Over the next six years, law enforcement teams from 33 different states showed up at his home. FIRs worth crores of rupees in cyber fraud had been filed against him from across the country.

He had never committed a single crime.

Years earlier his email had been hacked. Inside that email were scanned copies of his Aadhaar card, PAN card and voter ID. Fraudsters used those documents to open bank accounts, register fake businesses and cheat hundreds of people across India. Everything was done in his name, with his documents, while he had no idea any of it was happening.

Six years of police visits, legal battles and a ruined reputation. All because of files sitting in a hacked email inbox.

This is what identity theft in India actually looks like. Not just financial loss. A completely innocent person’s life turned upside down while the real criminals are never found. And it can happen to anyone who has ever scanned and shared their documents online.

What Is Identity Theft?

Most people think identity theft means someone hacks into your bank account and transfers money out. That is one version of it. But honestly, it can get much worse than that.

When someone gets hold of your Aadhaar number, PAN card, phone number or date of birth, they do not need all of it. Two or three of these details together is enough for a fraudster to open a bank account in your name, apply for a loan you never asked for, or run a fake business using your identity. You find out months or years later when a recovery agent shows up at your door or an FIR gets filed against you for something you never did.

That is the part nobody talks about. The damage is not always financial. Sometimes it follows you around for years.

How Common Is Identity Theft in India?

More common than most people realize.

According to a 2025 report by U.S. cybersecurity firm Entrust, India’s PAN card is now the most-forged identity document globally, appearing in over 27% of all identity and tax document fraud cases worldwide.

In April 2025, Indian authorities uncovered a fraud ring that had exploited loopholes in UIDAI’s enrollment software to illegally update the personal and biometric data of over 1,500 Aadhaar card holders. Fraudsters changed names, birthdates, and linked phone numbers using tools like cloned iris scans and silicone fingerprints.

And it is not just targeted attacks. In one of India’s largest alleged data breaches, a hacking group claimed to have stolen records of 815 million Indian residents, including Aadhaar details, passport information, names, phone numbers, and addresses, reportedly sourced from ICMR’s Covid-19 testing database.

Your data may already be out there. The question is whether you know how to protect yourself.

How Do Fraudsters Steal Your Identity?

There is no single method. Scammers use whatever works.

1. Phishing messages and fake websites You get a message saying your KYC is expiring. The link looks real, the website looks real, and you enter your details without a second thought. That is it. The fraudster has your information and you have no idea it happened.

2. Hacked email accounts Open your sent folder right now. There is a good chance you have emailed scanned documents to a bank, an employer or an insurance company at some point. If someone gets into your email, they do not need to do anything else. Everything is already sitting there waiting for them.

3. SIM swap fraud The fraudster calls your telecom provider pretending to be you and gets a new SIM issued on your number. Your phone goes silent. They start receiving your OTPs. By the time you figure out what happened, your bank account has already been accessed.

4. Data breaches You signed up for an app or filled a form somewhere. That company got hacked. Your Aadhaar number, phone number and date of birth are now being sold on the dark web for less than the cost of a meal.

5. Fake KYC calls A calm, professional sounding person calls from what seems like your bank or UIDAI. They just need your Aadhaar number and a quick OTP for verification. They are not from your bank. They never were.

If you receive a suspicious message asking for personal details, run it through our Scam Message Checker before doing anything.

What Can Fraudsters Do With Your Identity?

Once someone has your details, here is what they can misuse:

• Open bank accounts or take loans in your name
• Apply for credit cards using your PAN and Aadhaar
• File fake GST returns or income tax refunds using your PAN
• Activate SIM cards in your name (used for scam calls)
• Create fake social media profiles to scam your contacts
• Commit crimes and leave your documents as the trail

In the Rajasthan case, investigators discovered that the victim’s documents had been used to open fraudulent bank accounts across multiple states. These accounts were used for GST-linked transactions worth crores of rupees. When victims of those scams filed complaints, the trail kept pointing back to this one innocent man’s documents.

Clearing your name after this kind of theft can take years.

Warning Signs That Your Identity Has Been Stolen

Most people find out too late. Watch out for these red flags:

• You get a loan rejection despite a clean credit history
• Unknown loans or credit card entries appear on your CIBIL report
• You receive OTPs for transactions you never initiated
• A bank account you never opened shows up linked to your Aadhaar
• Police or legal notices arrive at your address for crimes you did not commit
• Friends receive messages or calls from “you” asking for money

Check: Fake Aadhaar and PAN Update Scam: How It Works

What to Do If Your Identity Is Stolen: Step by Step

Step 1: Freeze Your Bank Accounts and Aadhaar

Call your bank first. Tell them what happened and ask for a temporary hold on all transactions.

Do not wait until you have more information. While you are at it, open the mAadhaar app and lock your biometrics. This means nobody can use your fingerprints or iris scan to authenticate anything until you unlock it yourself. You can also do this on uidai.gov.in if you do not have the app.

Step 2: Check Your Credit Report

Go to cibil.com, experian.in, equifax.in or crif.in and download your credit report. Go through it carefully and look for loans, credit cards or enquiries you never made.

Even one unfamiliar entry is worth investigating. Raise a dispute on the bureau’s website and they have to respond within 30 days by law.

Step 3: File a Complaint on cybercrime.gov.in

Go to cybercrime.gov.in and file under Other Cyber Crimes. Write down what happened as clearly as you can, attach whatever evidence you have and submit. You will get a tracking number within 48 hours and your complaint gets sent to the local cyber cell automatically.

Step 4: File an FIR at Your Local Police Station

Do not stop at the online complaint. Go to your nearest police station and file a physical FIR. Section 66C of the IT Act covers identity theft and the punishment goes up to three years in prison.

If the police say it is not their jurisdiction, tell them about Section 154 of CrPC. Any station can register a Zero FIR regardless of where the crime happened.

Step 5: Report to UIDAI and Your Telecom Provider

Aadhaar misused? Email help@uidai.gov.in or call 1947.

SIM swapped? Go to your telecom store with your ID and ask them to block the fake SIM and restore your original number on the spot.

Step 6: Inform Your Contacts

If someone created a fake profile in your name, report it to the platform. Facebook, Instagram and LinkedIn all have impersonation reporting tools. Also tell your close contacts directly so nobody sends money to someone pretending to be you.

What Laws Protect You in India?

India has clear laws that cover identity theft. Here is what you should know.

• IT Act 2000, Section 66C Someone used your Aadhaar to open a fake account? That falls under this section. Three years in prison and a Rs 1 lakh fine for whoever did it.
• IT Act 2000, Section 66D This one covers impersonation through a phone or computer. Think fake profiles, fake customer care calls, someone pretending to be you online. Most identity theft cases end up with both 66C and 66D applied together.
• Aadhaar Act 2016 Touch someone’s Aadhaar without permission and the law comes down hard. Misusing biometric data carries three years in prison. Breaking into UIDAI’s central system carries ten. These are not small penalties.
• Digital Personal Data Protection Act 2023 Here is the part most people miss. If a company lost your data because they did not protect it properly, and that data was then used to steal your identity, that company is legally responsible. You can go to the Data Protection Board and claim compensation from them directly. The burden is not yours alone to carry.

How to Protect Yourself Before It Happens

Prevention is always better than trying to fix the damage later. Here are practical steps you can take today:

• Lock your Aadhaar biometrics on the mAadhaar app when not in use. Most people do not even know this feature exists. Use it
• Never share your OTP with anyone calling you. It does not matter how official they sound. The moment someone asks for your OTP on a call, hang up
• Pull your CIBIL report every three months and look for loans you never took. Catching something early is the difference between fixing it and fighting it for years
• Stop sending scanned Aadhaar and PAN copies over WhatsApp to people you barely know. Once that image leaves your phone you have zero control over it
• Your email inbox is probably full of sensitive documents you forgot you sent. Put a strong password on it and turn on two factor authentication today
• Any message asking you to update your KYC or Aadhaar through a link is a scam. Close it and go to the official website yourself if you think something needs updating
• Before you open any link claiming to be from your bank or a government portal, paste it into our URL Checker first

Last thing. Go to your social media profiles right now and check what is publicly visible. Your date of birth, phone number and home address sitting open on your profile is all a fraudster needs to start building a case against you.er together are enough for a fraudster to start building a fake identity using your name.

Also read: How Smart People Lose Money to Scams in India

Real Case: A Six-Year Identity Theft Nightmare

A man from Rajasthan had his email hacked. Inside that inbox were scanned copies of his Aadhaar, PAN and other identity documents. The hackers used those documents to open bank accounts and run fraud operations across multiple states. All of it in his name, without him knowing any of it was happening.

Then the police started showing up at his door. FIRs from different states kept getting linked to his name. Officers who had no reason to doubt the paperwork treated him as a suspect in crimes he had never heard of, let alone committed. This went on for years.

He eventually managed to get an FIR registered that acknowledged his identity had been misused. But getting his name removed from multiple records across different states is still an ongoing process.

This is what identity theft can actually cost a person. Not just money. Years of your life spent proving you are not a criminal for something someone else did using your name.

Source: The420

Frequently Asked Questions