Digital Arrest Scams in India: How to Protect Your Family

How big is cyber fraud in India?

Very big, and growing. The digital arrest scam is the best-known face of it, but it is one of many. The Indian Cyber Crime Coordination Centre (I4C), the Home Ministry unit that runs the National Cybercrime Reporting Portal, recorded 19.19 lakh cheating-related complaints and Rs 22,849 crore in reported losses for 2024, according to figures compiled by IANS from I4C data. The same report puts 2025 at about 21.8 lakh complaints and Rs 19,813 crore. Across six years, reported losses add up to more than Rs 52,976 crore.

Those are only the cases people reported. Many victims stay silent out of shame, or because they assume the money is gone for good. The real number is almost certainly higher.

One slice of the problem has a name that sticks: the digital arrest. A Home Ministry reply in Parliament, reported by Inc42, said Indians lost Rs 1,935 crore to digital arrest scams in 2024, across about 1.23 lakh complaints. The same reply counted 60,676 such cases and Rs 339 crore in 2023, and 39,925 cases and Rs 91 crore in 2022. In two years the loss figure grew more than twenty times over.

Every digital arrest scam has the same script, which is why it can be defeated by one fact. Digital arrest is not the biggest category by money. In the 2025 breakdown reported by IANS, investment schemes made up 77 percent of losses, digital arrest 8 percent, credit card fraud 7 percent, sextortion 4 percent and e-commerce fraud 3 percent. But digital arrest does the most damage per victim and the most harm to dignity, because it works by terror.

Note on sources: figures from different years and different agencies are not always comparable. The Rs 1,935 crore digital arrest number comes from a Parliament reply, while the Rs 22,849 crore total comes from I4C data compiled by a news agency. Where a number is rounded or reported second-hand, we say so.

What is a digital arrest scam, step by step?

There is no such thing as a digital arrest in Indian law. No court, police station, CBI office, customs office or Enforcement Directorate (ED) can place anyone under arrest over a video call. That one sentence defeats the entire scam, so repeat it to everyone you know.

The fraud usually runs in the same pattern:

1. The hook. A call arrives from a number that looks official. An automated voice or a person says a parcel in your name was seized, with drugs, fake passports or cash inside. Or that your Aadhaar or SIM was used in a crime. Or that your bank account is tied to money laundering.
2. The transfer. The call is passed to a “senior officer”, often on a video call, sitting in a room made to look like a police station, with uniforms, flags and a logo.
3. The isolation. The victim is told the case is secret. They must stay on camera, may not speak to family, and may not hang up. This is the “arrest”. It can last hours or days.
4. The fear. Fake arrest warrants, fake Supreme Court orders and fake ID cards arrive on WhatsApp. The victim is told arrest, jail and public shame are minutes away.
5. The payment. To “prove innocence” or “verify the money”, the victim must move savings to a “safe” or “RBI” account. After that the callers go silent.

The method works because it attacks the thinking part of the brain. A frightened person who is told not to talk to anyone has no one to ask whether any of this is real. In the Prime Minister’s October 2024 Mann Ki Baat address, he told listeners the rule in three words: stop, think, take action.

Why do educated people fall for it?

Because the scam has nothing to do with intelligence. It is built on authority, urgency and secrecy, which are the three things that shut down doubt. Retired bank officers, doctors and professors have all lost lakhs. The difference between a victim and a non-victim is often a single phone call to a relative.

Who loses the most money?

Senior citizens and first-time digital payment users are the groups that families and banks worry about most, and the pattern is easy to see in how the scams are built.

• Retired people have lump sums from provident funds and pensions, respect for authority, and often live alone. Digital arrest scripts are tuned to these traits.
• First-time UPI users are new to the idea that a collect request is not a payment, or that a QR code scanned to “receive” money actually sends it. India’s UPI story, which we covered in how UPI became the world’s largest payment system, has brought hundreds of millions of new users online faster than any awareness drive can keep up.
• Young job seekers fall for task scams and fake part-time jobs, usually on Telegram.
• Young men and teenagers are the main targets of sextortion.
• People in smaller towns and villages have less access to a bank branch they can walk into, which we looked at in Digital India’s forgotten half. A scam victim who cannot reach anyone locally is a victim for longer.

The 2025 state data in the IANS report shows where the money is moving: Maharashtra (Rs 3,203 crore), Karnataka (Rs 2,413 crore), Tamil Nadu (Rs 1,897 crore), Uttar Pradesh (Rs 1,443 crore) and Telangana (Rs 1,372 crore). Big states with big cities top the list, but that partly reflects reporting. States with weaker reporting look safer than they are.

Public age-wise data is thin. I4C does not publish a full breakdown of victims by age in the sources used for this article, so we do not claim a percentage for elders. The pattern is clear from individual cases and police advisories, but the exact share is not.

What are the main scams besides digital arrest?

Investment and task scams

This is the biggest category by money. A stranger adds you to a WhatsApp or Telegram group full of “members” posting profits. An “expert” recommends a trading app or a stock tip. You deposit a small sum, see a gain on screen, then deposit more. When you try to withdraw, you are asked to pay “tax” or “fees”. The app is fake. The gains were numbers on a screen.

Task scams start with a small payment for liking videos or rating hotels. Victims are paid Rs 100 or 200 for the first few tasks, then asked to “invest” to unlock bigger tasks. The money is never returned. Reports from I4C-linked sources trace a large share of these operations to scam compounds in Southeast Asia, including Cambodia, Myanmar and Laos, which employ trafficked workers. Behind some of the voices on the phone are people who are victims too.

KYC and electricity-bill scams

An SMS says your bank account, SIM or electricity connection will be cut tonight unless you update KYC. A link or a number follows. The link opens a fake page that harvests your card number and OTP, or installs a remote-access app. The Department of Telecommunications has publicly warned about the electricity KYC variant.

No bank asks for your OTP, PIN, CVV or UPI PIN. Ever. No bank will ask you to install a screen-sharing app such as AnyDesk or TeamViewer.

Sextortion

A video call comes from a stranger, often a woman’s face on screen. The call is recorded. A few minutes later a message arrives: pay, or this video goes to your contacts. Teenagers and young men are the usual victims, and shame keeps them quiet. Our piece on whether India should ban social media for teens covers the wider question of how young people are exposed online. Paying does not end it. The demands grow.

If this happens to someone you know, the one thing to say is: you are not in trouble, the person doing this is committing a crime, and we are going to report it together.

E-commerce and customer-care fraud

A victim searches online for a refund or helpline number, finds a fake listing, and calls it. The “agent” asks for a small payment to confirm the account, or for remote access. Always use the number printed on the company’s own app or card.

What should I do in the first hour after being cheated?

Speed decides whether money can be recovered. Police and bankers call the first hour the golden hour, because a transfer that has not yet left the banking chain can be frozen.

1. Call 1930 at once. This is the national cyber fraud helpline, run by state police with support from I4C, the RBI, banks and payment firms. The operator records the transaction details as a ticket, and that ticket is passed to the banks and wallets involved so funds can be frozen before they are moved on. It has been operational since April 2022, replacing the earlier 155260 line.
2. Register the complaint online too. Go to the National Cybercrime Reporting Portal at cybercrime.gov.in and file a complaint under financial fraud. Keep the acknowledgement number.
3. Call your bank. Use the number on the back of your card. Ask them to block the card or account and flag the transaction as fraud.
4. Save evidence. Screenshots of chats, call logs, UPI transaction IDs, account numbers, fake IDs and links. Do not delete anything.
5. Tell someone. A family member, a friend, a neighbour. Isolation is what the scammer wants.

How well does this system work? The Home Ministry told the Rajya Sabha on 17 December 2025, as reported by All India Radio, that more than Rs 7,000 crore had been saved across more than 23 lakh complaints through the Citizen Financial Cyber Fraud Reporting and Management System since it launched in 2021. That is a large number, though it is far less than the amounts lost. The main reason is delay. A complaint made within minutes has a real chance. One made after two weeks usually does not.

What does the RBI say about your liability?

Under the RBI’s rules on limiting customer liability in unauthorised electronic transactions, a customer has zero liability if the fraud happened because of a bank or system fault, or a third-party breach where the customer reported within three working days. Reporting late reduces protection. The rule has limits: if you shared your OTP or PIN yourself, the bank may treat the loss as customer negligence, which is why scammers work so hard to get you to share them. Report fast, in writing, and keep the bank’s reference number.

What is Sanchar Saathi and the Chakshu facility?

Sanchar Saathi is the Department of Telecommunications portal (sancharsaathi.gov.in). It has three uses for ordinary people.

• Chakshu. Report a suspected fraud call, SMS or WhatsApp message before any money is lost, such as a fake KYC message or a threat of SIM disconnection. It is for suspected fraud, not for fraud that has already happened. If money is gone, call 1930.
• Check connections in your name. The portal lets you see how many mobile connections are registered on your Aadhaar and report any you do not recognise.
• Block a lost or stolen phone. Use the IMEI blocking service so the handset cannot be used.

The DoT uses crowd-sourced reports to find patterns rather than acting on each report alone. According to a March 2025 PIB release hosted on the Sanchar Saathi site, the department had by then disconnected over 3.4 crore mobile connections, blocked 3.19 lakh IMEI numbers, and blacklisted over 20,000 bulk SMS senders. Every report you make adds to that data.

How can families protect elders? A checklist

Technology will not do this alone. A weekly phone call and a house rule will do more than any app. Use this as a family checklist.

Have the talk (10 minutes, once)

• Say plainly: no police, CBI, ED, customs or court will ever arrest anyone over a video call or ask for money to clear a case.
• Agree on one rule: if anyone asks for money or secrecy, hang up and call me. Hanging up is allowed. It is not rude.
• Explain that fear and a deadline are the scam. A real case gives time, paperwork and a lawyer.
• Tell them they will never be blamed, whatever happens. Elders who fear scolding hide losses, and hidden losses cannot be frozen.

Set up the phone (30 minutes)

• Put 1930 on the home screen or as a favourite contact, with a note: “Cyber fraud helpline”.
• Turn on UPI app lock and set a daily transfer limit through the bank. A limit of a few thousand rupees stops a big drain.
• Do not keep UPI PINs written on paper next to the phone or in a notes app.
• Switch on call filtering and spam warnings in the phone’s settings. Block unknown international numbers on WhatsApp where possible.
• Remove screen-sharing apps unless the family put them there.
• Check Sanchar Saathi for any SIM connections in the elder’s name that nobody recognises.

Set up the bank (one visit)

• Register a family member’s number for SMS alerts on every account, along with the elder’s own.
• Ask for a transaction limit, and ask whether the bank can add a cooling-off period for new payees.
• Keep a separate account for daily use, with a small balance. Keep fixed deposits and savings in an account not linked to UPI.
• Add the bank’s real customer-care number to the phone’s contacts.

Make it a habit

• Hold a five-minute “scam of the month” chat on a weekly call. Share one new trick you read about.
• Ask a neighbour or a local shopkeeper to be a backup contact for an elder who lives alone.
• Keep a printed card by the phone with three lines: Hang up. Call family. Call 1930.

What works at the community and institutional level?

Families cannot carry this alone. Several approaches show promise.

• Fast freezing. The ticket-based system linking 1930 to banks is the single most useful structural fix. Its value depends on every bank joining it and responding in minutes. States that onboard banks and wallets quickly see more money saved.
• Telecom action. Cutting off fraudulent SIMs, IMEIs and bulk senders at source removes the scammer’s tools. Citizen reports through Chakshu feed this.
• Bank-side friction. Several banks now flash warnings when a first-time payee receives a large sum, or when a senior citizen’s account sees a sudden outflow. Where branch staff are trained to ask a customer who is withdrawing a large sum in cash why, frauds have been stopped on the spot.
• Neighbourhood awareness. Resident welfare associations, senior citizens’ clubs, and gram panchayats can hold short talks with real examples. A 20-minute talk with a retired bank manager does more than a pamphlet.
• Fact-checking habits. The same forwarding reflex that spreads rumours helps scams spread. We described that pattern in misinformation on WhatsApp; a forwarded “police notice” deserves the same pause as a forwarded rumour.
• Digital literacy. Teaching people what UPI can and cannot do is part of the same project as getting them online. We explored this gap in our look at the rural digital divide.

Gaps remain. Many police stations still treat cyber fraud complaints as low priority. Recovery rates are low. And the scam compounds abroad are beyond the reach of any single state police force. These need action at the national and international level, which is why India’s agreements with other countries on cybercrime cooperation matter.

What you can do

• Share the one-line rule with five people today: no agency arrests anyone on video call.
• Save 1930 in your phone and your parents’ phones.
• Report suspicious calls and messages on Chakshu even if you did not lose money. It protects the next person.
• Check on a lonely elder in your building or family. Scammers target isolation.
• If you are cheated, act within the hour, and do not hide it. Shame helps only the scammer.
• Hold the line with children and teenagers: if a stranger online threatens you with a video, tell an adult. You will not be punished.
• Ask your bank what protections it offers elders: limits, alerts, and warnings on new payees.

Frequently asked questions

Can the police arrest me over a video call?

No. Arrest under Indian law requires a physical process: a warrant or a lawful arrest by an officer in person, with the right to know the grounds and to inform a family member. No agency conducts arrests or investigations by video call, and none asks for money to close a case.

I already sent money. Is it gone?

Not necessarily. Call 1930 immediately and file at cybercrime.gov.in. Money that has not yet been withdrawn from the receiving account can be frozen. The sooner you report, the better the odds.

Will the bank refund me?

It depends on the cause and how fast you report. RBI rules give zero liability where the fault is the bank’s or a third party’s and you report within three working days. If you shared an OTP or PIN yourself, recovery through the bank is harder, but freezing through 1930 can still help.

What is the difference between 1930 and Chakshu?

1930 is for fraud that has already happened and money has moved. Chakshu on Sanchar Saathi is for reporting suspicious calls, SMS or WhatsApp messages before you lose money.

How do I know a call is fake?

Signs include urgency, secrecy, threats, a demand to stay on video, requests to move money to a “safe account”, and requests for OTPs or app installs. If you feel fear, that is the signal to hang up and call someone you trust.

Is a UPI QR code scan ever needed to receive money?

No. You never need to scan a QR code, enter a PIN, or approve a collect request to receive money. A PIN is only for sending.

The bottom line

Cyber fraud in India is now a daily risk for ordinary families, with reported losses of Rs 22,849 crore in 2024. The scams change names, but they depend on the same three levers: authority, urgency and secrecy. The defences are plain: know that no agency arrests by video call, call 1930 within the hour, report suspicious contact on Sanchar Saathi, and keep talking to each other. A scammer needs the victim to be alone. A family that talks takes that away.

Helplines: Cyber fraud 1930. Report online: cybercrime.gov.in. Report suspicious calls and messages: sancharsaathi.gov.in.