Targets should avoid panicking and hang up.
'Disconnecting stops the scammers from building psychological pressure.'
An 86-year-old Mumbai resident was held under digital arrest for two months, during which Rs 20 crore was extorted from her, according to a recent media report.
She was accused of money laundering, forced to attend fake court proceedings online, and ordered to remain at home, with the scammers checking every three hours to ensure compliance.
How the scam operates
Fraudsters contact potential victims through calls or messages, posing as officials from the police, Criminal Investigation Department (CID), Central Bureau of Investigation (CBI), Enforcement Directorate, or the Income-Tax Department.
"Victims are accused of crimes such as money laundering, drug trafficking, cyber fraud, tax evasion," says Ranjeeth Bellary, partner, EY India forensic and integrity services - cyber forensics.
Scammers cite personal details such as Aadhaar number, Permanent Account Number (PAN), and bank information to appear credible.
Fake arrest warrants and legal notices are sent via SMS or WhatsApp.
Some use deepfake videos to replicate a police station setting.
Victims are forced to remain on video calls.
"The scammers may ask the victims to stay under digital house arrest and cut off communication with the family," says Akshay Garkel, partner, Grant Thornton Bharat.
They are threatened with arrest if they disconnect the call.
Finally, they are asked to pay to avoid arrest or coerced into revealing sensitive financial information.
Elderly individuals, who are often less aware of cyber scams, are typical targets.
Red flags
Fraudsters typically contact potential victims via online platforms.
"Genuine law enforcement officials do not arrest or investigate people via phone calls, e-mails, or social media messages," says Garkel.
Allegations are intimidating but unspecific.
"They also demand rapid compliance. Their threats escalate if the victim hesitates," says Supratim Chakraborty, partner, Khaitan & Co.
Scammers also insist on secrecy. Victims are told not to inform family or friends.
Bellary says that the reason cited for maintaining secrecy is that the case involves national security or that sharing information risks compromising the investigation.
Chakraborty informs that scammers request payments through untraceable methods like gift cards and cryptocurrencies.
Fake documents used in such scams often contain errors.
"Spelling errors, unofficial e-mail domains, and a refusal to meet in person indicate fraud," adds Garkel.
How to respond
Targets should avoid panicking and hang up if the caller appears suspicious.
"Disconnecting stops the scammers from building psychological pressure," says Prashant Mali, cyber law expert and advocate, Bombay high court.
Confronting the caller is another option.
"If the person claims to be a law enforcement officer, ask for their government-issued ID card or number.
"Also, request a copy of the summons or warrant," says Chakraborty.
If these details are not provided, treat the call as fraudulent.
"Contact the alleged agency using official numbers from their website -- police stations or CBI --- not details provided by the caller," says Mali.
Victims may also visit the local police station with a lawyer to check if there is a warrant or summons against them.
Victims should consult someone with legal or law enforcement experience to avoid isolation and seek guidance.
"Under no circumstance should any personal or financial information be shared over the phone or WhatsApp, and never transfer money online," says Bellary.
Mali recommends reporting the case to the local police or the National Cybercrime Helpline (1930 in India), providing caller details and app IDs.
Such incidents may also be reported on the National Cybercrime Portal.
Call logs, messages, and screenshots should be preserved to assist investigators.
Steps advised after falling victim to scam
- Disable online access to your phone and laptop.
- Scan devices for malicious software; remove suspicious applications.
- Contact your bank immediately to freeze accounts; deactivate debit cards; disable UPI IDs to prevent unauthorised access.
- Report unauthorised UPI payments within 72 hours to enhance chances of recovery.
- Change all login credentials.
- Report the incident at local police station, providing details like the scammer's phone number, WhatsApp account information.
- Reach out to the National Cybercrime Helpline at 1930 or submit a complaint through the National Cyber Crime Reporting Portal at cybercrime.gov.in
Disclaimer: This article is meant for information purposes only. This article and information do not constitute a distribution, an endorsement, an investment advice, an offer to buy or sell or the solicitation of an offer to buy or sell any securities/schemes or any other financial products/investment products mentioned in this article to influence the opinion or behaviour of the investors/recipients.
Any use of the information/any investment and investment related decisions of the investors/recipients are at their sole discretion and risk. Any advice herein is made on a general basis and does not take into account the specific investment objectives of the specific person or group of persons. Opinions expressed herein are subject to change without notice.
Feature Presentation: Ashish Narsale/Rediff.com
© 2025 