Practical, real-world awareness on phishing, UPI fraud, fake trading apps and the scams that specifically target Indian investors.
This isn't a distant, big-city problem. Between January 2024 and June 2025, Chhattisgarh formally registered 1,301 cybercrime cases, with victims losing ₹107 crore — of which only ₹3.69 crore was ever recovered by police. 29 high-risk fraud zones have been identified across the state, with Raipur as a primary target area.
1,301 registered cases, ₹107 crore in confirmed victim losses across the state in 18 months — the figure that shows up in official police records.
A further 67,389 complaints were filed on the national NCRP portal by Chhattisgarh residents, claiming ₹791 crore in total losses — suggesting the real scale is far larger than formal cases alone capture.
Nationally, OTP and banking fraud alone drive the vast majority of an estimated ₹55,050 crore in annual losses — and scammers rely on exactly one weakness to get there: never share your OTP with anyone. Your bank will never ask for it to "block" a transaction.
The Golden Rule: legitimate authorities never rush you, and they never ask for money to "secure" your account.
A "Digital Arrest" is a theatrical performance, not a real legal process — syndicates weaponise the authority of the CBI, ED and NIA over WhatsApp or Skype video calls, using fake uniforms, forged warrants and backdrops that mimic real police stations.
Fraudsters spoof official caller IDs (CBI, Customs, TRAI) or use fake uniforms on video.
Victims receive fabricated FIRs or warrants claiming their Aadhaar or PAN is linked to money laundering.
Victims are forced onto a video call and ordered not to contact family or lawyers.
Demands to transfer funds to a "safe RBI account" to avoid immediate arrest.
Crucial note: "Digital arrest" does not exist in Indian law. No legitimate agency conducts arrests, issues warrants, or investigates over a video call — and none will ever demand a "security deposit" to prove your innocence.
₹4.4 crore — Kolkata
A 65-year-old retired bank employee was defrauded after fraudsters posed as TRAI officials, transferred the call to a fake CBI officer over WhatsApp video, and kept him under fabricated "digital surveillance."
₹5 lakh — Delhi
A retired senior citizen, Mr. Sharma, was kept on a video call for 12 hours. Scammers used his Aadhaar details and forged documents to extort his entire life savings.
₹2.10 crore — Noida-Pune
A resident was placed under fake "digital surveillance" after scammers claimed his Aadhaar was linked to terror financing. Forged RBI compliance letters were used to force him into a "forensic audit" transfer.
₹5 lakh — Mumbai (Pig Butchering)
A software engineer was groomed for weeks by a "successful trader" met on a dating app, then guided into a fake crypto platform. The early "profits" shown to him were just manual backend edits by the scammer.
₹1.29 crore — Raipur (Gul Hamza)
An account holder routed ₹1.29 crore in illegal transactions after selling his complete banking kit — ATM card, SIM and passbook — for a direct commission.
₹60.83 lakh — Raipur (Bhumika Nayak)
A single Bank of Maharashtra account, opened for just ₹1,000, was used to route over ₹60.83 lakh in fraudulent funds — later linked to victims as far away as Gujarat and Kerala.
Cybercrime relies on a physical infrastructure of "mule accounts" to launder stolen capital. Syndicates target low-income individuals to rent their banking identities — as the Gul Hamza and Bhumika Nayak cases above show — creating cross-state cybercrime corridors that move money out of sight fast.
Money is stolen via a cyber-fraud scheme and deposited into a rented "mule" account, often opened for a few hundred or thousand rupees.
Funds are rapidly siphoned via Angadiya networks — traditional, informal courier systems used to move cash outside the formal banking radar.
Or converted directly into USDT (a crypto stablecoin) and moved offshore to jurisdictions like Myanmar and Cambodia, beyond Indian law enforcement's reach.
From the case diary: "The applicant Bhumika Nayak admitted that on the inducement of one Preeti, she opened the aforesaid bank account and handed over the bank account kit... in consideration of ₹1,000, knowingly facilitating illegal transactions."
Custom APKs showing manipulated dashboard profits, then blocking withdrawals until a "release fee" is paid.
Illegal platforms offering 500x–1000x leverage on currency pairs — a FEMA 1999 violation with zero recourse.
Cloud-mining contracts and "Shitcoins" promising fixed monthly yield, funded entirely by new recruits' deposits.
Off-exchange bets recorded in private ledgers, settled entirely in cash — 100% credit default risk, zero protection.
Fake loan entries and bogus deposit schemes exploiting local trust in credit cooperative societies.
Unregistered "VIP" WhatsApp/Telegram groups promising guaranteed F&O returns — over 90% of individual F&O traders lose money.
Generative-AI videos impersonating CEOs and public figures to endorse "automated" trading bots and secret apps.
Stolen funds routed through personal accounts rented for a small fee, bypassing legitimate broker UCC accounts.
One of the most convincing versions of the fake trading app scam plays on FOMO around IPOs and block trades. Victims are pulled from social media into WhatsApp groups with names like "Investment Advisory Guru," and offered "Privileged FPI (Foreign Portfolio Investor) Access," "Pre-IPO Institutional Allotments," or "Bulk Block Trade Discounts" — access that would normally require crores in capital. The catch: resident Indians are legally barred from the FPI route entirely under SEBI Regulations, 2019. Any platform offering it is a criminal front by definition.
Victims are pushed to download an unverified APK carrying names like Modma, INSECG, CHS-SES, SAAI, SEQUOIA or GOOMI — each showing simulated dashboards with fake, massive profits.
Direct APK downloads — if it's not on the Play Store or App Store, it's malware. No Demat link — real trading requires a Demat account with NSDL/CDSL. The "withdrawal tax" — any 15–20% "release fee" demanded to withdraw gains means the money is already gone.
Unlike a quick-hit phishing message, Shā Zhū Pán — "Pig Butchering" — is a psychological marathon, run by organised syndicates over weeks, designed to "fatten" a victim before the final "slaughter."
Contact starts innocently — on dating apps like Tinder and Bumble, or professional networks like LinkedIn.
A genuine-feeling emotional bond is built over weeks, with photos of an affluent, aspirational lifestyle.
They casually mention wealth from a "proprietary" crypto algorithm and guide the victim onto a real exchange like WazirX or CoinDCX — before redirecting funds to an unverified wallet.
Once the victim has liquidated other assets to invest more, the platform blocks withdrawals and demands "clearance fees" before the scammer vanishes.
Fraudulent deposit syndicates specifically target rural and semi-urban populations by exploiting local trust in credit cooperative societies and chit funds — the two largest examples in Indian history are staggering in scale.
Founded by Vikram Singh Rajput, this society established 237+ branches across Rajasthan, Gujarat, Madhya Pradesh and Chhattisgarh, defrauding 1,46,991 investors of ₹953+ crore. Investigations revealed over 59,000 fake loan entries worth ₹1,100 crore, created to divert investor cash into private real estate ventures.
A massive collective investment scheme that duped millions of rural families across India with promises of agricultural plot allotments — one of the largest investor frauds in Indian history.
Victims of illegal deposit schemes can seek asset attachment under state Protection of Interest of Depositors (PID) Acts, and should lodge complaints directly on the RBI SACHET portal.
Promised 10% monthly Bitcoin returns via fake 18-month "cloud mining" contracts. CBI raided 60+ locations nationwide.
A fake initial coin offering for a counterfeit token, duping 900+ investors before funds were laundered into real estate.
An MLM crypto membership scheme that duped over 2 lakh victims across Odisha, Punjab and Delhi.
A parallel pattern shows up outside crypto too: the Botbro / QFX Group forex-MLM scheme promised guaranteed 5–6% monthly returns through "automated forex trading" at events in India and Dubai. No actual trading ever occurred — early investors were simply paid using new investors' money, until the Enforcement Directorate froze ₹170 crore in assets routed through shell companies like NPay Box and Capter Money Solutions, with ₹9.31 crore specifically attached across multiple states in one ED case alone. The golden rule holds here too: a 5% guaranteed monthly return is not an investment opportunity — it's a 100% guaranteed scam, since no legitimate trading strategy can mathematically sustain that payout without collapsing.
The legal backbone behind all of this: these schemes are prosecuted under the SEBI Act (1992), the Securities Contracts (Regulation) Act, 1956 — Dabba trading specifically violates Sections 13 & 16, punishable by up to 10 years' imprisonment — the Foreign Exchange Management Act, 1999 for illegal forex activity, and the Prevention of Money Laundering Act, 2002 for the layering and laundering of proceeds.
These platforms are neither registered with SEBI nor authorised by RBI under FEMA 1999 to operate in India. Operating, depositing funds, or trading on any of them exposes you to total financial loss with zero regulatory recourse.
Starnet FX, CapPlace, Mirrox, Trive, NXG Markets and Nord FX are the most recent additions — the RBI Alert List was last updated November 2025. Always verify the current list yourself before trusting any platform with your money.
*Cumulative grievances, 2023–June 2025. Source: NCRB 2024 Report & Chhattisgarh Assembly records (July 2025).
Source: Lok Sabha Reply, Ministry of Home Affairs / I4C (February 2024). India's national cybercrime aggregate in 2023 was 1.13 million cases involving ₹7,488.6 crore.
Search the entity's name on sebi.gov.in/intermediaries.html. Not listed? Stop immediately.
Download apps only from official stores and confirm SEBI's "Verified" label on Google Play.
Ensure funds go only to the designated UCC client account — never a personal account.
Markets carry risk. Any offer of guaranteed 10%+ monthly return is a scam, full stop.
Insist on digital contract notes sent directly from NSE/BSE via SMS or email.
Save Cybercrime Helpline 1930 and cybercrime.gov.in before you ever need them.
Scammers routinely hijack WhatsApp and social media accounts to impersonate you and extort your own family and friends. Locking this down is one of the highest-value, lowest-effort things you can do.
Once stolen funds leave the formal banking system for crypto or informal cash networks, they're effectively gone. Acting inside the first hour — the "Golden Hour" — is what gives banks a chance to freeze the receiving account before the trail goes cold. India's Citizen Financial Cyber Fraud Reporting system has already saved an estimated ₹11,158 crore this way.
Call 1930 immediately, then file a formal report at cybercrime.gov.in within 24 hours with your UTR number and transaction IDs.
Report illegal deposit-taking schemes and unauthorized entities at sachet.rbi.org.in.
Lodge grievances against SEBI-registered brokers or advisors at scores.sebi.gov.in.
Official banking guidelines and protection rules, straight from the source, at rbi.org.in.
Do not rely on Google searches for helpline numbers — scammers fake those too. Only trust the portals listed here.
Report the fraud to both your bank and the National Cyber Crime portal within 5 calendar days, and you may qualify for compensation covering up to 85% of your net loss (or ₹25,000 for small-value fraud) — even if you were tricked into sharing an OTP, as long as there was no intent to defraud on your part.