Pillar Guide

Scam Awareness Guide: Spot and Stop Common Frauds

India sees millions of fraud attempts every month, from fake KYC calls to elaborate digital-arrest theatrics. This guide maps the most common scam types targeting Karnataka residents, lists the red flags for each, and gives you the exact steps to take in the first hour after being defrauded.

Last updated June 12, 2026

Why scams are increasing — and who is targeted

Improved smartphone penetration, rapid growth of digital payments, and the vast amount of personal data available online have made fraud significantly easier to execute. Scammers no longer need to be present locally: call centres operating from other states and countries use scripted, professional-sounding approaches that fool even educated victims.

No one is immune. Scams targeting Karnataka residents range from sophisticated investment frauds aimed at IT professionals to simple OTP-theft calls targeting pensioners. The common thread is urgency, authority, and a small window of time — three ingredients fraudsters use to short-circuit your critical thinking.

The major scam types: how they work and how to recognise them

1. UPI collect-request and payment-link scams

A buyer, seller, or ‘well-wisher’ sends you a UPI collect request or a payment link, telling you it is for receiving money. When you enter your PIN or click approve, you are sending money, not receiving it. Commonly paired with OLX/Facebook Marketplace listings and fake refund scenarios.

Red flags: Someone asks you to ‘accept’ or ‘approve’ a request to receive money. You are asked to enter your PIN for a refund. A link arrives from an unknown number asking you to click to receive payment.

2. KYC-update fraud

A caller claims to be from your bank, NPCI, Paytm, or another financial institution and says your KYC is incomplete or expired. They say your account or wallet will be frozen unless you update immediately. They ask for Aadhaar number, PAN, OTP, or ask you to install an app.

Red flags: Caller creates urgency (‘your account will be blocked in 2 hours’). They ask for an OTP sent to your phone. They ask you to download a remote-access app. The calling number is a mobile number, not an official landline.

Warning

Banks and NPCI do not call customers to complete KYC over the phone. Any KYC update requires you to visit a branch or use the official app with biometric or video verification. A phone call asking for your OTP is always fraud.

3. OTP theft

The fraudster already has your bank account number (leaked from a data breach or bought from a data broker). They initiate a transaction and call you immediately, posing as your bank’s fraud-prevention team. They say they detected suspicious activity and need your OTP to ‘cancel’ it. Once you share the OTP, the transaction they initiated goes through.

Red flags: A caller says they need your OTP to ‘block a suspicious transaction’. The OTP arrives immediately before or after a call from an unfamiliar number. Any situation where sharing an OTP is presented as a protective action.

4. Job and work-from-home scams

An attractive job or task-based earning offer arrives on WhatsApp, Telegram, or Instagram. Initial small ‘commissions’ are paid to build trust. Then the victim is asked to pay a fee, buy a subscription, or make an ‘advance investment’ to unlock higher earnings. The money is never returned and the ’employer’ disappears.

Red flags: Unusually high earnings for simple tasks (liking YouTube videos, reviewing hotels). Hiring via WhatsApp or Telegram with no formal process. Asked to pay a deposit or buy a product upfront. No verifiable company name, GST number, or registered address.

5. OLX and classified-ad scams

Buyers or sellers on OLX and similar platforms conduct payment scams. A common variant: a ‘buyer’ sends a QR code or collect request to ‘send a token advance’, and the seller ends up paying instead of receiving. Another variant: a ‘seller’ asks for payment but sends nothing.

Red flags: Buyer insists on UPI collect request or a specific app link for payment. Buyer is from the military or stationed abroad and needs ‘extra assistance’. Price is significantly below market value. Seller asks for full payment before shipment through an informal channel.

6. Digital-arrest fraud

This scam, highlighted by the Government of India in 2024, involves callers posing as CBI officers, narcotics police, or customs officials. They tell the victim that a parcel in their name contained drugs or illegal items, or that their Aadhaar has been used in money laundering. They conduct a fake ‘online interrogation’ over video call and demand a ‘settlement payment’ to avoid arrest.

Red flags: Government officers do not conduct interrogations on WhatsApp or Skype. No legitimate agency asks for money to avoid arrest via a bank transfer. The ‘officer’ instructs you to stay on call, not to tell family, and to transfer money immediately.

Warning

There is no such thing as a ‘digital arrest’ in Indian law. No government agency has the power to detain you online. If you receive such a call, hang up and contact your local police station. In 2024, Prime Minister Narendra Modi specifically warned citizens about this scam in his ‘Mann Ki Baat’ broadcast.

7. Predatory instant loan apps

Fraudulent loan apps promise instant approval with no documents. After disbursement of a small amount, they demand high-interest repayment and begin accessing your contacts list to send threatening or embarrassing messages to your family members if payment is delayed.

Red flags: App requests permission to access contacts, photos, and messages — unrelated to loan processing. No RBI registration number shown. Interest rates are not clearly disclosed. Pressure is applied within days of disbursement. The app is available only on third-party sites, not the official Play Store listing of a recognised NBFC.

Check whether an NBFC is registered with RBI at rbi.org.in — NBFC list.
RBI’s list of authorised digital lenders is published periodically. Refer to rbi.org.in for updates.

8. Investment and ‘guaranteed returns’ fraud

Telegram or WhatsApp groups promise high returns from stock tips, crypto trading, or foreign exchange. Initial small profits are shown on a fake dashboard to build confidence. Large investments are then made by the victim before the platform disappears entirely.

Red flags: Guaranteed returns of 30–100% per month. A ‘mentor’ who appeared from nowhere on social media. A trading platform or app with no SEBI or RBI registration. Withdrawal is blocked or requires ‘tax payment’ before release.

Universal red flags across all scam types

Urgency: ‘You have two hours’, ‘your account is blocked’, ‘act now or face arrest’.
Secrecy: ‘Do not tell your family’, ‘this is a confidential matter’.
Authority: Impersonation of police, CBI, RBI, TRAI, or a bank.
OTP or PIN request: No legitimate entity will ever ask for these.
Remote access: Any request to install AnyDesk, QuickSupport, or similar.
Unusual payment channel: Crypto, gift cards, or a third-party account instead of a verifiable merchant UPI ID.

Your first hour after being scammed: the crisis checklist

Warning

Speed is critical. The faster you report, the higher the chance that funds can be frozen in the fraudster’s account before withdrawal.

Call 1930 — National Cyber Crime Financial Fraud Helpline

Dial 1930 from any phone. This helpline, operated under the Ministry of Home Affairs, connects directly to a financial-fraud response team that can flag the recipient account with the receiving bank. Have ready: your name, your bank name, the transaction ID or UTR number, the amount, the fraudster’s UPI ID or phone number, and the approximate time of the transaction.

Call your bank’s fraud helpline

Every bank has a 24-hour number. Nationalised banks: State Bank of India: 1800-11-2211 / 1800-425-3800. Canara Bank: 1800-425-0018. Bank of Baroda: 1800-5700. For private banks and fintechs, the number is printed on your card or available in the app. Ask them to raise a chargeback or fraud dispute and get a written reference number.

File a complaint on cybercrime.gov.in

Visit cybercrime.gov.in, the National Cyber Crime Reporting Portal run by the Ministry of Home Affairs. Choose ‘Report Financial Fraud’ for UPI, banking, or investment scams. You will receive a complaint acknowledgement number. Keep this number safe — you will need it at the police station.

File a complaint with your local Cyber Crime Police

In Karnataka, the Cyber Crime Police Station is active in Bengaluru and all major districts. Visit the nearest police station and ask to file under cyber crime. The Karnataka Police cyber crime portal is at ksp.karnataka.gov.in. Bring screenshots, transaction details, and any WhatsApp messages from the scammer.

Preserve all evidence

Take screenshots of every message, payment screen, and WhatsApp conversation. Note the fraudster’s UPI ID, phone number, account details if visible, and the URL of any fake website. Do not delete these — they are crucial for investigation.

Your action plan

✓ Save 1930 in your phone right now as ‘Cyber Fraud Helpline’.
✓ Save your bank’s fraud helpline number separately.
✓ Bookmark cybercrime.gov.in on your browser.
✓ Remember: no OTP, no PIN, no remote access — ever — for any caller.
✓ If you receive a ‘digital arrest’ call, hang up and call your local police station.
✓ Check RBI’s NBFC list before borrowing from any digital lending app.
✓ Teach family members, especially elders, the 1930 number and the OTP rule.
✓ If scammed: call 1930, call your bank, file on cybercrime.gov.in, then visit the police station — in that order.

Frequently Asked Questions

1930 is the National Cyber Crime Financial Fraud Helpline operated by the Ministry of Home Affairs. When you call within hours of a fraud, operators can issue an alert to the receiving bank to hold the funds. The success rate depends on how quickly you call and whether the fraudster has already withdrawn the money. Always call 1930 first, before even going to the police station.

Recovery is difficult but not impossible if you act fast. File on cybercrime.gov.in immediately and call 1930. Police have recovered money in some task-fraud cases by tracing the mule accounts used. However, once money is converted to cryptocurrency or moved abroad, recovery chances drop sharply. The main goal of fast reporting is to freeze the account before withdrawal.

Stop paying immediately and document all threatening messages. File a complaint on cybercrime.gov.in and with your state cyber crime police. Also file a complaint with the RBI's Sachet portal at sachet.rbi.org.in — this is the official portal for complaints against unauthorised financial entities. The RBI and state police have taken action against multiple predatory loan apps.

Your Aadhaar number alone is not sufficient to access your bank account, but it should still be protected. Share it only with entities explicitly authorised by UIDAI — banks, telecom providers, and government departments. Never share your Aadhaar OTP or biometric data with any third party. You can lock your Aadhaar biometrics temporarily via myAadhaar.uidai.gov.in or the mAadhaar app.

Check for an HTTPS connection (padlock icon). Look for a registered company name, GST number, and physical address. Verify financial entities against RBI or SEBI registration lists. Search the company name on the Ministry of Corporate Affairs portal mca.gov.in. For apps, check reviews and installation count on the official Play Store or App Store listing.

It is never too late to report. Even weeks after a fraud, filing a complaint on cybercrime.gov.in creates an official record that investigators can use to identify and dismantle fraud networks. While fund recovery is harder after delays, your complaint contributes to pattern detection and may protect others. File a report regardless of how much time has passed.

Stay safe online with Cyber Kannadigas

Get cyber-safety alerts, scam warnings, and digital-literacy tips for Karnataka — free, weekly.