The 'Digital Arrest' and Intimidation Scam
One of the most alarming new scams involves fraudsters impersonating officials from law enforcement agencies like the police, CBI, or Enforcement Directorate. [8] They contact victims via calls or messages, creating panic by falsely claiming a parcel,
SIM card, or bank account linked to the victim's name is involved in a crime like money laundering. [8] Using fake ID cards, arrest warrants, and video calls to appear legitimate, they pressure the victim to transfer money immediately to "settle the case" or avoid arrest. [8] This scam preys on fear and urgency, manipulating victims into making rash decisions. The key is to remember that no legitimate agency will conduct investigations or demand payment over a phone call. [8]
The Screen-Sharing KYC Update Ploy
In this sophisticated scam, fraudsters pose as bank or UPI app employees and claim your KYC (Know Your Customer) details are outdated and your account will be blocked. [8] They then guide you to download a third-party screen-sharing app like AnyDesk or TeamViewer under the guise of assisting you with the update process. [2, 5] Once you grant access, the scammer can see everything on your screen, including when you enter your UPI PIN or other sensitive credentials. [2] This gives them full access to drain your account. Remember, no bank or legitimate company will ever ask you to install a remote access app to resolve an issue. [6]
The Deceptive 'Collect Request' Fraud
This scam cleverly exploits a core UPI feature. Fraudsters send a payment *request* link, often disguised as a refund, prize money, or payment for an item you are selling online. [3, 8] The notification on your app can look confusingly similar to a payment-received notification. [8] Believing you are about to receive money, you are prompted to enter your UPI PIN to approve the transaction. However, entering your PIN for a 'collect request' does the opposite: it authorises a payment *from* your account to the scammer. [3, 8] The golden rule of UPI is simple: you never need to enter your PIN to receive money. [5, 9]
The Fake QR Code Swap
QR codes are for making payments, never for receiving them. Yet, scammers exploit this by sending you a QR code and asking you to scan it to receive money. [3, 11] Scanning the code and entering your PIN will debit your account. [11] A more creative version of this involves fraudsters physically replacing genuine QR codes at merchant locations—like small shops or ticket counters—with their own fake QR code stickers. [11] Unsuspecting customers scan the code, think they are paying the merchant, but the money is redirected to the scammer's account. Always verify the merchant's name on your UPI app screen before entering your PIN. [9]
How to Protect Yourself and What to Do If Scammed
Vigilance is your strongest defense. Never share your UPI PIN or OTP with anyone. [7] Be wary of any call or message that creates a sense of urgency or fear. [16] Do not click on unsolicited links or download apps from unknown sources. [10] If you become a victim of fraud, time is critical. Immediately call the National Cybercrime Helpline at 1930 to report the incident, which can help freeze the money trail. [5, 6] Following that, file a formal complaint on the National Cybercrime Reporting Portal (cybercrime.gov.in) and notify your bank. [6] The faster you report it, the higher the chances of recovering your funds. [8]
