What is a Subscription Scam?
A subscription scam, sometimes called a 'subscription trap' or 'fleeceware', tricks you into signing up for a recurring payment without your full consent or understanding. It often starts with an offer that seems harmless: a short free trial for a photo
editor, a free horoscope reading, or a cheap streaming service deal advertised on social media. You enter your payment details, assuming it's for a one-time purchase or a trial you can easily cancel. Before you know it, you’re being billed a significant amount every week or month. Deleting the app doesn't stop the payments, as the subscription is tied to your account on the app store or the service provider itself.
The Scammer’s Professional Toolkit
Modern scammers are no longer lone operators; they function like tech startups. A recent phenomenon called 'Fraud-as-a-Service' (FaaS) has revolutionised cybercrime. For a small subscription fee, criminals can access entire toolkits on the dark web. These kits include everything needed to launch a scam: pre-built fake websites that mimic legitimate services, phishing email templates, and even AI-powered tools to generate personalised messages or deepfake videos. This allows someone with little technical skill to deploy a convincing and widespread scam. The operating model is eerily similar to legitimate software businesses, complete with customer support for the criminals via platforms like Telegram.
The Illusion of Professionalism
The key to these scams is their professional appearance. Scammers use what are known as 'dark patterns' in user interface design. These are intentionally confusing or misleading layouts—think pre-ticked checkboxes, hidden terms and conditions in tiny print, and impossibly complicated cancellation processes. The apps themselves often look legitimate, advertised on popular social media platforms like Instagram and TikTok to build a veneer of trust. They might have thousands of followers or a mix of five-star and one-star reviews to appear authentic. This deception makes it hard for users to distinguish a genuine service from a fleeceware trap designed to siphon their money.
Why These Scams Are So Scalable
The FaaS model makes these operations incredibly scalable. A single fraudster can target thousands of people at once using automated tools. AI can generate countless personalised phishing emails, while fake apps can be uploaded to official app stores, bypassing initial security checks. These apps often target younger, less vigilant users with themes around popular games or services. Once a scam is successful, the small recurring charges can go unnoticed for months, adding up to huge profits for the criminals. The low cost of entry (a few thousand rupees for a toolkit) and the high potential return make this an attractive criminal enterprise.
How to Protect Yourself in India
Vigilance is your best defence. Always be wary of 'free' trials that demand payment information upfront. Read the fine print carefully, especially the terms of subscription and cancellation. Only download apps from official sources like the Google Play Store or Apple's App Store, and even then, check the reviews and developer information. Regularly review your bank and credit card statements for any unfamiliar recurring charges. On your phone, you can check active subscriptions directly within your Google Play or App Store account settings and cancel anything you don't recognise. If you suspect you've been scammed, contact your bank immediately to block further payments and report the fraud on the national cybercrime helpline at 1930.
