AI-Driven Fake Kidnapping Calls — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: CRITICAL | View Full Scam Details

AI-Driven Fake Kidnapping Calls Scam in India 2026: How Fraudsters Target You on WhatsApp and UPI

A dangerous new cybercrime trend in India involves AI-generated fake kidnapping calls that threaten victims to siphon money via UPI and phishing scams.

What Is the AI-Driven Fake Kidnapping Calls Scam?

This scam uses artificial intelligence (AI) voices or deepfake technology to impersonate a relative or close contact, claiming that the victim’s loved one has been kidnapped. These calls typically come through WhatsApp or phone, increasing their apparent authenticity. The fraudsters pressure victims to pay ransom immediately using UPI apps, directing victims to transfer funds to fraudulent UPI IDs or scan QR codes. This scam targets primarily middle-class Indian families, especially those with elderly members unfamiliar with digital payment security.

Reports to Indian cybercrime authorities show a rapid rise in such cases across metro and tier-2 cities in early 2026. The Indian Computer Emergency Response Team (CERT-In) and the Indian Cyber Crime Coordination Centre (I4C) have flagged this as a critical threat, urging vigilance especially for WhatsApp communications. The Reserve Bank of India (RBI) has also reminded the public about safe use of UPI and cautioned against sharing UPI PINs or transaction OTPs with anyone.

How This Scam Works — Step by Step

1. Initial Contact: The victim receives a WhatsApp call or voice message, often with a manipulated voice of a family member, claiming they are kidnapped or in serious trouble.

2. Emotional Pressure: The caller uses strong emotional tactics, urging immediate action to pay ransom money to save the kidnapped person’s life, threatening harm if the victim delays.

3. UPI Payment Request: The fraudster provides a UPI ID (like us**@bank) or shares a QR code for instant payment, insisting the victim pay immediately using popular UPI apps (Google Pay, PhonePe, Paytm).

4. Phishing Link or Fake App Push: In some versions, the scammer sends a phishing link disguised as a UPI payment portal or asks the victim to install a malicious app that can capture banking details or OTPs.

5. Money Transfer and Account Hijack: Upon payment, fraudsters use captured details or leftover access to initiate more UPI transfers, sometimes performing SIM swap fraud beforehand to intercept OTPs and authenticate transactions.

6. Cutting Off Contact: Once money is transferred, the caller blocks the victim, making contact impossible and leaving the victim distraught.

Real Warning Signs to Watch For

• Urgency and Threats: Calls demand immediate payment under threat of harm, pushing you to act without thinking.
• Unknown Number or New WhatsApp Profile: The call is from a number or profile not saved in your contacts or recently created.
• Unusual Payment Method: Demands payment only through UPI apps or QR code, never bank drafts or cheques.
• Asking for UPI PIN or OTP: No legitimate agency will ask you to share your UPI PIN or OTP under any circumstances.
• Voice Sounding Odd: The person’s voice may sound distorted, robotic, or different from how you normally hear your relative.
• No Verification Offered: The fraudster refuses to connect you with the ‘kidnapped’ person or provide proof.
• Pressure via WhatsApp Only: Calls insist on communicating only over WhatsApp, avoiding phone calls to landlines or other contacts.

What Happens to Victims

Victims face severe financial loss, with hundreds of thousands of rupees lost through UPI transactions that cannot be reversed easily. Unlike banking transactions, UPI payments are instant and often irreversible unless fraud is proven promptly. Victims also suffer emotional trauma and stress, fearing for the safety of their family members.

In some cases, fraudsters use compromised Aadhaar details or perform SIM swap fraud simultaneously to hijack victims' accounts or intercept One-Time Passwords (OTPs), making recovery more difficult. Many victims feel embarrassed and hesitate to report the fraud, delaying action against the criminals.

What RBI and CERT-In Say

The Reserve Bank of India has issued warnings about “social engineering” frauds like fake kidnapping calls and phishing scams exploiting UPI’s popularity. The RBI helpline (1800-11-5678) advises users never to disclose UPI PINs or OTPs and to verify any urgent payment requests by calling the concerned family member directly.

CERT-In regularly posts advisories on emerging scams and recommends users be skeptical of unsolicited WhatsApp calls demanding urgent money. CERT-In and I4C encourage reporting all such incidents promptly through the national cybercrime portal and the 1930 helpline run by the Ministry of Home Affairs.

How to Protect Yourself

1. Verify the Caller: Independently call the relative or local police to confirm if the kidnapping claim is true.
2. Never Share PIN or OTP: Do not share UPI PIN, OTP, or login credentials with anyone, even if they claim to be police or family.
3. Use Official UPI Apps: Avoid scanning unknown QR codes or clicking on untrusted links for payments.
4. Set UPI Transaction Limits: Use your banking app to limit daily UPI transaction amounts for added security.
5. Register Complaints Early: Immediately report suspicious calls or messages to your bank and cybercrime authorities.
6. Enable 2FA on WhatsApp: Use two-factor authentication on WhatsApp to protect your account from hijacking.
7. Educate Family Members: Inform elderly relatives about this scam and guide them to confirm emergency demands through trusted contacts.

What to Do If You’ve Been Targeted

• Do Not Panic: Stay calm and stop all transactions immediately.
• Contact Your Bank: Inform your bank about the fraudulent transaction and request a block/freeze on your UPI account or linked bank account.
• Change UPI PIN: Reset your UPI PIN through official bank apps without sharing it with anyone.
• File a Cybercrime Complaint: Report the incident quickly on the cybercrime.gov.in portal or call the 1930 cybercrime helpline.
• Inform Your Mobile Operator: If you suspect SIM swap, contact your telecom provider immediately to secure your mobile number.
• Keep Evidence: Save WhatsApp chat, call logs, screenshots, and transaction receipts to assist police investigations.

Frequently Asked Questions

Q: Can I reverse a UPI payment made to a scammer during this fake kidnapping call?
A: Generally, UPI payments are instant and irreversible. However, you must immediately report the fraud to your bank and police. Banks sometimes help if fraud is reported early. File a cybercrime complaint without delay.

Q: How can I be sure if a WhatsApp call claiming kidnapping is fake or real?
A: Verify the situation by calling other family members or the police directly. Legitimate calls do not pressure you to pay instantly or ask for PINs/OTPs. Listen for robotic voices or repeated scripted messages.

Q: What steps can elderly family members take to avoid falling for this scam?
A: Educate them to not trust urgent WhatsApp calls. Instruct them to check with relatives before making any payment. Encourage them to consult younger family members for digital and payment confirmation.

For any suspicious message or call, verify at BharatSecure.app and report fraud promptly at the 1930 helpline to protect yourself and others.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.