AI scam is costing victims millions: Cybersecurity experts share tips to prevent you from becoming next victim — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: HIGH | View Full Scam Details

AI Scam Costing Millions in India 2026: How Cybercriminals Use Deepfakes and Phishing to Trick You

The rise of AI-powered scams in India is causing massive financial losses by exploiting deepfake videos and audio on WhatsApp and social media.

What Is the AI Scam Costing Victims Millions? Cybersecurity Experts Share Tips to Prevent You From Becoming the Next Victim

In 2026, Indian cybersecurity experts warn about a new phishing scam that uses artificial intelligence to create convincing fake audio and video messages. These deepfake scams are designed to trick victims into believing they’re talking to a trusted friend, family member, or colleague. By impersonating real voices or faces, scammers manipulate emotions and urgently push victims into transferring money.

This scam targets everyone across India, but fraudsters often focus on working professionals, small business owners, and senior citizens who may be less tech-savvy. With billions of Indians using WhatsApp, UPI, and social media daily, scammers have a huge playground to exploit.

According to CERT-In (Indian Computer Emergency Response Team) advisories and reports to the I4C (Indian Cyber Crime Coordination Centre), losses from AI-enabled deepfake scams in India have crossed several crores of INR in 2026 alone. The RBI has also issued cautionary notices about rising frauds involving fake caller ID and voice spoofing — two key AI-powered phishing vectors.

How This Scam Works — Step by Step

1. Information Gathering: Scammers first collect personal details from social media profiles, public records, or data breaches. They find your contacts, workplace info, and habits.

2. Creating Deepfake Content: Using AI tools, the fraudsters create convincing videos or voice clips mimicking a trusted person in your circle. For example, a fake video call from “your boss” requesting immediate payment for a new project.

3. Initial Contact via WhatsApp or Social Media: You get a message or call from a number matching your victim’s contact or from a hacked account. The deepfake audio/video appears very real.

4. Building Trust and Urgency: The scammer uses emotional triggers — fake emergencies, legal threats, or financial opportunities — to rush you into action without questioning.

5. Request for Money Transfer: You’re asked to urgently pay a vendor, send money to “help a friend in distress,” or pay a fine using UPI apps or bank transfers.

6. Money Lost Irreversibly: Once funds are transferred, scammers vanish. UPI transactions cannot be reversed easily. SIM swap or Aadhaar-linked frauds are sometimes used to intercept OTPs and authorize transactions.

7. Covering Tracks: Scammers quickly change numbers/accounts to avoid detection. Victims only realize the fraud after losing substantial money or when friends notice fake messages sent from their accounts.

Real Warning Signs to Watch For

• Unexpected urgent requests for money from friends or colleagues, especially via WhatsApp or social media DMs.
• Video or audio calls that seem “off” or slightly distorted — AI deepfakes may have subtle glitches.
• Number or account details mismatching usual contacts despite familiar names.
• Pressure to avoid delay or secrecy around transactions.
• Requests to use new or unfamiliar UPI IDs or bank details.
• Messages asking for OTPs, passwords, or Aadhaar details.
• Multiple follow-up messages pushing for immediate payment.

What Happens to Victims

Victims often lose lakhs of rupees in moments, transferred via UPI apps like Google Pay or PhonePe. Due to the instant and irreversible nature of UPI transfers, victims rarely recover funds. Fraudsters exploit Aadhaar-linked SIM swaps to intercept OTPs and authorize payments without the victim’s knowledge.

Beyond financial loss, victims suffer severe emotional distress, blame, and loss of trust in digital platforms. In rural and semi-urban India, where digital literacy is still growing, such scams deepen fears around using online banking and mobile wallets. Many victims hesitate to report the loss, fearing stigma or complicated cybercrime processes.

What RBI and CERT-In Say

The Reserve Bank of India emphasizes that no legitimate institution or person asks for OTPs, passwords, or confidential details over calls or messages. RBI’s official helpline (1800-120-1111) and CERT-In recommend verifying suspicious communications—especially those related to payments.

CERT-In has issued alerts about AI-driven scams using deepfakes and voice impersonation. The 1930 cybercrime helpline helps victims register complaints and seek guidance in India. The I4C collaborates with state cyber cells to track and stop AI-powered phishing attacks.

Both RBI and CERT-In advise users to:

• Never share OTPs or banking passwords.
• Confirm payment requests independently through trusted channels.
• Use app-based UPI transaction limits and two-factor authentication.

How to Protect Yourself

1. Always verify the requester’s identity: Call them back on known numbers, or meet in person if possible.
2. Do not trust urgent money requests that come only via WhatsApp or social media.
3. Never share OTPs, PINs, or Aadhaar details over phone or chat.
4. Use UPI PINs and transaction limits to restrict unauthorized payments.
5. Check for slight voice or video anomalies during calls — deepfakes often have glitches.
6. Enable SIM lock and Aadhaar biometric locks via UIDAI to prevent misuse.
7. Report suspicious activities immediately to your bank and cybercrime helpline (1930).

What to Do If You’ve Been Targeted

• Stop all further transactions immediately.
• Block the scammer’s number and report the incident to your bank.
• File a complaint on cybercrime.gov.in and call the 1930 cybercrime helpline.
• Visit your local police station with all evidence — chat logs, call recordings, transaction details.
• Freeze linked accounts or request your bank to monitor suspicious transactions.
• Change all passwords and enable multi-factor authentication on your devices and apps.

Frequently Asked Questions

Q: Can UPI transactions made to scammers be reversed?
A: Generally, UPI payments are instant and irreversible. However, some banks may assist if reported immediately. Always contact your bank and file a cybercrime complaint to improve chances of recovery.

Q: How can I tell if a video or voice message is a deepfake?
A: Look for unnatural pauses, mismatched lip-syncs, robotic tones, or strange lighting in videos. If something feels off, verify with the person directly before taking action.

Q: What should I do if I receive a suspicious WhatsApp message from a friend?
A: Confirm by calling the friend on their known phone number. Do not respond or click on any links until verified. Inform them in case their account is hacked.

AI scams are becoming increasingly convincing, but awareness and caution are your best defense. To verify suspicious messages or calls, always use BharatSecure.app — India's trusted platform for digital fraud prevention. Stay alert, stay safe!