CBI Digital Arrest Scam with QR Codes — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Apr 30, 2026

Severity: HIGH | View Full Scam Details

Beware the CBI Digital Arrest Scam with QR Codes in India – Alert 2026

A new high-risk scam involving fake CBI digital arrest calls and fraudulent QR codes is targeting innocent Indians via WhatsApp and job offers, leading to massive UPI fraud losses.

What Is the CBI Digital Arrest Scam with QR Codes?

The CBI Digital Arrest Scam is a growing cybercrime in India where fraudsters masquerade as Central Bureau of Investigation (CBI) officials. They call or message victims claiming the person is involved in a criminal case and will be digitally “arrested” unless a fine or bail amount is paid immediately. The scammers use fake QR codes that victims scan with their UPI apps (Google Pay, PhonePe, Paytm) to transfer money directly into the fraudsters’ accounts.

This scam mainly targets working professionals, students searching for jobs, and elderly people who receive alarming messages or WhatsApp forwards. Fraudsters exploit fear of arrest and misinformation about digital arrests, which are often misunderstood. The scam has spread widely across Indian states—especially urban hubs like Delhi NCR, Mumbai, Bengaluru, and Chennai. CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have issued alerts about this growing menace, emphasizing the use of QR codes to steal UPI payments.

How This Scam Works — Step by Step

1. Initial Contact: Victims receive a WhatsApp message or phone call appearing to be from the CBI or police, stating that they are digitally “arrested” for involvement in crimes such as money laundering, fraud, or terror activities.

2. Threat and Panic: The caller insists that to avoid jail, a penalty or bail amount must be paid immediately. They mention legal consequences and encourage the victim not to share this information.

3. Sharing the QR Code: The fraudster sends a UPI QR code via WhatsApp or SMS, asking the victim to scan it using Google Pay, PhonePe, or other UPI apps to pay the fine.

4. Money Transfer: When the victim scans and pays through UPI, the money goes directly to the scammer's bank account. Since UPI transactions are often instant and irreversible, victims lose their funds immediately.

5. Continued Extortion: Some scammers pressure victims for more payments, claiming additional fees or reinvestigations.

6. No Arrest, Only Loss: The victim eventually realizes there is no legal case or arrest, only financial loss.

Real Warning Signs to Watch For

• Unsolicited calls claiming legal trouble without official paperwork. The CBI will never arrest and demand fines over a WhatsApp call.
• Urgency and threats to force immediate payment. Real law enforcement follows due legal process, not rushed money demands.
• QR codes sent by message for “instant payment.” Government agencies do not accept fines this way.
• Poor grammar and spelling errors in messages. Official agencies communicate clearly and professionally in Hindi/English.
• Requests to keep the call/message secret. Real officials won’t ask for secrecy.
• Caller ID shows random or masked numbers, not official CBI landlines.
• Pressure to transfer money via UPI immediately.

What Happens to Victims

Victims can lose thousands of rupees quickly via UPI fraud, with little chance of reversal once payments are made using QR codes. Many face emotional trauma, shame, and fear due to the false arrest claims. In some cases, fraudsters have also exploited Aadhaar details or induced victims to share OTPs, leading to SIM swap attacks and further identity misuse. Financial loss can affect credit scores and ability to access banking services, while the stress can impact mental wellbeing.

According to RBI guidelines, UPI transactions are final and usually cannot be reversed once completed, which makes prevention crucial.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) reminds users that government fines cannot be paid via random QR codes and that official payments are through prescribed channels only. RBI also advises against sharing UPI PINs or OTPs with anyone.

CERT-In has warned about increased cybercrime cases involving QR code fraud and urges users to verify the authenticity of any official communication before transacting.

For help, victims can call the 1930 National Cybercrime Reporting Helpline or reach out to RBI’s customer service helpline at 1800-112-565.

How to Protect Yourself

1. Never trust unsolicited calls or messages claiming legal action. Hang up and verify with official government websites or through known channels.
2. Do not scan QR codes sent by unknown contacts or on suspicious messages. Always use official apps or portals for payments.
3. Avoid sharing OTPs, UPI PINs, or Aadhaar details over phone or WhatsApp.
4. If alarmed by a call, contact local police or visit the nearest CBI office instead of paying.
5. Use app features to block unknown numbers and mark spam calls/messages.
6. Educate family and elderly members—particularly vulnerable to such scams—about the fraud.
7. Keep your smartphone updated and use authentic UPI apps downloaded from official app stores.

What to Do If You've Been Targeted

• Immediately stop all communication with the scammer.
• Report the incident to the nearest police station and file a cybercrime complaint online at cybercrime.gov.in.
• Call the 1930 cybercrime helpline for guidance on freezing bank accounts or blocking UPI transactions.
• Inform your bank and request urgent blocking of UPI or net banking interfaces.
• Change all related passwords, UPI PINs, and secure your Aadhaar-linked accounts.
• Notify your mobile service provider if you suspect a SIM swap attack.
• Share your experience with BharatSecure.app to help raise awareness.

Frequently Asked Questions

Q: Can the CBI arrest me digitally over a WhatsApp call or message?
No, the CBI or any Indian law enforcement agency does not arrest or collect fines over WhatsApp calls or messages. Real legal actions involve proper paperwork and court processes.

Q: What should I do if someone sends me a QR code claiming to be from CBI?
Never scan or pay using such QR codes. Instead, verify by contacting official government portals or local police and report the suspicious activity immediately.

Q: Is it possible to recover money lost via UPI QR code scams?
UPI payments are usually instant and irreversible. Though some banks may initiate investigations, recovery is difficult. Prevention and quick reporting to authorities are critical.

If you receive suspicious messages or calls claiming arrests or fines via QR codes, don’t take risks. Verify every message at BharatSecure.app — your trusted partner to fight scams and stay safe online in India.