Cyber fraud: After father books car on rent, man loses Rs 7 lakh — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: HIGH | View Full Scam Details

Cyber Fraud in India 2026: How a Pune Man Lost Rs 7 Lakh After Father Booked a Car Rental Using WhatsApp

Everyday online services can hide dangerous scams — like the recent phishing fraud where a man in Pune lost Rs 7 lakh after his father booked a car through a fake WhatsApp contact.

What Is the Cyber fraud: After father books car on rent, man loses Rs 7 lakh?

This scam involves fraudsters creating fake car rental ads on social media and messaging platforms, primarily WhatsApp. These ads show attractive offers and tempting prices, targeting people searching for affordable car rentals. In this case from Pune, the victim's father found a WhatsApp number online, believing it was a legitimate rental service. Unfortunately, it was a front for cybercriminals.

Scammers in India increasingly exploit the trust people place in WhatsApp and other platforms to target everyday transactions. According to CERT-In (Indian Computer Emergency Response Team) and I4C (Indian Cyber Crime Coordination Centre), phishing scams like these are becoming highly prevalent, with fraudsters adapting to new communication channels. The injury of losing Rs 7 lakh in one fell swoop shows how costly these scams can be. The RBI has also warned against sharing sensitive information or making payments without verifying vendors, especially when transactions are initiated through unofficial channels.

This scam doesn’t just target car rentals — it can be replicated with other rental services, online shopping, or ticket bookings — wherever a digital transaction happens without proper checks.

How This Scam Works — Step by Step

1. The Fake Ad Discovery: The victim’s father searches online or on social media for car rentals and spots an attractive ad offering rental cars at low prices, accompanied by professional-looking photos.

2. Contact Via WhatsApp: The ad lists a WhatsApp number. The victim’s father messages the number to book the car, initiating communication with the scammer.

3. Building Trust Through Chat: The scammer responds quickly, using polite and convincing language, sometimes sharing fake documents or license details to look authentic.

4. Payment Request: The scammer instructs an advance payment through UPI or bank transfer. They may push urgency, saying the booking will only be confirmed after immediate payment.

5. Psychological Tricks: To ensure prompt payment, the scammer might use techniques like limited availability, special discounts, or fear of missing out.

6. Loss of Money: The victim transfers Rs 7 lakh, believing the booking is secure. After payment, the scammers go silent or provide excuses while the car never arrives.

7. Realisation & Reporting: Only after the scheduled date passes do the victim and his family realise it was a scam, leading to police complaints and attempts to recover funds.

Real Warning Signs to Watch For

• Unverified WhatsApp Numbers: Numbers not linked to official websites, missing business verification badges, or new SIM cards.
• Too Good to Be True Deals: Offers significantly cheaper than market rates without credible explanations.
• No Official Website or Physical Address: Legitimate rental businesses usually have a website or verified location listings.
• Advance Payment Demands Without Agreements: Requests for large sums upfront without formal invoices or contracts.
• Poor Grammar or Informal Language in Messages: Scam messages often have inconsistent language or typos.
• Pressure Tactics: Urgency expressed over chat to close the deal quickly without proper time to verify.
• No Response on Voice Calls: Scammers often avoid calls, preferring chat-only communication.

What Happens to Victims

Victims suffer significant financial losses, with recovery often difficult under India’s current banking and cybercrime frameworks. Rs 7 lakh is a considerable sum for many families, sometimes leading to hardship or debt.

Beyond financial harm, the emotional toll is severe — feelings of betrayal, anxiety, and helplessness are common. Many face stigma when sharing their experiences.

In cases like this, even the Reserve Bank of India’s UPI system cannot reverse payments once completed. The victim may try to lodge complaints but must deal with slow bureaucratic processes.

Additionally, fraudsters may misuse stolen information to conduct Aadhaar-based identity theft or SIM-swap fraud, causing ongoing risks.

What RBI and CERT-In Say

The RBI has issued strict warnings against making payments to unknown vendors without verifying their credentials and advises verifying UPI Collect requests before approval.

CERT-In actively monitors phishing and social engineering frauds. Its advisory underscores verifying contacts through official databases, avoiding sharing sensitive personal details on WhatsApp, and never trusting unsolicited payment requests.

India’s Indian Cyber Crime Coordination Centre (I4C) supports victims by coordinating with state police and banks to track transactions and prosecute scammers.

For reporting and assistance, call the national cybercrime helpline at 1930 or the RBI customer helpline for banking frauds.

How to Protect Yourself

1. Verify the Vendor’s Identity: Use official websites, verified social media accounts, and business registration details before contacting.
2. Avoid Making Payments via WhatsApp Requests: Insist on official invoices, agreements, or bookings through trusted platforms.
3. Check for Verified WhatsApp Business Badges: Verified businesses have a green tick on their WhatsApp profile.
4. Never Share OTPs or UPI PINs: Scammers may use this to steal money directly from your accounts.
5. Use Only Trusted Rental Aggregators or Apps: Rely on well-known services with customer reviews and grievance redress systems.
6. Use RBI-Approved Payment Methods: Validate payment requests through official banking apps rather than chat links or QR codes sent via WhatsApp.
7. Report Suspicious Contacts Immediately: Use the 1930 helpline or cybercrime.gov.in to alert authorities.

What to Do If You've Been Targeted

1. Immediately Contact Your Bank: Freeze your accounts or cards, and report unauthorized transactions.
2. Report to Cybercrime Authorities: File a complaint on cybercrime.gov.in or call the 1930 cybercrime helpline.
3. Inform Your Mobile Service Provider: Prevent SIM swap fraud if you suspect your Aadhaar or mobile is compromised.
4. Change Passwords and UPI PINs: Secure online banking and payment apps promptly.
5. Preserve All Communication Evidence: Save WhatsApp chats, payment receipts, and screenshots for investigations.
6. Report to the Police: File an FIR at the nearest cybercrime cell.
7. Monitor Your Financial Accounts: Keep an eye on bank statements or credit reports for suspicious activity.

Frequently Asked Questions

Q: Can I get my money back if I paid scammers via UPI?
A: Unfortunately, UPI transactions are instant and irreversible once completed. RBI advises verifying payment requests carefully before approving. You should immediately inform your bank to attempt blocking further fraud and file a police complaint.

Q: How do I verify if a car rental service on WhatsApp is genuine?
A: Check if the WhatsApp number has a green ‘verified’ badge, look for a website or physical office, read customer reviews on trusted platforms, and never proceed with payments on first contact without proper documentation.

Q: What if I receive a suspicious message or offer on WhatsApp?
A: Do not engage or share any personal information. Report the message to BharatSecure.app and block the sender. You can also forward suspicious messages to the 1930 cybercrime helpline.

Stay safe online! If you find any suspicious messages or offers related to car rentals or other services on WhatsApp, don’t rush — verify them at BharatSecure.app before making any payments. Protect your money and your peace of mind.