Deepfake Authority Impersonation Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: CRITICAL | View Full Scam Details

Beware the Deepfake Authority Impersonation Scam in India 2026: How Cybercriminals Use Fake Videos to Trick You

The Deepfake Authority Impersonation Scam is an alarming new cyber fraud trend in India, where fake videos and voice clips of officials are used to trick victims into handing over money or sensitive data.

What Is the Deepfake Authority Impersonation Scam?

This scam uses deepfake technology — advanced AI that creates hyper-realistic fake videos or audios — to impersonate authority figures like police officers, bank managers, or HR executives from well-known companies. In India, fraudsters increasingly exploit this technique to intimidate and defraud people, making their fake videos appear almost identical to real officials. Victims are targeted mainly through WhatsApp calls or phone calls, merging social engineering with technical deception.

The primary targets include salaried employees, senior citizens, and small business owners who rely heavily on digital services like UPI payments, Aadhaar-based authentication, and mobile banking. Given the widespread use of these services across India, the scam has quickly gained traction. While there is no official public data on the number of cases yet, CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have issued general warnings about frauds involving AI-generated fakes and urge caution.

In March 2026, India’s RBI also highlighted rising incidents where scammers impersonate bank officials through deepfake calls to extract OTPs or UPI PINs, resulting in significant financial losses.

How This Scam Works — Step by Step

1. Initial Contact: The victim receives a WhatsApp call or phone call from a number pretending to be an official from the police department, bank, or employer’s HR.

2. Presentation of Deepfake Video/Audio: When the victim answers, the caller shares a video or live deepfake stream featuring an authoritative-looking person who speaks in a formal tone, often using the victim’s name and referencing recent transactions or personal details from social media.

3. Creating a Sense of Urgency: The scammer claims there is a critical issue such as a legal case against the victim, suspicious Aadhaar misuse, a fraudulent UPI transaction, or tax evasion. Immediate cooperation is demanded to “resolve the matter.”

4. Threats and Pressure: The victim is threatened with arrest, immediate freezing of bank accounts, SIM deactivation, suspension of government services like ration cards or pensions, or termination from work if they do not comply quickly.

5. Requesting Sensitive Information: The scammer asks the victim to share OTPs, UPI PINs, Aadhaar OTPs, or bank account details for "verification." Sometimes, victims are directed to download remote access apps or share screenshots of banking apps.

6. Financial Theft or Data Misuse: Using the information or remote access provided, scammers transfer money through UPI apps, fraudulently link Aadhaar to suspicious accounts, or misuse the victim's identity for loans or credit cards.

7. Cutting Off Contact: After the theft, calls stop, and requests to revert money or help disappear.

Real Warning Signs to Watch For

• Videos or voices that look too perfect but do not quite match official communication style.
• Calls coming from random or new numbers, not official helplines.
• Urgent demands to share OTPs, PINs, or personal info immediately.
• Threatening language about arrest or account freezing without formal notices.
• Requests to install apps or share screen remotely.
• References to criminal cases or Aadhaar misuse the victim has never heard of.
• Demands that the victim not discuss the matter with family or colleagues.

What Happens to Victims

Victims face immediate financial losses, often amounting to tens or lakhs of rupees withdrawn via UPI apps like Google Pay or PhonePe. Unlike bank frauds where RBI mandates reversal in genuine disputes, money sent after sharing OTPs or PINs voluntarily often cannot be recovered easily. Many also suffer from misuse of Aadhaar for new loans or SIM swaps, leading to identity theft and prolonged harassment.

Emotionally, victims experience stress, anxiety, and fear due to threatening calls and possible damage to their reputation or job. Senior citizens and those not tech-savvy are particularly vulnerable. This scam severely affects trust in digital services and often leads to lengthy police complaints and financial distress.

What RBI and CERT-In Say

While RBI has not issued a dedicated advisory for deepfake scams, it regularly warns customers not to share OTPs or banking credentials over phone calls or WhatsApp. The RBI helpline for banking fraud (Dial 1800-11-2311) is available for victims seeking assistance.

CERT-In recognizes AI-based fraud as an emerging threat and urges users to verify authenticity before sharing any personal or financial information online or over calls.

The Indian Cyber Crime Coordination Centre (I4C) encourages reporting deepfake and voice-based frauds on their portal cybercrime.gov.in. For immediate cybercrime assistance, the Government of India’s 1930 helpline is operational nationwide.

How to Protect Yourself

1. Never share OTPs, UPI PINs, or Aadhaar OTPs over phone or WhatsApp calls, even if the caller seems official.
2. Verify caller identity independently by calling official helpline numbers of police, banks, or companies.
3. Do not trust unsolicited urgent messages or videos asking for immediate action.
4. Avoid clicking on links or downloading apps shared during such calls without verification.
5. Regularly monitor bank and UPI transaction alerts for any unauthorized activity.
6. Enable two-factor authentication wherever possible and use app-based security features.
7. Educate family members, especially elderly relatives, about deepfake scams and social engineering tricks.

What to Do If You’ve Been Targeted

• Immediately block the scammer’s phone number and WhatsApp contact.
• Change all related banking and UPI passwords and disable linked devices.
• File a complaint at your local police station and provide details including phone numbers and call times.
• Report the fraud on the cybercrime.gov.in portal for official tracking.
• Call the 1930 cybercrime helpline to get advice on next steps.
• Notify your bank via the official customer care number to freeze your account or reverse suspicious transactions if possible.
• Inform the telecom provider if you suspect SIM swap or Aadhaar misuse.

Frequently Asked Questions

Q: How can I tell if a video or voice call is a deepfake?
A: Deepfake calls may seem unrealistically perfect but often have subtle glitches — unnatural lip movement, inconsistent background, robotic voice tones, or mismatch in known official IDs. Always cross-check by calling official agency numbers.

Q: Can RBI or my bank recover money stolen via deepfake scams?
A: If you shared OTPs or PINs voluntarily under pressure, recovery is difficult as these are considered authorized transactions. However, report immediately to your bank and police for chances of blocking further losses.

Q: What should I do if the scammer threatens arrest or legal action?
A: Genuine authorities will never threaten or demand personal details over WhatsApp or phone calls without formal documents. Stay calm and contact local police or legal advisers before responding.

If you receive suspicious messages or calls, verify their authenticity at BharatSecure.app and report fraud immediately at the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.