Digital Arrest and Coercive Investigation Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: CRITICAL | View Full Scam Details

Digital Arrest and Coercive Investigation Scam in India 2026: Beware Fake UPI and WhatsApp Fraud

A new wave of critical scams hitting India in 2026 targets users via WhatsApp and UPI, tricking them into believing they are digitally “arrested” and under investigation, with fraudsters coercing victims to share OTPs and sensitive info.

What Is the Digital Arrest and Coercive Investigation Scam?

This scam involves fraudsters impersonating police officers, government officials, or cybersecurity agents claiming that the victim is under digital arrest for illegal activities like money laundering or fraud. They use WhatsApp messages or phone calls to spread panic and pressure the victim into cooperating with a so-called investigation.

The target demographic broadly includes UPI users, especially those who frequently use mobile payments or have active Aadhaar-linked bank accounts. Vulnerable groups are often unaware of the nuances of data privacy and digital security risks involved. The scam is gaining traction in India due to widespread WhatsApp use, and growing dependence on UPI payments.

According to reports submitted to CERT-In (Indian Computer Emergency Response Team) and advisories from the Ministry of Electronics and Information Technology, this scam has seen a rise since late 2025. While RBI has not issued a scam-specific advisory yet, its general guidelines on UPI transaction safety emphasize verifying unknown callers and avoiding sharing OTPs or sensitive data.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or Phone Call: The victim receives a WhatsApp message or a call from someone claiming to be an official from police, cybercrime cell, or digital investigation agency. The caller often states that the victim’s Aadhaar or bank account is linked with suspicious activities.

2. Coercive Threats: The caller alleges that the victim has been “digitally arrested” and risks heavy penalties or even imprisonment. They warn against ignoring the call, creating a sense of urgency and fear.

3. Request for Sensitive Information: To “help with the investigation,” the fraudster asks for confidential details – including OTPs received on the phone, UPI PIN, Aadhaar number, or scanned documents.

4. Manipulating Victim to Make Transactions: The victim is asked to transfer “security deposits” or “verification payments” via UPI apps. Fraudsters may also direct them to install remote access apps disguised as official tools, allowing complete access to the phone.

5. Loss Confirmation: Once the victim shares OTPs or permits transactions, fraudsters execute unauthorized UPI payments, draining bank accounts without the victim’s immediate knowledge.

6. Cutting Off Communication: After the fraud, the scammers block the victim on WhatsApp and phone lines, leaving the victim helpless.

Real Warning Signs to Watch For

• Unsolicited WhatsApp messages or calls claiming you are under digital arrest.
• Demands for OTP, UPI PIN, or Aadhaar details over calls or messages.
• Requests to make payments using UPI as “security deposits” or “investigation fees.”
• Urgency in communication, pressuring you not to inform family or police.
• Instructions to install remote-control apps or share screen access.
• Official-sounding but unverifiable phone numbers or WhatsApp accounts.
• Threats of legal action without a formal notice or police visiting your address.

What Happens to Victims

Victims face severe financial losses as fraudsters siphon funds directly from their bank accounts via UPI payments or debit transactions. Since UPI transactions are instant and mostly irreversible, the victim may struggle to recover the money.

Moreover, sharing Aadhaar and personal details exposes victims to identity theft, fraudulent loans, and SIM swap attacks, where criminals can take control of mobile numbers linked to banking apps.

Beyond financial setbacks, the emotional toll is heavy. Victims report anxiety, stress, and loss of trust in digital payment systems. In rural and semi-urban India, where digital literacy is still growing, the damage can lead to social stigma and hesitation in using digital banking further.

What RBI and CERT-In Say

RBI’s general cybersecurity advisories stress never sharing OTPs or PINs over calls or messages. They urge users to verify the identity of callers claiming to be from banks or law enforcement before taking any action.

CERT-In maintains an updated alert system reporting phishing scams including this coercive investigation variant. The Ministry of Electronics and IT recommends using the 1930 National Cyber Crime Helpline for prompt assistance in suspicious cases.

While no specific advisory mentions this scam by name yet, all these agencies emphasize vigilance, confirmatory checks, and immediate reporting to cybercrime portals like cybercrime.gov.in.

How to Protect Yourself

1. Never Share OTPs or PINs: Treat OTPs as passwords—never disclose them to anyone, even if they claim to be officials.

2. Verify Caller Identity Independently: Hang up and call official police or bank numbers from verified sources rather than using any number provided during the call.

3. Ignore Threats Via WhatsApp or SMS: Legal processes don’t happen over WhatsApp messages. Always confirm with local police.

4. Do Not Install Remote Access Apps: Avoid installing unknown applications that request control over your phone.

5. Set UPI Transaction Limits: Lower your UPI daily limit via your banking app to minimize potential losses.

6. Register Your Mobile Number with UIDAI: For Aadhaar-linked services, ensure your mobile number is registered to receive legitimate alerts directly.

7. Report Suspicious Calls to 1930 and Cybercrime Portal: Immediate reporting can help authorities track and intervene faster.

What to Do If You’ve Been Targeted

1. Stop Further Transactions: Immediately block your UPI app or bank account via banking customer support or app settings.

2. Change SIM PUK Code and Contact Bank: Inform your bank about the fraud and request a freeze on your accounts.

3. File a Complaint on cybercrime.gov.in: Submit details of the call, messages, and transactions.

4. Inform Your Mobile Operator to Prevent SIM Swap: Request a disciplinary check to prevent unauthorized SIM replacement.

5. Call the 1930 Cyber Crime Helpline: Explain your case for guided assistance.

6. Report to Local Police Cyber Cell: In addition to online reporting, physical police complaints can help address identity misuse.

7. Monitor Your Credit Score and Bank Statements: Watch for any unauthorized loans or transactions.

Frequently Asked Questions

Q: Can police arrest me digitally over WhatsApp or phone calls?
A: No. Arrests require physical action and documentation by police officers. Official procedures are not conducted via WhatsApp or phone without prior notices.

Q: What if I shared my OTP or UPI PIN by mistake?
A: Immediately contact your bank to block transactions and inform cybercrime authorities via the 1930 helpline and cybercrime.gov.in.

Q: How can I confirm the legitimacy of an official call about investigations?
A: Independently verify by calling official numbers of police stations or banks. Do not rely on numbers or links sent by the caller.

If you receive suspicious messages or calls, verify them first at BharatSecure.app and report fraud instantly at the 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.