Face-Swap Video KYC Fraud via Telegram Tools — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 09, 2026

Severity: HIGH | View Full Scam Details

Face-Swap Video KYC Fraud via Telegram Tools in India 2026: Beware of This Growing UPI & WhatsApp Scam

A new high-risk cybercrime in India is exploiting face-swap video technology via Telegram to steal your identity and money through fake KYC.

What Is the Face-Swap Video KYC Fraud via Telegram Tools?

The Face-Swap Video KYC Fraud is a sophisticated scam where fraudsters use AI-based face-swapping applications available on Telegram to create deepfake videos of unsuspecting victims. These videos imitate a person performing KYC (Know Your Customer) verification in real-time, which is increasingly used by banks, fintech apps, and UPI platforms to onboard customers digitally.

This scam targets anyone who uses digital banking services and UPI apps, typically focusing on individuals who may be unfamiliar with biometric security processes. Crooks request victims’ sensitive details, including OTPs and Aadhaar information, then overlay their live video onto pre-recorded KYC sequences. The combination tricks the banks or payment apps into approving fraudulent accounts or transactions.

India has seen a rise in such cases since late 2025. The Indian Cyber Crime Coordination Centre (I4C), CERT-In, and RBI have issued alerts about deepfake fraud techniques abusing KYC processes. With Telegram being a platform of choice for fraudsters due to its encryption and large bot communities, the scam’s reach is expanding rapidly.

How This Scam Works — Step by Step

1. Initial Contact: The fraudster messages you via WhatsApp, Telegram, or even a call, claiming to be from your bank or a UPI app customer support team. They often say you must complete “new video KYC” to secure or update your account.

2. Trust Building: The scammer pressures you by citing security warnings or urgent policy changes announced by RBI or your bank — adding credibility.

3. Sharing a ‘Face-Swap’ Link: You are sent a Telegram bot link or a mobile app, masked as a legitimate KYC tool. This tool captures your facial expressions and voice, then generates a convincing deepfake video that fraudsters use to impersonate you.

4. Fake KYC Submission: Using the deepfake video, they complete KYC on a fraudulent bank or UPI account in your name.

5. Money Theft: Once created, the fraudster links your real bank account or UPI ID and performs unauthorized transactions, sometimes using SIM swap tricks to intercept OTPs.

6. Result: Victims only realise after their money is stolen or after receiving suspicious transaction alerts.

Real Warning Signs to Watch For

• Unexpected calls or WhatsApp messages asking you to complete video KYC urgently
• Receiving a Telegram link claiming to be an official KYC app or verification tool
• Requests for OTPs, Aadhaar numbers, PAN details, or bank UPI PINs during the call
• Pressure tactics saying your account will be blocked if you don’t comply immediately
• Lack of official branding or grammar mistakes in messages purportedly from banks
• Being asked to download apps from unofficial sources like Telegram bots rather than regulated RBI or bank platforms
• Notifications of multiple SIM swaps or login attempts on your mobile device

What Happens to Victims

Victims of this scam suffer heavy financial losses, mainly through UPI fraud where fraudulent transactions drain their bank accounts. Since UPI payments are instant and often irreversible, recovering money is difficult. Aadhaar misuse can also lead to identity theft, allowing crooks to open loans or credit cards in the victim’s name.

Emotionally, victims face distress, anxiety, and a loss of trust in digital banking. Many struggle to navigate India’s complex cybercrime complaint systems and feel isolated due to social stigma around online fraud.

What RBI and CERT-In Say

The Reserve Bank of India has repeatedly warned customers to never share OTPs or banking credentials and to complete KYC only through official bank portals or apps. CERT-In (Indian Computer Emergency Response Team) has listed deepfake and AI-generated identity frauds as emerging cyber threats, advising heightened vigilance.

CALL OR REPORT:

• Cybercrime Helpline 1930 operates nationwide for reporting such frauds.
• RBI’s customer helpline at 1800-112-665 is available for financial transaction disputes.
• I4C coordinates investigations on digital frauds across India.

While no single advisory names face-swap KYC fraud explicitly yet, RBI and CERT-In’s growing warnings about AI and video deepfakes signal escalating risks.

How to Protect Yourself

1. Never accept video KYC requests from unknown calls or WhatsApp messages. Verify by calling your bank’s official number first.
2. Do not click Telegram bot links or download unofficial apps claiming to do KYC. Use only verified bank or UPI app portals.
3. Keep your Aadhaar and UPI PIN confidential; never share them over phone or chat.
4. Be suspicious of urgent or threatening language demanding immediate action.
5. Regularly monitor your bank and UPI transaction history for unauthorized payments.
6. Set up SMS and app alerts on your mobile to track activities like SIM changes or new logins.
7. Report and block any suspicious contacts immediately on WhatsApp and Telegram.

What to Do If You’ve Been Targeted

1. Immediately call your bank or UPI app customer care to freeze your account or block UPI payments.
2. Report the fraud to the Cybercrime Helpline 1930 and file a complaint at cybercrime.gov.in.
3. Inform your mobile operator if you suspect a SIM swap and request a SIM block.
4. Change all related passwords, including Aadhaar-linked services, and enable two-factor authentication.
5. Keep evidence of all communications, messages, or links you received, as it will help investigators.
6. Stay in touch with your bank’s fraud department and law enforcement to track recovery options.

Frequently Asked Questions

Q: Can I be held responsible for transactions done with a fake face-swap video?
A: If you report the fraud promptly and cooperate with your bank and authorities, you are generally protected under RBI’s customer protection guidelines. However, timely reporting is crucial.

Q: How can I verify if a KYC request is genuine?
A: Always verify by independently calling your bank’s official helpline or checking their website before sharing any details or completing KYC procedures.

Q: Is Telegram the only platform used for this scam?
A: While Telegram is popular among scammers for its opaque bot ecosystem, similar scams can occur via WhatsApp or other messaging apps. Always stay alert across platforms.

Stay safe and don’t fall prey to deepfake KYC scams. When in doubt, verify suspicious messages and links at BharatSecure.app — India’s trusted digital fraud awareness platform.