Fake CBI Investigation Extortion Calls — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: HIGH | View Full Scam Details

Beware of Fake CBI Investigation Extortion Calls in India — 2026 Warning

Fake calls from scammers claiming to be CBI officers are tricking thousands into giving away money and personal details via WhatsApp and phone calls.

What Is the Fake CBI Investigation Extortion Calls?

This scam has become a serious threat across India in 2026, targeting mainly middle-aged and elderly people who rely on phone and WhatsApp for communication. Fraudsters impersonate officers from the Central Bureau of Investigation (CBI) or cybercrime departments, creating panic by alleging the victim is under investigation for criminal activities. The scam aims both to intimidate and extort money, often demanding payment through UPI or bank transfers.

According to complaints reported to police and cybercrime cells linked with the Indian Cyber Crime Coordination Centre (I4C), this scam has seen a noticeable rise in frequency since early 2026. Victims come from various states but especially from urban and semi-urban areas, where internet use on smartphones is widespread. Official agencies including CERT-In have issued general warnings about government impersonation scams, reminding citizens to verify any official communication independently.

How This Scam Works — Step by Step

1. Initial Contact via Call or WhatsApp: The victim receives a call or WhatsApp message. The caller ID often shows “CBI,” “Cybercrime Dept,” or a local police station name, achieved through Caller ID spoofing.
2. Threatening Introduction: The caller identifies themselves as a CBI or police official and claims the victim is involved in a criminal case such as illegal transactions, money laundering, or Aadhaar misuse.
3. Creating Urgency and Fear: The caller uses a threatening tone, sometimes quoting fake FIR numbers, and insists the victim must cooperate immediately to avoid arrest or legal action.
4. Request for Personal Information: To “verify identity,” the caller asks for sensitive data like Aadhaar number, bank details, or OTP sent over SMS.
5. Demand for Instant Payment: The caller demands payment or “security deposit” to clear the case, instructing the victim to send money via UPI apps or bank transfer. Sometimes they ask victims to install remote access apps or provide online banking credentials.
6. Extortion and Repeated Calls: Once initial payment is made, scammers may increase demands or threaten further legal action, leading to multiple transactions and escalating losses.

Real Warning Signs to Watch For

• Calls or messages claiming urgent CBI or police investigations but refusing to provide verifiable contact details.
• Requests to share OTPs, bank PINs, or remote access to your phone.
• Caller ID showing official department names but the call comes from unverified or mobile numbers.
• Threats of arrest or legal penalty without providing any written notice or official summons.
• Demands for immediate payment via UPI or bank transfer to “clear charges” or “release hold.”
• Pressure to act quickly without time for verification or consultation with family or lawyers.
• Use of WhatsApp messages combined with phone calls to build trust and urgency.

What Happens to Victims

Victims often lose significant money transferred via UPI apps or net banking, which is hard to recover due to the irrevocable nature of such payments. Many suffer emotional stress from being falsely accused and harassed relentlessly.

Apart from direct financial losses, some report misuse of their Aadhaar data or phone SIM swaps after sharing OTPs, worsening the damage. Victims may also face difficulties blocking their accounts quickly, as scammers exploit the confusion and delay victims from contacting banks or authorities. The scam damages trust in digital payment platforms like UPI, complicating daily transactions for many.

What RBI and CERT-In Say

RBI has repeatedly warned consumers to never share OTPs, PINs, or banking passwords with anyone, even if they claim to be government officials. They emphasize that banks and government agencies never ask for such information over phone or WhatsApp.

CERT-In and the Ministry of Home Affairs encourage reporting any suspicious calls to the 1930 national cybercrime helpline and filing complaints on the cybercrime.gov.in portal. These agencies maintain that government departments do not demand instant payments or threaten arrests through phone calls without proper notices. Public advisories also stress verifying the authenticity of callers independently.

How to Protect Yourself

1. Never share OTPs or banking details with callers, no matter who they claim to be.
2. Do not trust caller ID names alone; these can be spoofed easily.
3. Ask for official written communication or visit the nearest police station or CBI office directly to verify claims.
4. Avoid making any immediate payment based on phone threats or WhatsApp messages. Take time to consult trusted family members or a legal advisor.
5. Do not install remote access or unknown apps on your smartphone following unsolicited instructions.
6. Register complaints promptly with your bank and cybercrime authorities if suspicious activity or calls occur.
7. Use UPI and digital wallets only with trusted apps and check all payment requests carefully before authorizing.

What to Do If You’ve Been Targeted

• Immediately block the caller and save all related call/audio/WhatsApp message records as evidence.
• Report the incident to your bank to block or freeze accounts and initiate fraud investigation.
• Lodge a complaint at the national cybercrime reporting portal at cybercrime.gov.in.
• Call the 1930 cybercrime helpline for guidance and to register your report.
• Inform your mobile service provider to guard against SIM swap or misuse.
• Change all passwords for banking and online accounts and enable two-factor authentication where available.
• Contact local police if you experience persistent threats or harassment from the callers.

Frequently Asked Questions

Q: Can the CBI call or WhatsApp me to investigate a criminal case?
No. Official agencies generally communicate through written notices or emails, not urgent calls demanding personal details or money transfers.

Q: What should I do if a caller asks for my OTP or Aadhaar details?
Never share OTPs or Aadhaar numbers with anyone on the phone or WhatsApp. These are used to steal money or misuse identity.

Q: How can I confirm if a call from “CBI” or “Cybercrime Dept” is genuine?
Ask for official contact details, call back through recognized official channels, or visit a police or CBI office directly before providing any information.

Protect yourself by verifying suspicious messages and calls through trusted sources like BharatSecure.app and report any fraud attempts immediately at the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.