Fake Drug Parcel Investigation Call Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: HIGH | View Full Scam Details

Beware the Fake Drug Parcel Investigation Call Scam in India 2026: Protect Your UPI and WhatsApp Wallets

This new cybercrime scam in India uses fake drug parcel investigation calls to trick victims into revealing UPI PINs and WhatsApp OTPs, leading to serious financial loss.

What Is the Fake Drug Parcel Investigation Call Scam?

The Fake Drug Parcel Investigation Call Scam has emerged as a significant threat across India in 2026. Fraudsters impersonate police officers or customs officials and claim that a parcel connected to the victim has been intercepted for containing illegal drugs or banned substances. The callers instill fear by stating that the victim’s details are involved in this investigation and demand immediate cooperation to avoid arrest or legal issues.

This scam targets a wide range of people, especially those who regularly shop online or use parcel courier services. It spreads quickly through WhatsApp forwards and phone calls, often combined with phishing messages asking victims to share sensitive information. The scam also exploits popular digital payment platforms like UPI, tricking victims into authorizing fraudulent transactions under the pretext of paying fines or release fees.

Indian authorities like CERT-In have warned about similar phishing and financial fraud patterns involving fake official calls. While there isn’t a direct RBI advisory on this exact scam yet, the risk level is high because of its intricate social engineering and the growing number of complaints received by cybercrime cells across states.

How This Scam Works — Step by Step

1. Initial Call or WhatsApp Message: You receive a phone call or WhatsApp message from a number claiming to be from local police, customs, or narcotics enforcement. The caller alleges that a parcel in your name contains illegal drugs and is under investigation.

2. Threat and Urgency: The caller pressures you by saying the case is serious, and you must cooperate immediately to avoid arrest or fines. They may claim that your Aadhaar or PAN number is linked to the parcel.

3. Request for Personal Details: To 'verify your identity,' the caller asks for your full name, address, Aadhaar number, and often your UPI ID or bank details.

4. Fake Verification Link or OTP Request: Next, the caller sends a phishing link or asks you to share an OTP received on WhatsApp or SMS, allegedly to confirm your identity or stop the parcel seizure.

5. UPI or Wallet Transactions: Under the guise of paying fines or legal fees, victims are asked to enter their UPI PIN or authorize payment requests. Sometimes, fraudsters request you to download fake apps or share screen access.

6. Money Theft: Once the fraudsters have your UPI PIN, OTPs, or bank credentials, they initiate unauthorized transactions – draining your bank accounts or digital wallets.

7. Call Ends, Realizing Loss: The caller then vanishes, leaving victims confused and financially harmed.

Real Warning Signs to Watch For

• Calls from unknown numbers claiming official status without verifying through official police or courier service phones
• Immediate threats of arrest or fines asking for urgent payment via UPI or wallet apps
• Requests to share OTPs received on WhatsApp or SMS
• Links or apps sent via WhatsApp asking to verify Aadhaar or make payments
• Pressure to download unknown apps or grant screen sharing access
• Caller unable to provide verifiable badge ID or official email addresses
• Wrong or no official record when independently checking with police or courier company

What Happens to Victims

Victims often face significant financial loss, as cybercriminals siphon off money directly from bank accounts linked through UPI. Once your UPI PIN or OTP is compromised, RBI’s existing reversal mechanisms may not always apply if the transaction was authorized under false pretences. Additionally, if Aadhaar details are involved, identity theft risks escalate, opening doors to further fraudulent loans or SIM swaps.

Victims experience mental stress fearing legal consequences, coupled with the difficulty of recovering lost funds. The emotional toll may add to fear or embarrassment, preventing many from reporting the fraud promptly.

What RBI and CERT-In Say

Although RBI has issued multiple advisories warning users about sharing UPI PINs or OTPs, it reiterates that these details should never be shared over calls or messages. CERT-In emphasises on reporting suspicious cyber threats quickly via government portals and warns against falling for social engineering tactics that create panic or urgency.

The Ministry of Home Affairs, through the Indian Cyber Crime Coordination Centre (I4C), promotes the 1930 national cybercrime helpline where users can report misleading calls and scams. RBI also encourages users to contact their bank's official customer service before making any digital payment.

How to Protect Yourself

1. Never Share OTPs or UPI PINs: Treat UPI PINs and OTPs as strictly private, never divulge them over calls or messages.
2. Verify Caller Identity: Cross-check caller details through official police or courier company contacts before responding.
3. Ignore Urgent Threats: Beware of panic tactics requesting instant payment or cooperation.
4. Do Not Click Links from Unknown Sources: Avoid opening suspicious links on WhatsApp or SMS claiming to be official.
5. Use Official Apps Only: Download courier tracking or police apps strictly from government or trusted app stores.
6. Set UPI Transaction Limits: Use RBI’s facility to set daily or transaction-specific limits as extra protection.
7. Register Complaints Promptly: Contact your bank immediately if you suspect fraud and report to cybercrime.gov.in or the 1930 helpline.

What to Do If You've Been Targeted

1. Stop All Transactions: Immediately block UPI apps and digital wallets used for payment.
2. Contact Your Bank: Inform your bank about the suspicious transactions and request them to freeze any further payments.
3. Report to Cybercrime Authorities: File a complaint on cybercrime.gov.in with all call, message, and transaction details.
4. Call the 1930 Helpline: Reach out to India's national cybercrime helpline for guidance and support.
5. Change Your Credentials: Update all relevant passwords, Aadhaar-linked mobile numbers, and banking pins.
6. Monitor Bank and UPI Statements: Check for unfamiliar transactions regularly to catch fraud early.

Frequently Asked Questions

What should I do if I receive a call claiming my parcel has drugs and I’m under investigation?
Do not share any personal or payment information. Hang up and verify with your local police station or courier company using official contact details before taking any action.

Can RBI reverse a UPI transaction made during this scam?
RBI guidelines generally do not cover transactions made with authorized UPI PINs and OTPs, even if obtained fraudulently. Immediate bank reporting may help but recovery is not guaranteed.

Is downloading apps suggested by such callers safe?
No. Fraudsters often use fake apps to gain access to your device or credentials. Only install apps from trusted government sources and official app stores.

Stay alert and verify suspicious messages at BharatSecure.app. Report any fraud attempts immediately by calling 1930 to protect yourself and others from these scams.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.