Group-IB Report Reveals “Invisible Threat” Of Cloud Phones As A Key Tool In Financial Fraud — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Apr 29, 2026

Severity: MEDIUM | View Full Scam Details

Cloud Phone Fraud: The Invisible Threat to Your Money in India (2026)

A recent report highlighted a disturbing trend: fraudsters are increasingly using "cloud phones" to mask their identities and steal money from unsuspecting Indians.

What Is the Group-IB Report Reveals “Invisible Threat” Of Cloud Phones As A Key Tool In Financial Fraud?

The "Invisible Threat" report by Group-IB has brought to light a growing menace: the use of cloud-based phone services by cybercriminals to conduct financial fraud. Instead of using traditional SIM cards, scammers are now leveraging cloud phone numbers, also known as virtual numbers, which are easily obtainable and difficult to trace. These numbers allow them to make calls and send SMS messages while concealing their real location and identity.

This is particularly worrisome for India, where mobile payments and online banking are rapidly increasing, making a larger population vulnerable to such attacks. Fraudsters often target vulnerable groups, including senior citizens and those new to digital payments. While there aren’t specific advisories from RBI or CERT-In explicitly mentioning ‘cloud phones’ by name, the increased vigilance on masking applications (VPNs), disposable SIMS, reflects an awareness of the rise of untraceable numbers used in scams. Initiatives from the I4C (Indian Cyber Crime Coordination Centre) also indicate a countrywide effort to track and combat phone-based fraud. The use of cloud phones is just another evolving tactic in the cybercriminal's playbook.

How This Scam Works — Step by Step

Here’s how these scams typically unfold, using cloud phone numbers to trick you:

1. Initial Contact: You receive an unexpected call or message, often on WhatsApp or a standard SMS, from an unknown number. This number will often look like an Indian number, but be operating from a cloud-based service that makes it harder to trace. The message might claim to be from a bank, a government agency (like the Income Tax Department), or a familiar service like a delivery company.
2. Building Trust (or Fear): The caller or sender then tries to build trust or instill fear. They might claim your bank account is blocked, your Aadhaar number is linked to suspicious activity, or a package is stuck in customs requiring immediate payment. They might spoof the caller ID to look like a legitimate organization.
3. Request for Information: Next, they request personal information, such as your bank account details, UPI PIN, Aadhaar number, or OTPs (One-Time Passwords). They might pretend they need this information to "verify" your identity or "unblock" your account. Or the message will contain a weblink promising free money/cheap goods if the prospect downloads the company's app, where personal information will be harvested from the phone.
4. Malicious Link or App: You are often asked to click on a link that leads to a fake website resembling a legitimate bank or government portal. This website prompts you to enter your credentials. Alternatively, you may be asked to install a remote access app (like AnyDesk or TeamViewer) which allows the scammer access to your phone screen allowing them to read sensitive information as you type it, including your OTPs.
5. Money Transfer: Once they have your banking details and an OTP, they can initiate fraudulent transactions from your account. They may transfer funds through UPI, net banking, or even take out a loan in your name.
6. Bait & Switch: You are conned into sending your information over (KYC, PAN details, etc.) to receive a 'free amount' for completing a small task - such as watching a youtube video. Once you have downloaded the application, the fraudsters remotely access your financial accounts and/or extort the supposed payment amount for completing the tasks.

Real Warning Signs to Watch For

• Unknown Numbers: Be extremely cautious of calls or messages from unknown or suspicious-looking numbers, especially if they start with country codes you don't recognize or appear to be international numbers disguised as local ones.
• Urgent Requests: Scammers try to create a sense of urgency. Beware of messages or calls demanding immediate action. No legitimate organization will pressure you to share sensitive information instantly.
• Requests for OTPs or PINs: Never, ever share your OTPs, UPI PINs, or banking passwords with anyone, regardless of who they claim to be. Banks and government agencies will never ask for this information over the phone.
• Suspicious Links: Be wary of clicking on links in SMS messages or emails from unknown senders. Hover over the link to see where it leads before clicking. Always type the website address directly into your browser to ensure you're on the genuine site. Do not use links provided in emails or over messages.
• Grammar and Spelling Errors: Scam messages are often poorly written, containing grammatical errors and spelling mistakes. This is a telltale sign of a fraudulent attempt.
• Threats or Scare Tactics: Scammers often use threats to intimidate you into complying. They might threaten to block your account, report you to the authorities, or take legal action.
• **Unexpected "Free" Offers: ** Be wary of apps offering rewards in exchange for low-risk tasks that require your banking information to proceed, this is a bait & switch scam designed to defraud you.

What Happens to Victims

The consequences of falling victim to these scams can be devastating. Not only do victims lose their hard-earned money, sometimes lakhs of INR in a single transaction, but they also suffer emotional distress, anxiety, and a loss of trust. In some cases, scammers misuse stolen Aadhaar details for identity theft, opening fake accounts or obtaining SIM cards in the victim's name. The impact of a SIM swap fraud coupled with cloud phone scams can lead to complete account takeover, with scammers intercepting OTPs and accessing all of the victim's online accounts linked to that phone number. Reversing fraudulent UPI transactions can be difficult, and the process of recovering lost funds is often long and complicated.

What RBI and CERT-In Say

While there might not be specific alerts about "cloud phones" directly, the RBI consistently warns against sharing sensitive financial information with unknown individuals. They emphasize that banks will never ask for OTPs or PINs over the phone. CERT-In (Indian Computer Emergency Response Team) regularly issues advisories about phishing attacks and online scams, urging users to be cautious of suspicious emails and messages. The 1930 cybercrime helpline is a critical resource for reporting such incidents.

How to Protect Yourself

1. Be Suspicious of Unknown Numbers: Treat any call or message from an unknown number with extreme caution. Verify the caller's identity through official channels before taking any action.
2. Never Share Sensitive Information: Under no circumstances should you share your OTPs, UPI PINs, bank account details, or Aadhaar number with anyone over the phone or online.
3. Install a Reliable Anti-Phishing App: Consider installing a reputable anti-phishing app on your smartphone to detect and block malicious websites and messages.
4. Enable Two-Factor Authentication (2FA): Use 2FA wherever possible to add an extra layer of security to your online accounts. This makes it harder for scammers to access your accounts even if they have your password.
5. Verify Claims Independently: If someone claims to be from a bank or government agency, independently verify their identity by contacting the organization directly through their official website or phone number. Never use the contact information provided by the caller.
6. Keep Your Software Updated: Regularly update your phone's operating system and apps to patch security vulnerabilities that scammers can exploit.
7. Educate Yourself and Others: Stay informed about the latest scams and share this knowledge with your family and friends, especially those who are less tech-savvy.

What to Do If You've Been Targeted

If you suspect you've been targeted by a cloud phone scam, take these steps immediately:

1. Report to the Cybercrime Helpline: Call the national cybercrime helpline at 1930 to report the incident and block your accounts.
2. File a Complaint: File a formal complaint with the cybercrime cell of your local police station or online at cybercrime.gov.in.
3. Contact Your Bank: Immediately contact your bank to report the fraudulent transaction and block your account. Ask them to reverse the transaction if possible.
4. Change Your Passwords: Change all your online passwords, especially those for your bank accounts, email, and social media.
5. Inform Aadhaar Authorities: If you suspect your Aadhaar details have been compromised, contact UIDAI to block or update your Aadhaar.
6. Monitor Your Credit Report: Keep a close watch on your credit report for any unauthorized activity or loan applications.

Frequently Asked Questions

Q: What is a cloud phone number, and why are they dangerous?

A: A cloud phone number is a virtual phone number that isn't tied to a specific SIM card or physical location. Scammers use them because they're cheap, easy to obtain, and difficult to trace back to the actual fraudster, making it harder for law enforcement to catch them.

Q: I received a call from a cloud phone number claiming I won a lottery. Is this genuine?

A: Absolutely not. Lottery scams are common. Never share any personal information or pay