Rs 22.9 cr lost in digital arrest, five banks made to pay Rs 1.3 cr to victim — How to Identify & Stay Safe

Severity: HIGH | View Full Scam Details

Rs 22.9 Crore Lost in Digital Arrest Scam in India 2026: How Phishing Fraud Empties Your Bank Account

Millions of Indians face the growing threat of phishing scams like the “digital arrest” fraud, where scammers trick victims into losing crores by impersonating government and police officials.

What Is the Rs 22.9 crore Lost in Digital Arrest Scam, and Why Were Five Banks Forced to Pay Rs 1.3 Crore Compensation?

In one of the most high-profile phishing scams reported in 2026, victims lost a staggering Rs 22.9 crore through what is now known as the “digital arrest” scam. Authorities found that five major banks had to pay a total of Rs 1.3 crore in compensation to affected customers, highlighting the serious financial impact and systemic vulnerability in India’s digital banking ecosystem.

This scam primarily targets everyday internet and smartphone users who are active on platforms like WhatsApp, SMS, and social media—channels widely used for communication across India. The fraudsters send messages or make calls impersonating government officials or law enforcement officers, claiming that the victim has legal issues such as pending arrest warrants or disputes, often using intimidating, pseudo-legal language.

Victims are asked to visit fake websites or click links resembling official portals focused on digital policing or court cases. These sites trick victims into entering sensitive personal information, OTPs (one-time passwords), or banking credentials, leading to unauthorised transactions. Given India’s massive digital push—UPI payments crossing 10 billion transactions a month and Aadhaar linking to multiple services—such scams have become alarmingly widespread. The Indian government’s CERT-In and I4C (Indian Cyber Crime Coordination Centre) have issued repeated advisories warning the public about similar phishing attempts.

How This Scam Works — Step by Step

1. Initial Contact via SMS/WhatsApp/Social Media
   Victims receive a message appearing to be from government agency or police in highly formal language. The message may claim there is a legal case or pending arrest ("digital arrest") against the recipient, urging immediate action.

2. Fake Official-Looking Websites or Phishing Links
   The message contains a link to a fake website mimicking government portals — often using addresses close to legitimate ones but with slight spelling changes or .in vs. .gov domain confusion.

3. Impromptu “Verification” Calls
   Once the victim clicks the link, a phone call follows from a “support agent” or “officer” who urges the victim to enter OTPs or provide sensitive data under the pretense of verifying identity or court records.

4. Request for Online Payment or Bank Login Details
   Victims are told to pay a “fine” or “bail” amount using UPI, NEFT, or net banking, or to share banking credentials for “account freezing” procedures.

5. Immediate Transfer of Funds to Fraudsters
   Using the captured OTP or password, scammers perform unauthorized UPI transactions or net banking fund transfers, draining the victim’s accounts. Victims often realise too late when bank alerts or balances show suspicious deductions.

Real Warning Signs to Watch For

• Unsolicited messages claiming legal trouble without prior notice
• Links that resemble but don’t exactly match official government or court websites
• Pressure to act immediately or threatened with arrest/arbitrary penalties
• Requests to share OTPs, passwords, Aadhaar number, or bank details over call or text
• Emails or messages with poor grammar or formatting, unlike official communication
• Payments requested via UPI apps or net banking for “legal fees” or “security deposits”
• Multiple calls from unknown numbers following suspicious messages

What Happens to Victims

Victims face severe financial loss, as highly sophisticated phishing strips away funds directly from their bank or UPI-linked accounts. Due to the immediacy of these transactions, even UPI’s limited window for reversals rarely applies. Many find that their Aadhaar-linked accounts and SIM cards have been compromised through SIM swap scams, allowing fraudsters full control to carry out fund transfers.

Emotionally, victims report anxiety, loss of trust in digital payments, and the trauma of being harassed or falsely threatened with arrest. The process to claim refunds from banks or law enforcement is lengthy and often discouraging. The requirement to file police and cybercrime complaints adds to the stress, especially for less tech-savvy individuals.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has issued clear warnings advising users never to share OTPs or passwords and to verify messages claiming to be from government agencies directly through official helplines. RBI’s customer grievance helpline and the 1930 cybercrime helpline set up by the Ministry of Home Affairs are crucial resources for victims.

CERT-In frequently issues alerts on phishing scams, urging users to avoid clicking on suspicious links and report cybercrime promptly. I4C has also ramped up coordination with banks to monitor and prevent fraudulent UPI transactions. These agencies emphasize the need for public awareness and caution, especially during surge periods of such scams.

How to Protect Yourself

1. Ignore official-looking messages or calls demanding urgent legal or financial action
2. Never click on links or enter personal details in suspicious websites; verify URLs carefully
3. Do not share OTPs, passwords, Aadhaar details, or bank PINs with anyone—even if they claim to be officials
4. Use only official government portals or trusted bank apps for transactions
5. Enable two-factor authentication (2FA) on your banking and UPI apps for extra security
6. Install reliable mobile security apps and keep your phone’s software updated
7. Report suspicious messages immediately to your bank and the 1930 cybercrime helpline

What to Do If You’ve Been Targeted

• Immediately block your bank cards and UPI apps by contacting your bank’s customer service.
• Change your mobile and banking passwords without delay.
• Report the incident to the nearest cyber police station or file an FIR online via cybercrime.gov.in.
• Call the 1930 cybercrime helpline for assistance and guidance.
• Inform CERT-In through their reporting portal for further tracking and mitigation.
• Request banks for UPI transaction reversals if done within the reversal window, but do not delay.
• Consider blocking your Aadhaar biometrics if Aadhaar details have been compromised.

Frequently Asked Questions

Q: How can I confirm if a message about ‘digital arrest’ is real?
A: Government agencies never send legal notices demanding payment via WhatsApp or SMS. Always verify by calling official numbers or checking government websites directly.

Q: Can banks reverse the money lost through UPI phishing transactions?
A: Reversals are rare since UPI transactions are immediate and irreversible after confirmation. However, quick reporting improves chances of recovery.

Q: What if I accidentally shared my OTP with a scammer?
A: Change your bank passwords and UPI PINs immediately. Report the transaction to your bank and cyber authorities to prevent further loss.

Stay alert and never fall prey to phishing scams like the digital arrest fraud. Always verify suspicious messages before taking any action. For help verifying any message or link, visit BharatSecure.app — your trusted partner in digital fraud awareness and prevention.