Rs 299 dress on Facebook turns into Rs 1 lakh scam for Mumbai nurse — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 01, 2026

Severity: HIGH | View Full Scam Details

Rs 299 Dress, Rs 1 Lakh Loss: Facebook Phishing Scam Hits India in 2026

This is how a seemingly harmless deal on Facebook can quickly turn into a significant financial loss through phishing.

What Is the Rs 299 Dress on Facebook turns into Rs 1 lakh scam for Mumbai nurse?

This scam plays on the allure of incredibly cheap deals advertised on social media, specifically Facebook. Scammers create fake profiles or pages, often showcasing attractive merchandise like dresses at unbelievable prices, sometimes as low as ₹299. These ads target individuals looking for a bargain, often women, and leverage the trust people place in deals they see shared on social media. The case of the Mumbai nurse highlights this dangerous trend. She saw what appeared to be a very tempting offer for a dress and clicked on the advertisement. This led to a series of fraudulent transactions, ultimately costing her ₹1 lakh.

The prevalence of such scams in India is growing due to the increasing number of people using social media for shopping and the relative ease with which scammers can create fake profiles. While specific advisories from the RBI or CERT-In related specifically to ₹299 dress scams may not exist, these institutions regularly issue warnings about online fraud, phishing attempts, and the importance of verifying the legitimacy of online sellers. They emphasize caution when encountering deals that seem too good to be true, especially on social media platforms. The Indian Cyber Crime Coordination Centre (I4C) also plays a vital role in coordinating efforts to combat cybercrime across the country.

How This Scam Works — Step by Step

Here's how the Rs 299 dress Facebook scam typically unfolds:

1. Enticing Advertisement: The victim sees an appealing advertisement on Facebook or another social media platform showcasing a dress or other item at a drastically reduced price (e.g., ₹299). The ad often features high-quality images to make the offer more attractive.
2. Clicking the bait: The victim, tempted by the low price, clicks on the ad. This redirects them to a fake e-commerce website or a WhatsApp chat with the "seller."
3. Building Trust (Fake Promises): The scammer, posing as a legitimate seller, engages with the victim. They provide assurances about the quality of the product, offer expedited shipping, and use persuasive language to build trust. They might even use fake customer reviews or testimonials to further convince the victim.
4. Requesting Payment: Once trust is established, the scammer requests payment through UPI, net banking, or a payment gateway. They might offer further discounts for immediate payment or create a sense of urgency to pressure the victim. They may also request a small "registration fee" or "shipping charge" upfront. In the Mumbai nurse's case, the initial ₹299 quickly ballooned.
5. Phishing for Details or Remote Access: In some cases, the scammer might request sensitive information like credit card details, Aadhaar number, or even ask the victim to download a remote access app (like AnyDesk or TeamViewer) under the pretext of assisting with the payment process. This allows the scammer to gain complete control of the victim’s device and financial accounts.
6. Fraudulent Transactions: After obtaining the victim's financial information or access to their device, the scammer initiates fraudulent transactions, siphoning money from the victim's bank account. This can happen through multiple small transactions to avoid raising suspicion initially or large transfers if they have full control.
7. Blocking and Disappearance: Once the scammer has extracted the desired amount of money, they block the victim's number, delete the fake social media profile, and disappear, leaving the victim with no recourse.

Real Warning Signs to Watch For

• Unbelievably Low Prices: If a deal seems too good to be true, it probably is. Genuine retailers rarely offer discounts of 80-90% on popular items.
• Unfamiliar Website or Seller: Always check the website's domain name, "About Us" page, and contact information. Scam websites often have generic or incomplete information. Look for grammatical errors and unprofessional design.
• Pressure Tactics: Scammers often pressure victims to make quick decisions by creating a sense of urgency (e.g., "Limited time offer!").
• Requests for Sensitive Information: Be extremely cautious if a seller asks for your Aadhaar number, credit card CVV, or UPI PIN over WhatsApp or an unsecured website.
• Payment to Unknown Accounts: Avoid transferring money to personal bank accounts or UPI IDs that don't match the seller's claimed identity or business name.
• Poor Grammar and Spelling: Scam ads and websites often contain typos and grammatical errors, indicating a lack of professionalism.
• No Customer Reviews or Contact Information: Legitimate businesses have customer reviews and readily available contact information (phone number, email address, physical address). The absence of these is a red flag.

What Happens to Victims

The financial losses from these scams can be devastating. Victims may lose their savings, leaving them in significant debt. Beyond the financial impact, victims often experience emotional distress, including feelings of shame, anger, and helplessness. In the Indian context, the misuse of financial details obtained through these scams can lead to further complications, such as unauthorized access to UPI accounts, fraudulent Aadhaar-enabled transactions, or even SIM swapping, where scammers gain control of the victim's phone number and intercept OTPs for further fraud. The emotional impact can be severe, leading to anxiety, depression, and a loss of trust in online interactions.

What RBI and CERT-In Say

The RBI regularly issues public awareness campaigns warning against digital fraud and urging users to be cautious when conducting online transactions. They emphasize the importance of not sharing sensitive financial information with unverified sources. CERT-In also releases advisories on phishing attacks and malware threats, providing guidance on how to protect oneself from these risks. While they might not specifically address the "Rs 299 dress" scam, their general guidelines on online safety and transaction security are relevant and applicable. Always refer to their official websites for the latest warnings and guidelines. The RBI's Banking Ombudsman scheme can also be a recourse for victims of unauthorized transactions.

How to Protect Yourself

1. Verify the Seller's Identity: Before making any purchase, thoroughly research the seller's online presence and reputation. Look for reviews on independent websites and check for a valid business address and contact information.
2. Use Secure Payment Methods: Opt for secure payment gateways like credit cards or reputable UPI apps that offer buyer protection. Avoid direct bank transfers or payments to unknown accounts.
3. Beware of Suspicious Links: Avoid clicking on links in unsolicited emails or social media ads. Instead, visit the retailer's website directly by typing the address into your browser.
4. Enable Two-Factor Authentication: Enable two-factor authentication (2FA) on your bank accounts, email, and social media accounts to add an extra layer of security.
5. Keep Your Software Updated: Regularly update your operating system, web browser, and antivirus software to protect your device from malware and phishing attacks.
6. Do Not Share Sensitive Information: Never share your Aadhaar number, credit card CVV, UPI PIN, or OTP with anyone over the phone, email, or WhatsApp.
7. Trust Your Instincts: If a deal seems too good to be true or if you feel uncomfortable about a seller, trust your instincts and walk away.

What to Do If You've Been Targeted

1. Report the Incident Immediately: Contact your bank immediately to report the fraudulent transaction and block your credit/debit cards or UPI account.
2. File a Cybercrime Complaint: File a complaint with the Cyber Crime Cell (online at cybercrime.gov.in) and your local police station. Provide all the evidence you have, including screenshots of the ads, transaction details, and communication with the scammer.
3. Call the Cybercrime Helpline: Call the national cybercrime helpline at 1930 to report the incident and seek assistance.
4. Change passwords immediately: Change your passwords for all your important accounts, including email, banking, and social media.
5. Monitor Your Accounts: Regularly monitor your bank accounts and credit reports for any suspicious activity.

Frequently Asked Questions

Q: What is phishing? A: Phishing is a type of online fraud where scammers try to trick you into giving them your personal or financial information, like passwords, credit card numbers, or Aadhaar details, by pretending to be someone you trust.

Q: How can I tell if a website is fake? A: Look for signs like typos, grammatical errors, a missing "About Us" page, no secure payment options (HTTPS in the address bar), and extremely low prices. Also, check the website's domain name for subtle variations from the real website's address.

Q: What if I accidentally clicked on a suspicious link? A: If you clicked on a link that looks suspicious, immediately run a full scan with your antivirus software. If you entered any personal information, change your passwords and monitor your accounts for any fraudulent activity. Contact your bank immediately if you suspect your financial information has been compromised.

Before you fall for a scam, verify suspicious messages and offers at BharatSecure.app.