WhatsApp Deepfake Impersonation Racket — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: HIGH | View Full Scam Details

WhatsApp Deepfake Impersonation Racket in India 2026: A Dangerous New UPI Scam

A rising cybercrime trend in India sees scammers using deepfake technology on WhatsApp to impersonate acquaintances and fool victims into handing over money via UPI.

What Is the WhatsApp Deepfake Impersonation Racket?

The WhatsApp Deepfake Impersonation Racket is a sophisticated variant of online fraud increasingly reported across India in 2026. Using artificial intelligence-based deepfake tools, scammers create fake profile pictures or altered videos resembling the victim’s friends, family members, or colleagues. They then use WhatsApp to initiate conversations under these false identities.

This scam primarily targets the millions of WhatsApp users in India who rely on the app for personal and professional communication. By leveraging the high trust Indians place in WhatsApp contacts, fraudsters aim to elicit money transfers via UPI or bank apps. Cases reported to police show the scam is widespread in large metros and smaller towns alike, exploiting gaps in user awareness about deepfake risks.

Government bodies like CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have flagged this impersonation racket as a serious threat. Though specific advisory numbers are not available currently, the Reserve Bank of India (RBI) and CERT-In regularly warn users to be vigilant about unknown transaction requests on UPI platforms, especially those initiated through WhatsApp.

How This Scam Works — Step by Step

1. Data Gathering: Scammers scrape public social media profiles to collect images and details of potential victims and their close contacts.
2. Fake Profile Creation: Using deepfake software, they create distorted or morphed photos and videos that look like genuine acquaintances.
3. Initial Contact: The fraudster contacts the victim from a new WhatsApp number, posing as a trusted friend or family member, often referencing shared past events to build trust.
4. Casual Chat: Conversations begin with normal, friendly exchanges to avoid immediate suspicion.
5. Manipulation: The scammer sends blurred or morphed explicit images or claims urgent financial trouble, pressuring the victim emotionally.
6. Money Request: They then ask for urgent transfers through UPI apps like Google Pay, PhonePe, or Paytm, sometimes citing fake emergencies or investment opportunities.
7. Victim Transfers Money: Believing it’s genuine, victims make UPI payments to the scammer’s masked UPI ID or bank account.
8. Cut Off Contact: Once the payment is done, scammers block the victim and disappear with the funds, often making recovery difficult.

The use of deepfake visuals adds a chilling layer of authenticity, blurring the victim’s ability to distinguish between real and fake contacts.

Real Warning Signs to Watch For

• New or unknown WhatsApp numbers messaging claiming to be friends or relatives
• Urgent, emotional, or secretive requests for money transfers via UPI
• Blurred or suspicious photos/videos sent early in the chat
• Requests to avoid calling back original known numbers
• Pressure tactics like threats or emotional blackmail
• UPI IDs that don’t match the caller’s known bank or contact details
• Spelling mistakes or unusual language not typical of the claimed contact

What Happens to Victims

Victims often suffer significant financial loss, with amounts transferred via UPI ranging from a few thousand rupees to lakhs. Due to the instantaneous and irreversible nature of UPI payments, victims find it hard to recover money once sent. Emotional distress is also common, caused by betrayal from alleged ‘trusted’ contacts and the fear of private data exposure, including Aadhaar details if shared.

Some victims experience SIM swap fraud after providing personal details, leading to further financial damage through unauthorized banking transactions. The psychological impact includes anxiety, loss of trust in digital communications, and reluctance to use online payment systems again.

What RBI and CERT-In Say

RBI regularly cautions users about digital payment frauds, highlighting the importance of verifying payee details before authorizing UPI transactions. CERT-In advises users to avoid clicking suspicious links or sharing OTPs and personal data over WhatsApp or other messaging platforms. The Indian Cyber Crime Coordination Centre (I4C) urges prompt reporting of such frauds to the 1930 cybercrime helpline.

While there is no single advisory specific to WhatsApp deepfake impersonation, these government bodies emphasize the broader need for awareness around social engineering tactics combined with advanced AI tools.

How to Protect Yourself

1. Verify Contacts: Always double-check new WhatsApp numbers claiming to be known contacts by calling their original number before responding.
2. Be Skeptical of Urgency: Avoid reacting to urgent money requests sent suddenly over WhatsApp without prior warning.
3. Do Not Share OTP or Personal Info: Never share banking OTPs, Aadhaar details, or passwords via chat, even if the sender appears trustworthy.
4. Scrutinize Media: Question any blurred or suspicious photos/videos and ask for live video or voice calls to confirm identity.
5. Check UPI Details: Verify the name and details shown on your UPI app before confirming payments.
6. Use WhatsApp’s Privacy Settings: Limit who can see your profile photo and status to reduce chances of image scraping.
7. Report Immediately: If you suspect impersonation, report the number to WhatsApp and file a complaint at cybercrime.gov.in.

What to Do If You've Been Targeted

• Immediately contact your bank to block your UPI or bank accounts involved.
• Change your WhatsApp privacy settings and report the suspicious number on WhatsApp.
• File a complaint with the cybercrime portal at cybercrime.gov.in and call the 1930 cybercrime helpline.
• Inform the RBI helpline to check for any possible fraudulent banking transactions.
• If personal data like Aadhaar or SIM details were shared, approach UIDAI and your mobile operator to secure your accounts.
• Keep records of all chats and transactions as evidence for police reports.

Frequently Asked Questions

Q: How can I be sure if a WhatsApp message is from a real friend or a deepfake scammer?
A: Always confirm by calling the known number saved in your phone. Be cautious if the new number refuses a voice call or avoids questions about shared memories.

Q: Can I get my money back if I transferred through UPI to a scammer?
A: UPI payments generally cannot be reversed once completed. However, immediately reporting to your bank and filing complaints with cybercrime authorities increases chances of recovery.

Q: Does sharing pictures on social media increase my risk of this scam?
A: Yes. Fraudsters use publicly available images to create deepfake profiles. Use WhatsApp and social media privacy settings to restrict who can see your photos.

If you get suspicious messages asking for money or sensitive info, verify their authenticity immediately at BharatSecure.app, and report fraud to the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.