AI-Powered Deepfake Voice and Video Scams — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Aug 27, 2026

Severity: Critical | View Full Scam Details

AI Deepfake Voice & Video Scams in India 2026: How Fraudsters Clone Your Loved Ones to Steal Lakhs

Scammers in India are now using AI tools to clone the voices and faces of people you trust — family members, colleagues, business partners — and then call or video-message you in a crisis to demand instant UPI transfers. With reported losses reaching an estimated ₹350 crore and cases flagged by the Ministry of Home Affairs (MHA), this is one of the most dangerous cyber threats Indian internet users face right now.

What Is the AI-Powered Deepfake Voice and Video Scam?

AI deepfake scams use artificial intelligence to synthetically replicate a real person's voice or face using publicly available recordings — often scraped from WhatsApp status updates, Instagram reels, or YouTube videos. The result sounds and looks convincingly like someone you know.

India's rapid adoption of UPI, WhatsApp, and video calling makes this threat especially acute. A single panicked call from what sounds like your sister or business partner — asking for an urgent transfer — can bypass years of caution in seconds.

According to CERT-In (cert-in.org.in) and the MHA, deepfake-enabled financial fraud is rising sharply as AI voice-cloning tools become cheaper and more accessible. The I4C (Indian Cyber Crime Coordination Centre) has flagged deepfake impersonation as an emerging priority threat. In one publicly reported case, a victim allegedly lost ₹15 lakh after receiving what appeared to be a call from their business partner — later identified by law enforcement as an AI-cloned voice.

Exactly How This Scam Works — Step by Step

1. Reconnaissance. Alleged fraudsters identify a target and study their social media — WhatsApp, Instagram, Facebook — to map family members, colleagues, and close contacts.
2. Voice/video cloning. Using publicly available AI tools, they clone the voice or face of someone the victim trusts, using even short audio or video clips.
3. The urgent call or video message. The victim receives a WhatsApp call or video message that appears to come from — or sounds exactly like — a known contact. The scenario is always urgent: a road accident, a medical emergency, a business crisis.
4. Psychological pressure. The caller insists on immediate action, invoking fear or panic to prevent the victim from pausing to verify. Personalised details gleaned from social media make the story feel completely credible.
5. The payment demand. The victim is asked to send money instantly via UPI or share sensitive information such as their Aadhaar number for "verification."
6. Money lost. Funds are transferred before the victim can confirm the request through an alternative channel. UPI transactions settle in seconds, making recovery extremely difficult.

Real Warning Signs (What to Watch For)

• A WhatsApp call or video from a known contact suddenly demanding urgent money
• The caller insists you act right now and discourages you from calling back on a different number
• Requests specifically for UPI transfers — not bank transfers that allow more time
• The caller knows personal details (names, recent events) that feel oddly specific
• Slight audio glitches, unnatural blinking, or facial distortions in a video call
• Requests for your Aadhaar number or OTP under the guise of "verification"
• The scenario involves an accident, arrest, hospital, or business emergency you cannot independently confirm

What Happens to Victims

Financially, victims can lose anywhere from a few thousand rupees to several lakhs in a single transaction. Because UPI payments settle instantly, the RBI's guidelines on dispute resolution are limited — banks can flag suspicious transactions but reversal is not guaranteed, particularly if the victim authorised the payment themselves. Sharing an Aadhaar number adds a second layer of risk: it can be exploited in SIM swap fraud or to open fraudulent financial accounts in the victim's name.

The emotional toll is significant. Victims often describe intense shame and self-blame, compounded by the trauma of feeling betrayed by what seemed like a loved one's voice. This psychological burden frequently delays reporting, which in turn reduces the chance of recovering funds.

What RBI, CERT-In, and I4C Say

CERT-In (cert-in.org.in) has issued general advisories warning citizens that AI-generated audio and video can convincingly impersonate known individuals and that verification through a separate, trusted channel is essential before transferring any funds.

The MHA and I4C have highlighted deepfake fraud as part of their broader cybercrime awareness campaign and direct all victims to the National Cybercrime Reporting Portal at cybercrime.gov.in and the 1930 cybercrime helpline.

The RBI has repeatedly advised that no bank or payment system will ever ask you for OTPs, Aadhaar numbers, or UPI PINs over a call — regardless of how legitimate the caller sounds.

Under the Bharatiya Nyaya Sanhita (BNS) 2023 and the IT Act, impersonation and cheating by electronic means carry serious criminal penalties. The DPDP Act 2023 also reinforces individuals' rights over misuse of their personal data, including biometric information.

How to Protect Yourself

1. Establish a family code word. Agree on a secret phrase with close family members that any genuine emergency caller must use.
2. Always call back independently. Before sending any money, hang up and call the person directly on their known, saved number.
3. Never transfer money under pressure. Genuine emergencies allow time for a 60-second verification call.
4. Limit public audio and video. Restrict who can view your WhatsApp status, Instagram reels, and personal videos — these are the raw material for voice cloning.
5. Do not share Aadhaar or OTPs on any call, regardless of who the caller appears to be.
6. Enable UPI transaction limits on your banking app to cap the maximum amount that can be sent in a single transaction.
7. Watch for deepfake tells in video calls: unnatural blinking, slightly blurred edges around the face, lip-sync delays, or a flat, echo-free voice quality.

What to Do If You've Been Targeted

• Call 1930 immediately — India's dedicated cybercrime helpline. The sooner you report, the higher the chance of a transaction hold.
• File a complaint online at cybercrime.gov.in — keep your UPI transaction ID, screenshots, and call logs ready.
• Contact your bank's fraud helpline within minutes to flag the transaction and request an urgent hold or reversal.
• File an FIR at your nearest police station — this creates an official record and is required for insurance or legal proceedings.
• Alert the real person whose identity was cloned — they may be targeted again or need to warn others in their network.
• Consult a lawyer if Aadhaar or other identity documents were shared; seek professional guidance on next steps specific to your situation.

Frequently Asked Questions

Can a scammer really clone someone's voice from a short WhatsApp audio? Yes, reportedly. Modern AI voice-cloning tools require as little as a few seconds of clean audio to generate a synthetic voice that can fool close family members over a phone call. WhatsApp voice notes, Instagram reels, and YouTube videos are common sources.

If I authorised the UPI payment myself, can I still get a refund? This is complex and you should consult your bank and a legal professional for advice specific to your situation. Generally, UPI payments authorised by the account holder are harder to reverse than unauthorised transactions. Reporting to 1930 within the first hour gives you the best chance of a transaction hold before funds are withdrawn.

What if the deepfake video call looked exactly like my family member? Real-time deepfake video on mobile calls still has tells — look for unnatural blinking patterns, slight blurring at the hairline, and lip-sync that is slightly off. Most importantly, treat any call requesting urgent money as suspicious until independently verified, no matter how convincing it looks.

Is sharing my Aadhaar number on a call really dangerous? Yes. Aadhaar details combined with a phone number can potentially be used in SIM swap fraud or to access financial services in your name. The UIDAI advises never sharing your Aadhaar number or OTP over any unsolicited call. If you have shared it, consider locking your Aadhaar biometrics via the UIDAI portal immediately.

If you receive a suspicious call, message, or video, scan it at BharatSecure.app and report it to the 1930 cybercrime helpline — your report could protect someone else from losing their savings.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.