Deepfake HR Video Call Mystery Shopper Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jun 09, 2026

Severity: High | View Full Scam Details

Beware the Deepfake HR Video Call Mystery Shopper Scam in India 2026: A New Cybercrime Threat

A rising number of young Indian job seekers are targeted by a high-tech scam involving fake HR calls and deepfake videos to steal money and personal data via UPI and WhatsApp.

What Is the Deepfake HR Video Call Mystery Shopper Scam?

The Deepfake HR Video Call Mystery Shopper Scam uses sophisticated video manipulation to impersonate HR professionals from well-known mystery shopping firms. This scam mainly targets Indian youth and fresh graduates actively seeking employment on platforms like WhatsApp and LinkedIn. Fraudsters create convincing profiles claiming to offer lucrative mystery shopper jobs, which often promise easy money by testing products and services.

According to complaints reported in cybercrime cells across India, the scam is expanding rapidly, hitting various cities from metros to tier-2 towns. Scammers exploit job seekers’ eagerness and trust by engaging them through personalized messages and then connecting over video calls where deepfake technology is used to mimic real HR representatives. This innovation in fraud makes it harder for victims to doubt the legitimacy of the offer.

While there are no specific advisories naming this scam yet from the Reserve Bank of India (RBI) or CERT-In, the Indian Cybercrime Coordination Centre (I4C) and CERT-In have repeatedly cautioned Indian citizens about social engineering frauds combined with UPI and KYC manipulation. These warnings highlight the dangers of confirming personal documents or sharing UPI details over unverified calls or WhatsApp chats.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or LinkedIn
   The victim receives a message from a profile claiming to be an HR manager of a reputed mystery shopping company. The message is personalized, referencing the victim’s qualifications or experience to build rapport quickly.

2. Job Offer & Invitation to Video Call
   Interested candidates are encouraged to join a video call for an interview or further discussion. The scammer uses deepfake technology during this call, showing a face that looks very similar to an actual HR person, making the interaction feel official.

3. Fake KYC & UPI Setup
   The “HR” asks the victim to perform a KYC process, which involves sharing Aadhaar details, PAN, or bank information, ostensibly to comply with company policy and RBI guidelines. Then, the victim is asked to register a UPI ID or payment app linked to the given phone number.

4. Mystery Shopper Test with Fund Transfer
   The victim is told they must conduct a “test purchase” or “mystery shopping task,” which requires transferring a small sum of money to various merchant accounts or “suppliers.” This is pitched as a way to verify payment systems linked to the job.

5. UPI Payment Requests and Account Manipulation
   Fraudsters send multiple UPI payment requests, often convincing victims to approve transactions or share OTPs claiming these are necessary to validate payments or job credentials.

6. Financial Loss & Data Theft
   Once transactions clear, victims find their UPI accounts drained or their personal data misused for further fraud. Scammers may use SIM swap tactics or Aadhaar authentication misuse to deepen the attack.

Real Warning Signs to Watch For

• HR profiles with limited or no verifiable history on LinkedIn or WhatsApp but contacting you directly
• Requests for Aadhaar, PAN, or bank details early in the hiring process
• Pressure to approve multiple UPI transactions or share OTPs during or after the video call
• Video calls where the “HR” refuses to meet in person or provide verifiable company contacts
• Unsolicited job offers for mystery shopping roles promising high returns with minimal effort
• Messages pushing urgency around payments or KYC completion before job confirmation
• Multiple UPI payment requests to unknown merchant IDs or personal UPI IDs

What Happens to Victims

Victims often suffer immediate financial losses due to unauthorized UPI transfers that are difficult to reverse once done. Since transactions are approved voluntarily under false pretenses, the RBI’s UPI grievance mechanisms may offer limited recourse. Beyond finance, victims face emotional trauma, embarrassment, and distrust in legitimate job offers.

In some reported cases, victims’ Aadhaar data and bank details are leaked or used for identity theft, including SIM swap fraud which can lead to further unauthorized transactions or social media account takeovers. The long-term recovery involves filing FIRs, submitting complaints to cybercrime.gov.in, and carefully monitoring credit and bank statements.

What RBI and CERT-In Say

Although no specific advisory targets this scam, RBI’s general UPI security guidelines caution users against sharing OTPs or PINs under any circumstances. CERT-In has continually urged vigilance against social engineering attacks exploiting KYC data and recommended using official channels for job recruitment and payments.

India’s 1930 cybercrime helpline and I4C emphasize reporting suspicious telecom or WhatsApp calls claiming to be HR representatives. The RBI Customer Helpline and CERT-In’s reporting portals are critical resources for victims experiencing financial fraud via UPI.

How to Protect Yourself

1. Verify Job Offers Independently
   Contact the company directly through official websites or known phone numbers before engaging further.

2. Never Share Aadhaar, PAN, or Bank Details on WhatsApp or Unverified Calls
   KYC documents should only be shared through secure, official portals.

3. Do Not Approve UPI Transactions or Share OTPs Seemingly Linked to Job Tests
   Legitimate employers do not need UPI payments or OTPs from candidates.

4. Be Skeptical of High Pay, Easy Job Offers on Social Media or Messaging Apps
   If it sounds too good to be true, it probably is.

5. Use Multifactor Authentication on Payment Apps and SIM Cards
   Prevent SIM swaps and secure your UPI apps with PINs and biometric locks.

6. Report Doubtful Profiles on LinkedIn and WhatsApp Immediately
   Alert platform moderators and block suspicious contacts.

7. Regularly Monitor Bank Statements and UPI Transaction History
   Early detection can prevent bigger losses.

What to Do If You've Been Targeted

1. Immediately contact your bank and request a freeze on your UPI or linked accounts.
2. File a complaint with your nearest cybercrime police station and register a case on cybercrime.gov.in.
3. Report the incident to the 1930 cybercrime helpline and the RBI customer care number for financial fraud.
4. Inform your mobile service provider to check for SIM swap or unauthorized changes.
5. Change all passwords for your bank, email, and social accounts linked to the compromised details.
6. Monitor your Aadhaar and PAN card activity for misuse using official portals.

Frequently Asked Questions

Q: Can deepfake videos be identified by average users?
A: Deepfake technology is improving and can be hard to spot, but inconsistencies in lip-sync, unnatural facial movements, or poor video quality might suggest fakery. Always verify the caller’s details independently.

Q: Is UPI payment reversible if I approve a fraud request?
A: Usually no. UPI transactions done with your approval (OTP or PIN) are considered authorised by RBI, making refund claims difficult. Immediate bank reporting can sometimes help.

Q: How can I verify an HR or job offer is genuine?
A: Use official company websites or verified recruitment portals to cross-check job openings. Avoid interacting solely through WhatsApp or social media without proof of legitimacy.

For any suspicious message or offer, always verify with BharatSecure.app’s fraud detection tools before proceeding. If you encounter fraud, report immediately to the 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.