Digital Arrest Scam With CBI Dashboard Hoax — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jul 17, 2026

Severity: Critical | View Full Scam Details

Beware the 2026 Digital Arrest Scam With Fake CBI Dashboard Hoax in India

A new cyber fraud targeting Indian digital users uses fake arrest threats and phoney CBI dashboards to fool you into giving away money and personal info.

What Is the Digital Arrest Scam With CBI Dashboard Hoax?

The Digital Arrest Scam With CBI Dashboard Hoax is a sophisticated fraud pattern increasingly reported across urban India in 2026. Fraudsters impersonate law enforcement agencies like the Central Bureau of Investigation (CBI), Cyber Cells of states such as Maharashtra or Uttar Pradesh, or the Enforcement Directorate (ED). They falsely claim the victim is under investigation for an alleged cybercrime or financial fraud, using a fake online dashboard resembling official police or CBI systems to create panic and urgency.

This scam mainly targets digitally active professionals accustomed to using platforms like WhatsApp, Telegram, and UPI for financial transactions. The fraudsters often gather phone numbers and personal details by scouring social media profiles or using stolen data from previous breaches, giving their calls and messages a frightening air of authenticity.

According to complaints reported to cybercrime cells and platforms like I4C (Indian Cyber Crime Coordination Centre), this scam is spreading in metropolitan areas including Mumbai, Delhi NCR, Bengaluru, and Lucknow. CERT-In and RBI have issued advisories warning about such frauds exploiting UPI payments and KYC procedures, cautioning users to confirm any official communication independently.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or Call: The victim receives a call or a WhatsApp message from a number claiming to belong to the Cyber Cell, CBI, or ED. The message may include urgent warnings about pending legal action tied to alleged cybercrime activities.

2. Fake CBI Dashboard Link: The caller sends a URL link to the victim, purportedly to a “CBI Dashboard” where the victim’s case and supposed evidence are displayed. The site looks official but is entirely fake.

3. Pressure to Cooperate: The scammer uses intimidation, warning of immediate arrest or blacklisting unless the victim cooperates. They ask for KYC details such as Aadhaar number, bank details, and OTPs, claiming it will help clear the matter.

4. UPI Payment Requests: To “secure bail” or pay “penalties,” the fraudster asks the victim to transfer money via UPI apps. Victims are told this payment is urgent and non-negotiable.

5. SIM Swap and Identity Theft: In some reported cases, fraudsters request SIM swap assistance, or trick victims into sharing OTPs received during UPI or bank transactions, allowing them to transfer money out and misuse Aadhaar-linked services.

6. Victim Realizes the Fraud: After losing money and often facing compromised accounts, victims contact authorities, realizing the CBI dashboard and calls were hoaxes.

Real Warning Signs to Watch For

• Calls or messages asking for Aadhaar, OTPs, or bank PINs under threat of arrest.
• Links to “CBI dashboards” or police portals sent via WhatsApp or SMS that ask for login credentials.
• Urgent demands for UPI payments or bank transfers to unknown IDs.
• Callers refusing to share verifiable badge numbers or official email addresses.
• Use of generic greetings like “Dear Sir/Madam” instead of your name.
• Pressure tactics threatening immediate arrest, fines, or blacklisting without legal process.
• Requests for SIM swap or involvement in “verification procedures” over the phone.

What Happens to Victims

Victims face severe financial loss through unauthorised UPI transactions that are often irreversible once funds leave their account. Additionally, sharing Aadhaar numbers and OTPs heightens risk of identity theft, enabling misuse of bank accounts, credit cards, or even new loan applications in the victim’s name. The resulting emotional stress can be overwhelming, with many victims feeling helpless and unsafe even after reporting.

SIM swap requests can lock victims out of mobile services, blocking access to OTPs needed for online banking or government services like DigiLocker and eSign. Compromised KYC details can trigger long-term fraud issues, making recovery difficult.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) regularly cautions users against sharing OTPs and Internet banking credentials with anyone, irrespective of the caller’s claimed identity. RBI’s Customer Protection Guidelines stress that no authorised authority asks for such sensitive data remotely.

CERT-In advises users to remain vigilant against phishing attempts involving fake government websites or dashboards. The Indian Cyber Crime Coordination Centre (I4C) encourages reporting suspicious calls or messages immediately through official channels. The nationwide cybercrime helpline number 1930 is available to assist victims and guide them on next steps.

How to Protect Yourself

1. Never share OTPs or passwords for banking or Aadhaar verification with anyone, even if they claim to be from CBI or police.
2. Verify official calls independently by contacting the agency’s published phone numbers or visiting the agency’s official website.
3. Avoid clicking on suspicious links, especially those claiming to show legal or investigation dashboards.
4. Use UPI payment apps’ official interfaces only; never approve transactions through links received on WhatsApp or SMS.
5. Do not entertain urgent pressure tactics; legitimate investigations follow due process and provide written notices.
6. Enable two-factor authentication (2FA) on all your apps, including WhatsApp and banking apps.
7. Report suspicious messages or calls immediately via BharatSecure.app and to the 1930 cybercrime helpline.

What to Do If You've Been Targeted

1. Stop all communication with the suspected scammer immediately.
2. Contact your bank’s fraud prevention helpline to block transactions or freeze your accounts.
3. File a complaint on cybercrime.gov.in, India’s official cybercrime reporting portal.
4. Report the incident to the 1930 cybercrime helpline for further assistance and guidance.
5. Change your banking and Aadhaar-linked application passwords immediately and review recent transaction history for discrepancies.
6. Inform your mobile operator to check for any SIM swap requests and secure your number.
7. Keep records of all calls, messages, and transaction details as evidence for police or cybercrime cell investigations.

Frequently Asked Questions

Q: Can the CBI really call me on WhatsApp about a case against me?
No. Official Indian investigative agencies do not use WhatsApp or informal calls to notify individuals about cases. Formal communication is done through written notices or court summons.

Q: What if I clicked on the fake CBI dashboard link?
Do not enter any personal information. Immediately disconnect from the link, clear your browser cache, and scan your device with a trusted antivirus. Inform your bank and change all related passwords.

Q: Is it possible to reverse UPI payments made under this scam?
UPI transactions are generally final. You must report to your bank immediately for possible dispute resolution. The sooner you act, the better chance you have for recovery.

For any suspicious messages claiming to be from government agencies or demanding money, verify before reacting at BharatSecure.app. Always report fraud attempts on the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.