Digital Arrest via 'CBI' Call — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jul 18, 2026

Severity: Medium | View Full Scam Details

Beware in 2026: Digital Arrest via 'CBI' Call Scam Sweeping India

A growing number of internet users in India are being duped by fraudulent calls claiming fake digital arrests from the "CBI," resulting in significant financial loss.

What Is the Digital Arrest via 'CBI' Call?

The "Digital Arrest via 'CBI' Call" scam is a cyber fraud tactic where scammers impersonate officials from the Central Bureau of Investigation (CBI) or other government agencies. They target unsuspecting citizens via phone calls, claiming the victim is involved in illegal online activities or financial crimes. These calls allege that a digital arrest warrant has been issued and try to intimidate the receiver into cooperating by paying fines or disclosing sensitive details.

This scam primarily targets middle-aged and elderly individuals who may be less tech-savvy. However, anyone with a mobile phone number listed in public directories or previous transaction records can be vulnerable. The scam has been widely reported across metropolitan and smaller cities in India, with many cases coming to light especially through complaints registered with cybercrime cells monitored by the Indian Cyber Crime Coordination Centre (I4C).

While government authorities like CERT-In and RBI have not issued scam-specific advisories targeting this exact digital arrest call pattern, they continuously alert the public about impersonation scams and urge caution when receiving intimidating or unsolicited official-sounding calls. The RBI repeatedly warns citizens not to share OTPs or banking credentials over the phone, a key vulnerability exploited in such scams.

How This Scam Works — Step by Step

1. Initial Call Claiming Digital Arrest: The victim receives a phone call from a number masked to appear official. The caller introduces themselves as a CBI officer or government official claiming the victim is digitally arrested for committing cybercrimes or financial fraud.

2. Threats and Intimidation: The caller uses aggressive language, threatening legal actions, arrests, and public disgrace unless the victim cooperates immediately.

3. Request for Personal Details: To "verify identity" and "avoid arrest," the caller pressures the victim to share Aadhaar number, bank details, or UPI ID. This information is later misused by scammers.

4. Fake Verification Links or OTP Requests: The victim may be sent a WhatsApp message or SMS with a link, purportedly to confirm identity or pay fines. Clicking the link leads to fraudulent apps or phishing websites capturing login credentials or OTPs.

5. Money Transfer Fraud: Using stolen banking credentials or UPI authentication, fraudsters initiate large fund transfers or request victims to pay "fines" via UPI apps like Google Pay or PhonePe.

6. SIM Swap or Account Freeze Threat: The caller may warn about SIM blocks or urge installing remote access apps, allowing the scammer to take control of the victim’s phone and steal more data.

Real Warning Signs to Watch For

• Calls demanding immediate payment or personal information without official documentation.
• Callers refusing to provide a callback number or answering clarifications.
• Pressure to install apps or click unexpected links sent over WhatsApp or SMS.
• Claiming legal arrest but not providing verifiable case numbers or court references.
• Asking for Aadhaar details, banking PINs, or OTPs under the pretext of verification.
• Threats of arrest or imprisonment without prior written notices or summons.
• Caller ID or number appears as a trusted agency but changes frequently or spoofs multiple numbers.

What Happens to Victims

Victims often suffer both financial and emotional damage. Through UPI payments and bank account access, losses can rapidly reach lakhs of INR. Since UPI transactions are instant and irreversible, victims seldom recover the stolen funds. Additionally, Aadhaar data shared under duress can lead to identity theft or KYC fraud, compounding the problem.

Emotionally, victims face distress, anxiety, and a feeling of violation, particularly older individuals who may be embarrassed to disclose the fraud to family or authorities. The ordeal also consumes time and effort to file complaints with police and banks, and victims often fear the stigma of being labelled negligent.

What RBI and CERT-In Say

While there's no RBI notice explicitly naming the "Digital Arrest via 'CBI' Call" scam, RBI’s ongoing public advisories stress never sharing bank OTPs, PINs, or UPI app credentials over the phone or with unknown callers. RBI also encourages verifying suspicious calls through official helplines.

CERT-In highlights impersonation scams as a rising threat under its mandate to coordinate cybersecurity awareness in India. The National Cyber Crime Reporting Portal (cybercrime.gov.in), managed by I4C, provides a centralized platform to report such incidents. The government’s 1930 cybercrime helpline is operational for immediate assistance and victim guidance.

How to Protect Yourself

1. Never share OTPs, passwords, or PINs over phone calls, no matter how official the caller seems.
2. Verify caller identity independently by calling the official agency’s public helpline or website numbers.
3. Do not click on unsolicited links or download apps sent from unknown sources via WhatsApp or SMS.
4. Refuse to divulge Aadhaar or bank details on unsolicited calls. Agencies do not ask for such info via phone.
5. Report suspicious calls immediately to your bank and block the caller number.
6. Register complaints promptly at cybercrime.gov.in and lodge FIRs with local police cyber cells.
7. Educate elderly family members frequently about these scams and encourage open discussions.

What to Do If You've Been Targeted

• Immediately contact your bank to freeze accounts and block all UPI-linked payments.
• Change passwords and login credentials for your mobile banking, UPI apps, and email accounts.
• Report the incident to the 1930 cybercrime helpline for support and further guidance.
• File a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in.
• Inform your mobile service provider if you suspect SIM cloning or unauthorized access.
• Keep a record of all communications and transaction details for police and bank investigations.
• Avoid confronting the caller or pursuing direct communication with the scammers.

Frequently Asked Questions

Q: Can a real police or CBI officer call me to inform about a digital arrest?
A: Legitimate law enforcement officials usually do not initiate arrest notifications over phone calls. Official summons or arrest notices come through written documents served by authorized personnel or courts.

Q: What should I do if I accidentally shared my OTP or bank details during such a call?
A: Immediately contact your bank to block and freeze your accounts. Change all relevant passwords and report the fraud on cybercrime.gov.in and the 1930 helpline.

Q: Are these scams traceable by police? Can I get my money back?
A: Authorities do investigate such cases but recovery of funds is often challenging due to the speed of transactions. Early reporting improves chances of action and cautionary alerts to others.

If you receive suspicious calls or messages claiming official actions, always verify them through trusted sources. For any doubts, check with BharatSecure.app and report fraud quickly at the 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.