Family Member Deepfake Video Call Extortion — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jul 26, 2026

Severity: Critical | View Full Scam Details

AI-Powered Family Deepfake Video Call Scam Is Draining Indian Bank Accounts in 2024

Scammers are now using deepfake technology to impersonate your family members on WhatsApp video calls — and victims across India have collectively lost lakhs before realising the "emergency" was entirely fabricated. If you use UPI and have family on social media, this scam targets you directly.

What Is the Family Member Deepfake Video Call Extortion?

This scam weaponises artificial intelligence to clone the face and voice of a family member during a live video call, then manufactures a fake crisis to extract urgent UPI payments. Targets include elderly parents, NRIs with relatives in India, urban professionals, and anyone whose family members have a visible social media presence.

CERT-In, in collaboration with the Ministry of Home Affairs (MHA), has issued public alerts warning that deepfake-enabled impersonation represents one of the fastest-growing categories of digital fraud in India. The I4C (Indian Cyber Crime Coordination Centre) under MHA has flagged emotionally coercive calls as a priority threat pattern heading into 2025.

Reported individual losses in documented cases range from ₹10,000 to ₹1 lakh per incident, with clusters of cases pointing to collective losses upwards of ₹10 crore. Alarmingly, many victims never report the fraud — embarrassment at being deceived by technology that convincingly mimics a loved one keeps these numbers artificially low. BharatSecure's threat-intelligence database has catalogued 13 fraudulent UPI identifiers verified through NPCI records and BharatSecure community reports, all linked to this scam pattern.

Exactly How This Scam Works — Step by Step

1. Harvesting. Fraudsters scrape Facebook, Instagram, and LinkedIn for photos and videos of you and your family members — all publicly available.
2. Deepfake preparation. Using freely accessible AI tools, they construct a convincing video overlay of your relative's face, ready to deploy on a WhatsApp call.
3. Timing the hit. Contact is initiated at moments of maximum vulnerability — late nights, festivals, or family gatherings when a quick cross-check call feels disruptive or rude.
4. The fake emergency. The caller, appearing on video as your father, son, or sibling, claims to have been in a road accident, hospitalised, or arrested — and needs ₹15,000–₹50,000 immediately for medical bills or bail.
5. Blocking verification. When a victim tries to switch to a voice-only call or hang up to call back, the alleged caller insists the video connection must stay open, citing the "urgency." This maintains the illusion and prevents independent verification.
6. UPI transfer. Panicked and emotionally overwhelmed, the victim transfers funds via UPI or a digital wallet — often in minutes.
7. Disappearance. Once the transfer clears, the scammer cuts contact. The real family member, when contacted later, has no knowledge of any emergency.

Real Warning Signs (What to Watch For)

• An unexpected WhatsApp video call from a family member reporting a sudden emergency
• Refusal to switch to a regular voice call or allow you to hang up and call back on a saved number
• Insistence on immediate UPI transfer — no time to think or verify
• Video quality is slightly off — frozen expressions, unnatural blinking, lip-sync lag, or pixelated edges around the face
• The "family member" avoids detailed personal references or gives vague answers to specific questions
• Contact comes from an unknown or slightly altered number, not the saved contact you have for that relative
• Request arrives during a festival, family event, or late at night when group verification is harder

What Happens to Victims

UPI payments are near-instant and reversible only within an extremely narrow window — typically before the beneficiary bank settles the transaction. Once funds reach the fraudster's mule account, recovery is operationally difficult and often incomplete even after a formal complaint. The RBI's guidelines on unauthorised electronic transactions place the burden of timely reporting on the customer; delays beyond the prescribed window (generally three working days for liability protection) can significantly reduce your chances of a refund.

Beyond the financial hit, victims report acute psychological distress — the realisation that a loved one's face was used as a weapon against them causes lasting anxiety around digital communication. Many avoid video calls entirely afterward, further isolating them. Elderly victims are disproportionately affected, often with limited awareness of deepfake technology and a stronger instinct to act immediately when family appears to be in danger.

What RBI, CERT-In, and I4C Say

The RBI has repeatedly urged customers to apply a "pause and verify" rule before any UPI transfer made under emotional pressure, reinforcing that no legitimate emergency requires bypassing standard verification. Its framework on digital payment safety specifically warns against transfers initiated during calls.

CERT-In (cert-in.org.in) has highlighted deepfake-enabled social engineering as an escalating threat vector. The MHA, working through I4C, has issued public advisories urging citizens to treat any unsolicited video call requesting urgent money as high-risk, regardless of who appears on screen.

The National Cyber Crime Reporting Portal (cybercrime.gov.in) and the 1930 Cybercrime Helpline are the official first-response channels. Time is critical — call 1930 immediately after a suspected fraud to initiate a transaction freeze request.

How to Protect Yourself

1. Hang up and call back. Always disconnect and dial your family member's saved number independently before transferring any money.
2. Ask a secret question. Agree on a family code word or a deeply personal question that only the real person can answer.
3. Check the video carefully. Look for unnatural blinking, lip-sync errors, or pixelation around the hairline and face edges — common deepfake artefacts.
4. Lock your social media. Set Facebook, Instagram, and LinkedIn profiles to private. Limit who can download or share your photos and videos.
5. Enable UPI transaction limits. Use your UPI app's daily transfer cap and per-transaction limit settings to reduce exposure.
6. Never transfer during a call. Make it a personal rule — no UPI payment while on any call, voice or video.
7. Educate elderly relatives. Ensure older family members know this scam exists; they are the most frequently targeted demographic.

What to Do If You've Been Targeted

1. Call 1930 immediately — India's national cybercrime helpline. Request an emergency freeze on the destination UPI account.
2. File a complaint at cybercrime.gov.in — document the WhatsApp number, UPI ID used, transaction reference, and time of call.
3. Contact your bank's fraud desk — request a transaction dispute and provide the UTR (Unique Transaction Reference) number from your UPI app.
4. Report the WhatsApp number — use WhatsApp's in-app "Report" function so the number can be flagged across users.
5. File an FIR at your nearest police station, referencing the Bharatiya Nyaya Sanhita (BNS) 2023 provisions on cheating and identity fraud.
6. Preserve all evidence — screenshot the call log, the WhatsApp chat, and the UPI transaction receipt before anything is deleted.

Frequently Asked Questions

Can a deepfake video call really fool people in real time? Yes. Current AI tools can apply a face overlay with low enough latency to sustain a short video call convincingly, especially over a compressed mobile connection where minor visual glitches are easy to dismiss as network issues. Scammers typically keep calls short — under two minutes — to minimise the window in which artefacts become obvious.

How did the scammer get my family member's face? Most likely from public social media posts — profile photos, reels, or tagged videos on Facebook, Instagram, or LinkedIn. Even a handful of clear images is enough for modern deepfake software to generate a usable video model.

Can I get my UPI money back after a deepfake scam? Recovery is possible but not guaranteed. Reporting to 1930 within the first hour gives law enforcement the best chance to freeze the mule account before funds are withdrawn or transferred onward. File both a cybercrime portal complaint and a bank dispute simultaneously. Consult a legal professional for case-specific guidance on pursuing recovery under consumer protection or civil law.

Is this only a risk for people with public social media profiles? It's the highest risk for those with public profiles, but anyone whose relatives post photos or videos publicly is exposed. Even a few tagged images on a friend's public account can provide enough material. Reviewing the privacy settings of your entire family's social media — not just your own — is the most effective protective step.

If you've received a suspicious call or message, scan it for free at BharatSecure.app and report any cybercrime immediately to 1930 — the sooner you act, the better your chances of stopping the fraud.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.