Impersonation Threatening Immediate Arrest — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jul 27, 2026

Severity: Critical | View Full Scam Details

"Digital Arrest" Scam 2026: How Fake CBI and Police Calls Are Robbing Indians Over UPI

Fraudsters impersonating CBI officers, police, and income tax officials are terrorising Indian phone users with fabricated arrest threats — then draining bank accounts through UPI transfers. With reported losses from similar scams crossing ₹1,000 crore in a single fiscal year, this is one of the most financially devastating scams active in India right now.

What Is the Impersonation Threatening Immediate Arrest Scam?

Known in cybercrime circles as the "digital arrest" scam, this fraud involves callers posing as law enforcement or government officials to frighten victims into transferring money or surrendering sensitive KYC details. Targets span a wide range — elderly citizens, urban professionals, and Non-Resident Indians (NRIs) are all frequently reported victims, according to complaints filed with the Indian Cybercrime Coordination Centre (I4C).

Fraudsters obtain personal data — PAN numbers, Aadhaar details, bank account information — through data leaks or purchased lists, making their opening gambit sound disturbingly credible. The Ministry of Home Affairs (MHA) has flagged a sharp escalation in such cases, and CERT-In has verified the existence of government-impersonation infrastructure used to support these calls.

BharatSecure's threat-intelligence database has identified 13 fraudulent UPI identifiers linked to this scam pattern, verified in partnership with NPCI and community reports, as well as 2 government-impersonation domains confirmed by CERT-In.

Exactly How This Scam Works — Step by Step

1. The call arrives — via phone or WhatsApp, often from a spoofed number appearing official.
2. Fake credentials are stated — the caller claims to be a CBI agent, CID officer, or income tax official, citing your name, PAN, or Aadhaar number to appear legitimate.
3. A criminal narrative is constructed — your Aadhaar or bank account is allegedly linked to money laundering, drug trafficking, or financial fraud. An FIR has supposedly been filed.
4. Urgency is manufactured — the caller insists arrest is imminent, sometimes claiming officers are already near your home.
5. "Resolution" is offered — the only way to stop the arrest, you are told, is to pay a fine via UPI immediately or share KYC details for "verification".
6. Money is transferred — panicked victims send funds to a UPI ID controlled by the fraudsters. In cases reported publicly, individual losses have reached into the lakhs; aggregated losses from this scam pattern total an estimated ₹25 crore across reported incidents.
7. Contact ceases — once the transfer is complete, the caller disappears.

Real Warning Signs (What to Watch For)

• A call or WhatsApp message claims your Aadhaar or PAN is linked to a crime
• The caller states their "rank" and badge number without being asked
• You are told an FIR or arrest warrant already exists in your name
• Extreme urgency: "Pay in the next 30 minutes or we arrive at your door"
• Payment demanded via UPI rather than any official government portal
• Requests for OTP, UPI PIN, or full KYC documents over a phone call
• The caller discourages you from speaking to a family member or lawyer first

What Happens to Victims

The financial damage is immediate and difficult to reverse. UPI transactions are processed in seconds, and RBI guidelines currently give banks a narrow window to freeze funds before they are withdrawn or cycled onward. Victims who share Aadhaar details risk secondary fraud — their identity may be used to open new accounts or take loans. Filing a complaint with your bank and I4C via cybercrime.gov.in must happen within hours for any recovery attempt to be realistic.

Beyond money, the emotional toll is severe. Many victims — particularly elderly individuals unfamiliar with how the CBI or IT department actually operates — experience acute anxiety, shame, and reluctance to report the crime. This silence allows the same fraudsters to re-target the same victims weeks later.

What RBI, CERT-In, and I4C Say

The Reserve Bank of India has repeatedly reminded the public that no government authority will ever demand payment to avoid arrest over a phone call, and that no legitimate official asks for UPI PINs or OTPs. RBI's "RBI Kehta Hai" campaign specifically addresses this pattern.

CERT-In (cert-in.org.in) has issued public alerts about government-impersonation domains and advises citizens never to click links in unsolicited calls or messages claiming government affiliation.

I4C and the MHA launched the National Cybercrime Reporting Portal at cybercrime.gov.in and the 1930 cybercrime helpline specifically to handle cases like this. Prime Minister Narendra Modi publicly named the "digital arrest" fraud in a national address, calling it a major threat requiring immediate citizen awareness.

The legal framework under the Bharatiya Nyaya Sanhita (BNS) 2023 and the IT Act covers both impersonation and online fraud, with serious penalties for perpetrators.

How to Protect Yourself

1. Hang up immediately if any caller claims you face arrest and demands payment — no real authority does this.
2. Never share OTP, UPI PIN, or Aadhaar details over a phone call or WhatsApp message.
3. Verify independently — call the official number of the agency the person claims to represent (find it on the official .gov.in website, not a number the caller provides).
4. Tell a family member before taking any action — fraudsters specifically tell you not to.
5. Check your UPI IDs at BharatSecure.app against our verified database of 13 flagged identifiers before making any payment under pressure.
6. Enable UPI transaction limits on your banking app as a precaution against panic-driven transfers.
7. Report suspicious numbers and domains to CERT-In at cert-in.org.in and to the 1930 helpline.

What to Do If You've Been Targeted

• Call 1930 immediately — India's national cybercrime helpline. The faster you call, the better the chance of freezing the fraudulent account.
• File a complaint at cybercrime.gov.in — keep screenshots, call logs, and any WhatsApp messages as evidence.
• Contact your bank's fraud desk directly and request an immediate hold on any recent outward UPI transfer.
• Lock your Aadhaar temporarily via the UIDAI website (uidai.gov.in) or mAadhaar app if you shared your Aadhaar number.
• Do not pay again — fraudsters often call back posing as "recovery agents" promising to retrieve your lost money for a fee.

Frequently Asked Questions

Can a real CBI or police officer arrest me without any prior notice by phone? No. Legitimate law enforcement follows a defined legal process under the BNS 2023 — they do not call you on WhatsApp, demand UPI payments, or threaten arrest within minutes. If you have a genuine legal matter, you will receive formal written communication or a physical summons.

I gave the caller my Aadhaar number. What should I do now? Lock your Aadhaar immediately through the UIDAI portal or mAadhaar app to prevent misuse. File a report at cybercrime.gov.in and inform your bank so they can flag your account for unusual activity. Consult a legal professional for guidance specific to your situation.

The caller knew my PAN and bank details — does that mean it's real? No. Fraudsters purchase or obtain personal data through data leaks. Knowing your PAN, name, or partial account number is not proof of official identity. Any genuine official can verify their identity through formal, traceable channels — not a WhatsApp call.

What if I've already transferred money via UPI? Call 1930 and your bank's fraud helpline within the hour. File a complaint on cybercrime.gov.in with full transaction details. While UPI reversals are not guaranteed, prompt reporting significantly improves the odds of a freeze on the recipient account.

If you received a suspicious call or message like this, scan it instantly at BharatSecure.app and report it to the 1930 cybercrime helpline — your report could protect the next potential victim.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.