Hybrid AI-Aided Onboarding Fraud

INDIA — By BharatSecure Threat Intelligence Team ·

Verdict: Suspicious | Risk Score: 9/10 | Severity: critical

Category: WhatsApp, KYC, Phishing

How Hybrid AI-Aided Onboarding Fraud Works

Overview: Hybrid AI-Aided Onboarding Fraud is an advanced scam blending several digital deception tactics to breach Indian banks and fintech onboarding. Here, fraudsters employ both synthetic identities and AI-powered videos or chat deepfakes to fool both automation and humans during account registration. This is particularly risky for financial institutions and their genuine customers, as it facilitates not just account fraud, but downstream crimes like money laundering and credit abuse. How It Works: The scammer prepares a synthetic identity using stitched-together data. AI is used to produce fake photos, live deepfake videos (which can blink, nod, or even talk), and forged documents. They deploy these elements to pass automated onboarding and—if caught—may even simulate phone or video conversations to defeat human verification. Sometimes, if questioned, the fraudster insists on changing verification channels or provides slightly tweaked data to get a second chance. India Angle: The scam has picked up momentum in India’s biggest tech hubs: Bengaluru, Hyderabad, NCR. Digital-only fintech firms, eager to onboard users quickly, are most at risk. Young professionals, tech-savvy college students, and gig workers are typical targets—or used as “mules” unwittingly lending their accounts for fraudulent onboarding. Real Examples: A customer video call where the applicant’s lips sync slightly off, but their responses are instant. Or, onboarding requests moving quickly from chat, to email, to call, all controlled by criminals. Bank agents note, 'Applicant’s PAN and Aadhaar are real, but their selfie is an AI video.' Red Flags: 1) Repeated attempts to onboard with slightly changed identity details. 2) Applicants pushing to change verification methods (e.g., from video to chat). 3) Automated KYC passes, but later activity is suspicious. 4) Communication from the applicant feels off, robotic, or too scripted. Protective Measures: Demand layered authentication—document, biometric, and behavioral. Be cautious if the onboarding process feels rushed or changes channels unexpectedly. Financial institutions should enable ongoing account monitoring, not just initial checks. Customers should never hand over selfies or video unless sure of the requester's identity. If Victimised: Put all suspected onboarding under review and report to 1930 and cybercrime.gov.in. If you’re a customer whose data is misused, inform the RBI or the bank’s fraud team. Save any artificial-looking communication for evidence. Related Scams: 1) Deepfake banking video calls. 2) Digital KYC WhatsApp phishing. 3) Social engineering targeting customer service fallback verification.

How This Scam Works — Detailed Explanation

Hybrid AI-Aided Onboarding Fraud is a complex scheme that utilizes platforms such as WhatsApp, which plays a critical role in reaching victims in India. Scammers create believable initial contact through WhatsApp, often impersonating legitimate representatives from banks or fintech companies. They lure victims by promising easy account onboarding with minimal requirements or enticing offers, creating a sense of urgency or fear of missing out. This initial engagement is cleverly crafted to seem authentic, leveraging familiar logos and even language styles used in the actual company communications. They may offer assistance with online banking features, capitalizing on the high prevalence of digital transactions through UPI or Aadhaar-linked banking services in India.

To execute the fraud, scammers employ a combination of synthetic identities and advanced AI technologies, including deepfake videos and chatbots. The psychological manipulation occurs when they convince targets of the legitimacy of their operations through convincing impersonation. Victims might experience a smooth onboarding process where they are asked to submit their KYC details via a video call or chat. However, the individual on the other side of the screen could be an AI deepfake—representing a bank official, for instance—designed to bypass automated security checks and appeal to human emotions effectively. As the interaction unfolds, they might switch mediums from video to text chat or vice versa, a tactic which often leads to confusion and trust, making it harder for the victim to detect any anomalies.

Once scammers have successfully completed the onboarding process, they move swiftly to execute fraudulent transactions. Victims, believing they have opened a legitimate bank account, unwittingly provide sensitive information such as UPI IDs or Aadhaar numbers. For instance, a person may think they are transferring money to their own new account when, in reality, it goes to the scammer, enabling them to conduct further fraudulent activities like money laundering or credit abuse. Reports from victims highlight cases where they unknowingly deposited tens of thousands of rupees, only to find out later that the accounts created were entirely fictitious.

The impact of Hybrid AI-Aided Onboarding Fraud in India has been alarming, with the Ministry of Home Affairs (MHA) warning against such high-tech scams that hardly align with the legitimate banking ecosystem. Recent estimates suggest that fraudsters have exploited this technique to siphon off more than ₹500 crore in losses across India, affecting various financial institutions and leaving real consumers in a lurch. The Reserve Bank of India (RBI) has issued guidelines discouraging such practices and highlighted the need for stricter verification processes. Cybersecurity advisories from CERT-In have also amplified awareness about the risks associated with these digital onboarding processes, further emphasizing that legitimate communications should always follow proven protocols.

To differentiate between a legitimate onboarding interaction and a scam, it’s critical to look for certain warning signs. Genuine bank representatives will never abruptly switch onboarding communication channels without notifying you and will maintain a consistent tone. Unusual behaviors such as robotic speech patterns, scripted questions, or an overly smooth KYC process, followed by suspicious requests for immediate action, should raise alarms. Clients should be skeptical of users seeking to change communication formats multiple times or making odd, formulaic remarks during calls, reflecting a scripted dialogue rather than genuine engagement. Overall, a careful analysis of interactions can help maintain vigilance against this serious threat.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Hybrid AI-Aided Onboarding Fraud Target?

General public across India

Red Flags — How to Identify Hybrid AI-Aided Onboarding Fraud

  • Multiple onboarding attempts with slight ID changes
  • Applicant wants to switch from video to chat or vice versa
  • Strange, formulaic, or robotic behaviour on calls
  • Smooth digital KYC but odd post-onboarding activity

What To Do If You Encounter Hybrid AI-Aided Onboarding Fraud

  1. Report any suspicious account onboarding attempts at 1930 or visit cybercrime.gov.in.
  2. Contact your bank's customer service immediately if you suspect a fraud attempt (SBI: 1800-11-1109, HDFC: 1800-202-6161).
  3. Monitor your bank statements for unusual transactions and immediately report discrepancies.
  4. Educate yourself and others about the red flags of Hybrid AI-Aided Onboarding Fraud.
  5. Do not share personal or financial information over unverified communication platforms.
  6. Change your account passwords and enable two-factor authentication for added security.

How to Report Hybrid AI-Aided Onboarding Fraud in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a WhatsApp scam?
Immediately contact your bank's helpline to block your account and report the incident. You can also file a report at cybercrime.gov.in.
How can I identify Hybrid AI-Aided Onboarding Fraud?
Look for red flags such as multiple onboarding attempts under slightly different identities or abrupt switches between video and chat.
How do I report this type of scam in India?
Report it by calling the cybercrime helpline at 1930 or file a complaint at cybercrime.gov.in. Contact your bank to report financial fraud as well.
What steps should I take to recover money lost to this scam?
Contact your bank to report the fraud. They may assist with tracing lost funds. Additionally, file a complaint at cybercrime.gov.in for further assistance.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.