WhatsApp Deepfake Impersonation Racket
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict: Suspicious | Risk Score: 7/10 | Severity: high
Category: UPI, WhatsApp, Government Impersonation
How WhatsApp Deepfake Impersonation Racket Works
Overview: This scam targets Indian WhatsApp users by impersonating someone from their contact list (friend, family, classmate) to create trust before launching a deepfake blackmail attempt. After scraping harmless images from victim or network profiles, scammers generate realistic fake nudes or explicit content. Victims are warned that the content will be sent to mutual contacts unless money is sent via UPI or Paytm. The threat of public shame or embarrassment pushes many to pay. How It Works: The perpetrator creates a WhatsApp account mirroring an existing friend or family member (using same name and photo). The scammer starts casual chat, then suddenly shifts to accusations regarding 'private' images or videos. Realistic deepfake imagery is used as leverage. Threats focus on sharing the material to group chats, relatives, or professional circles unless a quick payment is made. Victims often panic due to the apparent involvement of real acquaintances. India Angle: Indians connect heavily via WhatsApp for personal and group chats. Scammers exploit this by targeting both urban and semi-urban populations across states. UPI, Paytm, and PhonePe are standard payment options, and the scam is prevalent in regions like Uttar Pradesh, Tamil Nadu, and Maharashtra. Real Examples: - "This is you, right? Should I send this to your family group? Pay ₹18,000 right now!" - "Your friend sent this. Now, send ₹10,000 to save yourself." (From a spoofed contact) - "React fast or the video goes to every number in your phonebook." Red Flags: - Contacts suddenly messaging from unusual/new numbers - Uncharacteristic language or out-of-context conversation - Quick escalation to accusations or blackmail from people you know - Payment solicitations for reputational protection Protective Measures: - Confirm any strange or urgent messages from friends using a separate direct call - Carefully verify new numbers pretending to be old contacts - Avoid responding to blackmail or paying any sum - Keep WhatsApp photos and status private; review privacy settings - Report and block suspicious numbers immediately If Victimised: - Save the chat history and scammer’s number - Don’t pay; seek help from friends, family, and authorities - Immediately report to cybercrime.gov.in and 1930 helpline - Notify your bank if you transferred money Related Scams: - WhatsApp account takeover scams - SIM-swap attacks followed by reputation blackmail - Fake police/extortion calls via WhatsApp
How This Scam Works — Detailed Explanation
The WhatsApp Deepfake Impersonation Racket finds its victims primarily among the vast user base of WhatsApp in India. Scammers often scrape social media profiles and other public platforms where individuals post images and personal details. After gathering seemingly harmless images from the victim or their network, the scammer creates a fake profile or uses a new number to approach the target under the guise of a friend, family member, or classmate. This tactic establishes an initial level of trust as the conversations often start benignly, with the scammer engaging the victim in casual chat before pivoting to more threatening topics.
Once contact is established, the scammer employs various psychological tricks to manipulate the victim. They may send blurred or morphed explicit images linked to the victim's name, warning that if the victim does not comply with their demands, they will share the content with mutual contacts. This sudden shift from friendly conversation to a reputational threat aims to induce panic and shame in the victim. Scammers often use relatable narratives, claiming that they have been victimized or that the content was unintended, generating sympathy and a sense of urgency to comply with payment requests to safeguard personal reputation.
Victims caught in this scheme typically experience a disorienting step-by-step plunge into panic. Initially, they might receive messages that seem harmless, then shocking images appear, followed by blackmail demanding money via UPI or Paytm. For instance, a victim living in Pune received a message from a contact on WhatsApp using a new number, claiming to be a friend who had made a mistake. Once under the threat of exposing fake explicit images, the victim, feeling helpless and fearing judgment from peers, transferred ₹50,000 using UPI to the scammer, believing it would resolve the issue. Unfortunately, upon making the transfer, many victims realize too late that the scammers may continue to harass them for more money.
The real-world impact of the WhatsApp Deepfake Impersonation Racket is staggering. In India, losses due to online scams including UPI fraud have surged in recent years, reaching alarming figures of approximately ₹30,000 crore by the end of 2023. This has drawn the attention of various regulatory bodies such as the Ministry of Home Affairs (MHA), Reserve Bank of India (RBI), and the Computer Emergency Response Team (CERT-In), who have issued advisories warning users about such schemes. The psychological and financial toll on victims goes beyond the money lost, often leaving them in states of depression, distrust, and shame.
To spot this scam amid legitimate communications, look for red flags: messages from new numbers claiming to be friends or relatives, abrupt shifts to threats of reputational harm, and blurry images or videos that seem out of character for the communications you receive. If asked for payments to preserve social standing or avoid public shame, this is a significant indicator of a scam. Authentic friends and family will never threaten you for money, and if someone genuinely needs help, they will approach you directly through verified means of communication.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does WhatsApp Deepfake Impersonation Racket Target?
General public across India
Red Flags — How to Identify WhatsApp Deepfake Impersonation Racket
- Messages from new numbers claiming to be friends or relatives
- Sudden shift to reputational threats
- Blurred explicit photos allegedly linked to your name
- Payment requested to preserve social standing
What To Do If You Encounter WhatsApp Deepfake Impersonation Racket
- Report the incident to the cybercrime helpline by dialing 1930 or visiting cybercrime.gov.in.
- Inform your friends and family about the scam to prevent them from becoming victims.
- Change your WhatsApp privacy settings to 'My Contacts' to limit visibility of your profile photo and status.
- Do not engage further with the scammer; block their number immediately.
- Document all conversations and screenshots of the threats received for reporting.
- Contact your bank or digital payment provider immediately if you've sent money, to discuss potential recovery.
How to Report WhatsApp Deepfake Impersonation Racket in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately contact your bank's customer service, such as SBI at 1800-11-1109 or HDFC at 1800-202-6161, and report the fraud.
- How can I identify the WhatsApp Deepfake Impersonation Racket?
- Look for messages from unfamiliar numbers claiming to be someone you know, abrupt threats, blurry images, and requests for money.
- How can I report this type of scam in India?
- You can report the scam by calling the national cybercrime helpline at 1930, visiting cybercrime.gov.in, or directly contacting your bank.
- What are the recovery steps after falling for this scam?
- Reach out to your bank to discuss recovery options, report to the cybercrime helpline, and change your passwords and security settings to protect your accounts.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.