Digital arrest scam: Spot fake ED / cyber-official calls fast

How the scam works (step by step)

Victims usually get a call or WhatsApp message claiming they are under a money‑laundering or terror‑funding probe. The caller says you are under “digital arrest” and cannot approach others; they may share a fake FIR, letterhead or a video call where someone in uniform threatens arrest.

Next, the fraudster instructs the victim to “cooperate” by transferring money to a bank/UPI account or by installing remote‑access apps (to copy bank OTPs or sign transactions). They often ask for KYC, bank details, OTPs, UPI PIN or request you to move money to a “safe” government account for verification. They keep the victim isolated, call repeatedly and sometimes show forged documents that look official. Multiple recent cases in India show victims—including senior citizens—lost lakhs and crores this way. ([hindustantimes.com](https://www.hindustantimes.com/cities/mumbai-news/eds-2-6cr-digital-arrest-probe-uncovers-417cr-cyber-fraud-network-2-held-101787587481188-amp.html?utm_source=openai))

Red flags to spot

• Caller pressures you to act immediately or threatens arrest if you do not comply.
• They ask for OTP, UPI PIN, net‑banking password or ask you to install remote‑control apps.
• They demand transfers to private or multiple bank accounts, wallets, or ask you to buy gift cards/crypto.
• They use generic email IDs, WhatsApp numbers or show forged PDFs that look ‘official’ but have spelling/format errors.
• They insist the matter cannot be discussed with family or your lawyer.
• They call from a local or mobile number and claim to be from ED/CBI/RBI; real agencies do not make arrests on video or ask for money over phone. ([indiatoday.in](https://www.indiatoday.in/amp/cities/mumbai/story/digital-arrest-scam-mumbai-police-arrest-six-after-dahisar-senior-citizen-loses-rs-1-12-crore-2997232-2026-09-17?utm_source=openai))

Also read: How to report a digital arrest scam in India

Exact caller scripts and message examples

Below are real‑style examples used by scammers. Treat these as red flags.

How to verify any ‘official’ contact in minutes

1. Do not follow any instruction in the incoming call. Stay calm and end the call.
2. Find the agency’s official helpline from its website—not the number shown on the caller ID. Call that number and ask to confirm the call details. Examples: Enforcement Directorate and local police have published helplines; use the contact on the agency’s official site or government phone directory. ([hindustantimes.com](https://www.hindustantimes.com/cities/mumbai-news/eds-2-6cr-digital-arrest-probe-uncovers-417cr-cyber-fraud-network-2-held-101787587481188-amp.html?utm_source=openai))
3. Call the National Cyber Crime Helpline 1930 (available in India) for immediate advice and to register a complaint. Also use the portal cybercrime.gov.in to file a digital complaint. These reports help law enforcement act quickly. ([m.rediff.com](https://m.rediff.com/news/commentary/2026/nov/03/mp-six-held-for-cheating-retired-bsnl-employee-of-lakhs/016743bcbbce08ea88cd8b99bbbd0c4e?utm_source=openai))
4. Ask for the officer’s name, badge number and email. Then call the official helpline and give them those details. Real officials will never ask for OTPs, UPI PINs or bank logins on phone.
5. If the caller sent an official‑looking document, don’t assume it’s real. Agencies issue notices by post or through their verified portals—rarely via WhatsApp PDFs. Check the document against the agency’s notice formats and verify via official contact. ([hindustantimes.com](https://www.hindustantimes.com/cities/mumbai-news/digital-arrest-75-year-old-woman-duped-of-19-24-crore-after-four-months-of-intimidation-by-fake-officials-101773427880155.html?utm_source=openai))

What to do if you have been targeted

Act fast. Every minute counts when money transfers may still be in process.

Immediate steps (first 1 hour)

1. End the call. Do not give more information.
2. Call your bank’s customer care and ask them to block any pending NEFT/RTGS/IMPS/UPI transactions and freeze outgoing transfers. Ask for a written acknowledgement/reference number.
3. Dial 1930 (National Cyber Crime Helpline) and report the call. File a complaint at the cybercrime.gov.in portal and note the complaint ID. ([m.rediff.com](https://m.rediff.com/news/commentary/2026/nov/03/mp-six-held-for-cheating-retired-bsnl-employee-of-lakhs/016743bcbbce08ea88cd8b99bbbd0c4e?utm_source=openai))
4. Visit or call your local police cyber cell and file an FIR. Provide call logs, WhatsApp/chat screenshots, sender numbers and banking transaction details.

Evidence to collect for police / ED / bank disputes

• Screenshots of WhatsApp/Telegram messages, PDFs and any shared documents (save originals if possible).
• Call logs showing incoming numbers and timestamps. Ask your telecom provider for call records if needed.
• Bank statements showing debits / beneficiary accounts and UPI transaction IDs. Note exact amounts, times and beneficiary names.
• Names, numbers and rough script of what the caller said. Record your memory immediately in writing with times.
• Device screenshots of any remote‑access app prompts and the app name. Do not uninstall until police ask, but disconnect internet and change passwords if remote access was given. ([hindustantimes.com](https://www.hindustantimes.com/cities/mumbai-news/eds-2-6cr-digital-arrest-probe-uncovers-417cr-cyber-fraud-network-2-held-101787587481188-amp.html?utm_source=openai))

Templates you can use quickly

Bank dispute request (short):

“I received a coercive phone call impersonating government officials and was forced to transfer funds. Please freeze/recall the following transactions immediately: [date/time], [amount], [UPI Txn ID/Beneficiary]. Complaint registered with cybercrime (ID: ___) and local police (FIR no: ___). Please acknowledge.”

Police/cyber complaint note (short):

“On [date/time] I received a call from [+91‑xxxx] claiming to be from [ED/Mumbai Police]. They coerced me to transfer ₹[amount] to [bank/UPI id]. Attached: call logs, screenshots, transaction statements. Request FIR and investigation.”

How to stay safe (prevention)

• Never share OTPs, UPI PINs or net‑banking passwords over phone or WhatsApp. Banks never ask for these.
• Do not install remote‑control apps for strangers. If asked to, refuse and contact police immediately.
• Tell family or a trusted friend if you get such a call—scammers rely on isolation.
• Keep a printed list of official helplines (local police, 1930, your bank) and verify any unusual demand through those numbers.
• Report suspicious calls and numbers to the cyber helpline and your bank—quick reports help freeze mule accounts and trace networks. Recent ED and police probes show coordinated networks and many mule accounts are used to move stolen funds. ([hindustantimes.com](https://www.hindustantimes.com/cities/mumbai-news/eds-2-6cr-digital-arrest-probe-uncovers-417cr-cyber-fraud-network-2-held-101787587481188-amp.html?utm_source=openai))