If a SMS or WhatsApp message claims your DHL, FedEx, or India Post parcel is held by Customs and demands ₹2,500 to ₹15,000 via UPI for clearance, treat it as a scam. Real Customs never collects duty through UPI links sent on WhatsApp. In April 2026, Sneha Reddy from Hyderabad lost ₹11,800 to a fake India Post Customs SMS that asked her to click a link and pay clearance for a parcel she never ordered. She froze the UPI mandate within 14 minutes, filed NCRP 1930 the same evening, and recovered ₹9,200 in 47 days. The scam works because the message arrives during office hours, mimics official sender IDs, and uses small enough amounts that victims pay before verifying.
🟡 Citizen tip , Most weekend complaints fail not because the law is weak but because evidence gets lost in the first hour. Photograph everything before you call any helpline.
🟡 Most citizens miss this , Save the sender phone number as a contact before reporting; once you forward to 1909 and block, the chat may move to your Spam folder and the original timestamp metadata can be lost.
The fastest channel is the National Cyber Crime Reporting Portal at cybercrime.gov.in or the helpline 1930. Both are operated by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs. Within 60 minutes of the fraudulent debit, 1930 can request the beneficiary bank to freeze the disputed amount under the Citizen Financial Cyber Fraud Reporting and Management System.
For SMS or WhatsApp impersonation, also file Chakshu on sancharsaathi.gov.in (Department of Telecommunications). For UPI specific issues, raise a dispute inside your UPI app under Help, then escalate to the National Payments Corporation of India through npci.org.in if not resolved in 30 days. For courier impersonation (a real DHL or FedEx brand being misused), email the company fraud desk: [email protected], [email protected], [email protected].
🟡 Citizen tip , File NCRP first, then bank, then courier. The NCRP acknowledgement number is the master reference all other agencies will ask for, including the police station.
Tier 1 (Day 0 to 7): NCRP 1930, your bank fraud helpline, courier company grievance email, and local police cyber cell. Most reversal of frozen funds happens at this tier.
Tier 2 (Day 8 to 30): RBI Banking Ombudsman at cms.rbi.org.in if your bank refuses to credit the disputed amount under RBI Master Direction on Customer Service. Senior Superintendent of Police (Cyber) at the district level for FIR follow-up. State Consumer Helpline 1915 for service deficiency by the courier brand.
Tier 3 (Day 31 onwards): District Consumer Disputes Redressal Commission via edaakhil.nic.in for refund and compensation. CBI Cyber Crime wing through cbi.gov.in if loss exceeds ₹10 lakh or involves cross-border transfer. Writ petition to the High Court under Article 226 if state agencies remain inert beyond 90 days.
To, The Officer-in-Charge, Cyber Crime Police Station, [District] Through: National Cyber Crime Reporting Portal (cybercrime.gov.in) Subject: FIR request for online financial fraud through fake Customs clearance SMS, ₹[Amount] debited on [Date] Respected Sir or Madam, I, [Name], aged [Age], resident of [Full Address], holder of Aadhaar [last 4 digits] and PAN [number], wish to report a cyber fraud committed against me on [Date] at approximately [Time]. I received an SMS or WhatsApp message from [Sender ID or Number] claiming that my parcel from [DHL or FedEx or India Post] was held by Customs and a clearance fee of ₹[Amount] was payable via UPI. Believing the message to be genuine, I paid ₹[Amount] through UPI transaction reference [UTR] from my account [last 4 digits] in [Bank Name] to VPA [scammer VPA]. On verifying the official courier tracking portal, no such parcel exists in my name. I realised the fraud at [Time] and immediately filed NCRP complaint number [NCRP No]. I request registration of FIR under sections 318, 319, and 336 of the Bharatiya Nyaya Sanhita 2024, read with sections 66C and 66D of the Information Technology Act 2000, and recovery of the defrauded amount. Enclosed: SMS screenshot, bank statement, UPI transaction screenshot, NCRP acknowledgement. Yours faithfully, [Name] [Phone] [Email] [Date]
To, The Central Public Information Officer, Indian Cyber Crime Coordination Centre (I4C), Ministry of Home Affairs, NDCC II Building, Jai Singh Road, New Delhi 110001 Subject: Application under section 6(1) of the Right to Information Act 2005 Sir or Madam, I, [Name], resident of [Address], request the following information regarding my NCRP complaint number [NCRP No] dated [Date] for a fraudulent UPI transaction of ₹[Amount] arising from a fake Customs clearance SMS: 1. Status of the lien or hold placed on the beneficiary VPA [VPA] and beneficiary bank account, with date of communication to the bank. 2. Copy of the action-taken report sent by the assigned police station to NCRP. 3. Number of identical fake Customs clearance SMS complaints received by NCRP in the last 12 months in [State], with average resolution time. 4. Standard Operating Procedure followed by I4C for golden-hour freeze of disputed funds. 5. Details of any inter-bank or inter-state communication issued in my case. Application fee of ₹10 is enclosed by Indian Postal Order number [IPO No] in favour of the Accounts Officer. I declare that I am a citizen of India. Yours faithfully, [Name] [Phone] [Email] [Date]
DCDRC ≤₹50 lakh, State ≤₹2 cr, NCDRC > ₹2 cr, fee ₹100, edaakhil.nic.in. For fraud claims, FIR + NCRP is the primary path; e-Daakhil is the parallel civil track.
🟡 Do this immediately , Disable UPI auto-debit and reduce per-transaction limit to ₹1 the moment a financial dispute opens.
Login to RTI Wiki to download the printable PDF checklist for this article.
No. Genuine Customs duty on imported parcels is collected by the courier (DHL, FedEx, India Post) at the time of delivery, or paid through the ICEGATE portal using an Importer Exporter Code. Customs never sends a UPI collect request, never asks for clearance fees on WhatsApp, and never threatens parcel destruction within hours. Section 47 of the Customs Act 1962 prescribes a formal bill of entry process, not a SMS link.
Yes, partial or full recovery is possible if you act fast. File NCRP 1930 within 60 minutes for the best chance of beneficiary account freeze. Then approach your bank under RBI Master Direction on Limited Liability of Customers, which caps customer loss at zero if reported within three working days for transactions due to third-party fraud. Recovery typically takes 30 to 90 days.
Scammers use SMS header spoofing services and bulk sender IDs that mimic real brands. Section 66D of the IT Act 2000 punishes cheating by personation using a computer resource with up to three years imprisonment. The Department of Telecommunications has rolled out the Digital Intelligence Platform under Sanchar Saathi to flag such headers, but enforcement lags. Always verify on the brand official website, never trust the sender ID alone.
You can file a complaint against the courier under section 2(11) of the Consumer Protection Act 2019 if you can show their grievance redressal failed, but you cannot hold them liable for impersonation by third parties unless their internal data was leaked. The Supreme Court in Spring Meadows Hospital v Harjol Ahluwalia (1998) 4 SCC 39 set the standard for service deficiency that still guides modern consumer benches.
Approach the Superintendent of Police in writing under section 173(4) of the Bharatiya Nagarik Suraksha Sanhita 2023. If still ignored, file a complaint under section 175 of the BNSS before the Judicial Magistrate, who can direct registration. Refusal by police to register a cognizable offence FIR was held mandatory in Lalita Kumari v State of UP (2014) 2 SCC 1 and remains the controlling precedent.
Possibly. Clicking a phishing link can install a tracker or expose your phone number and IP. Run a security scan, change your UPI PIN and net banking password, enable two-factor authentication on email, and check your CIBIL report for any new credit enquiry. File a Chakshu complaint on sancharsaathi.gov.in. Section 43A of the IT Act 2000 read with the Digital Personal Data Protection Act 2023 covers data protection liability.
The 1930 helpline acts within minutes for the fund freeze request to the beneficiary bank. Investigation by the assigned police station typically begins in 7 to 15 days. Refund of frozen funds requires either a court order or a no-claim certificate from the scammer side, which is rare; most refunds are processed by the bank under the customer liability framework, taking 30 to 90 days.
Yes. Under section 35 of the Consumer Protection Act 2019, one or more consumers having the same interest may file a joint complaint before the District Commission with permission. For criminal action, group complaints under section 154 of the BNSS speed up FIR registration. Coordinate through verified RTI Wiki community channels, not random WhatsApp groups, to avoid further phishing.
The fake Customs clearance scam works because it imitates a familiar transaction at a small enough amount to lower your guard. The legal toolkit (BNS 2024 sections 318 and 336, IT Act 2000 section 66D, Consumer Protection Act 2019, RBI Master Direction on customer liability, Customs Act 1962) is strong, but only if you preserve evidence in the first hour. NCRP 1930 plus a same-day FIR is the difference between a 47-day refund and a closed file. The Citizen Crisis Response Network has 100 guides covering exactly these weekend emergencies, with sample texts ready to copy.