A homemaker in Indore opens an SMS: “earn ₹3,000/day from home, simple task, reply YES”. She joins a Telegram group, completes three small tasks, and receives ₹50 in her UPI inside ten minutes. The trainer asks her to deposit ₹5,000 to “unlock” the next slab. She deposits. Twenty minutes later she is moved to a “VIP group” and asked for ₹25,000, then ₹80,000, then locked out with ₹2.4 lakh of family savings gone. This is the work-from-home task scam, the largest cyber-fraud archetype in India in 2026. This page is the operational money-recovery playbook, distinct from the Telegram part-time job scam guide because it covers the broader WhatsApp, SMS, Instagram, and fake-portal variants targeting homemakers, students, retired citizens, and gig workers in every Indian district.
🟡 Citizen Crisis Response Network, first 30-minute checklist
Stop further deposits the moment one task fails or one payout stalls. Dial 1930 within 60 minutes. File NCRP at cybercrime.gov.in. Disable UPI, lock cards, save every screenshot. Never pay any “recovery fee” to any caller claiming to be from cyber police. The window where 60 to 80 percent of money is recoverable is the first 72 hours.
A work-from-home task scam in 2026 is a layered cheating fraud where the victim is paid a small sum (₹50 to ₹500) for a “task” (likes, ratings, dummy bookings) and is then induced to deposit escalating amounts (₹5,000, ₹25,000, ₹80,000) to unlock “higher slabs”, until access is locked and the operator vanishes. Legal frame: BNS 2024 §318 (cheating) and §316 (criminal breach of trust), IT Act 2000 §66C (identity theft) and §66D (cheating by personation by computer resource), IT (Intermediary Guidelines) Rules 2021 Rule 3(2) for takedown, and the RBI 2017 Master Direction on Limiting Liability for refund. Recovery flow: dial 1930 within 60 minutes, file NCRP, freeze UPI, send the bank a written notice, escalate to the RBI Banking Ombudsman under RB-IOS 2021 at cms.rbi.org.in or 14448, file an FIR under BNS §§318 + 316 plus IT Act §§66C + 66D, and file an RTI under RTI Act 2005 §6(1) to MeitY and I4C for KYC of the recipient account.
Any one of the following triggers a cheating prosecution under BNS §318 plus IT Act predicates: unsolicited WhatsApp, Telegram, SMS, or Instagram offer of ₹1,000 to ₹10,000 per day with no interview or hiring; employer identified only by a first name, photo, or Telegram handle, no GST or address; first task paid in full (₹50 to ₹500) to build trust, second requires a “deposit”; tasks are likes, ratings, dummy hotel bookings, or “VIP merchant” purchases; payouts move through a chat-group “wallet” the operator controls; escalating “VIP slabs” of ₹5,000, ₹25,000, ₹80,000; withdrawal “blocked” by fake tax, system error, wrong slab; operator threatens that a “negative balance” must be cleared by fresh deposit before withdrawal.
🟡 Warning No legitimate Indian employer in 2026 demands money from an employee for daily tasks. The Code on Wages 2019 bars employers from charging workers as a hiring precondition. If money flows from worker to employer, it is a scam.
🟡 Trust signal Shreya Singhal v. Union of India (2015) 5 SCC 1 fixed the procedure for content takedown under IT Act §79. Avnish Bajaj v. State (NCT of Delhi) (2008) 150 DLT 769 confirms platform officers can be summoned for hosted content used in cheating. Both are the doctrinal foundation for a takedown notice against the operator's WhatsApp or Telegram group.
First 5 minutes. Stop all communication with the operator (any reaction is later cited as “agreement”). Screenshot every chat, UPI debit, payout SMS, and group; forward to your own email to lock timestamps. In the bank app, disable UPI, drop per-transaction limit to ₹1, lock cards for online use. Disconnect the device from Wi-Fi or mobile data if any “task app” was installed.
Next 30 minutes. Dial 1930. State name, mobile, bank, UPI handles paid to, exact amounts, time of each debit, operator's WhatsApp or Telegram handle. You receive an I4C complaint number. File on cybercrime.gov.in under Online Financial Fraud with screenshots, bank statement, mandate-creation SMS. Email the bank's nodal officer with subject “Unauthorised UPI debit, refund demand under RBI Master Direction 2017 + IT Rules 2021 Rule 3(2)”. Change net-banking password and UPI PIN; sign out of banking apps from all devices.
Within 24 hours. Run TAFCOP at tafcop.sancharsaathi.gov.in for unknown SIMs in your name. Pull a CIBIL or CRIF report for fraudulent loans or BNPL. File at MeitY Sahyog meity.gov.in. Lodge a police FIR under BNS §§318 + 316 and IT Act §§66C + 66D, carrying the NCRP acknowledgement and bank statement.
🟡 Warning Within 12 to 48 hours of your initial complaint, expect a fresh call from a “Cyber Crime Police Officer” or “Recovery Specialist” offering to recover your money for a fee. This is the second-stage scam run by the same network using NCRP data, also seen in the fake customer-care number scam. Real I4C and police never ask for OTP or payment. Hang up and re-file NCRP.
NCRP plus 1930 national helpline; WhatsApp Grievance Officer [email protected] under Rule 3(2)(b) IT Rules 2021; Telegram abuse [email protected] plus in-app report; Instagram in-app report and [email protected] for organised pages; MeitY Sahyog for organised cyber-fraud; CERT-In [email protected] for malicious APK or domain; Sanchar Saathi sancharsaathi.gov.in for fraudulent caller-ID and SMS sender-ID; TAFCOP for unknown SIMs in your name; National Commission for Women if the victim is a woman and the operator used coercion; Senior Citizen Helpline 14567 for senior citizens.
Case: Priya Sharma, 27, Pune. On 2026 February 11 at 10.47 a.m. Priya received a WhatsApp message from a “+62” number offering ₹3,000 a day for liking YouTube videos. Three tasks paid ₹150 to her HDFC UPI. The fourth task asked for ₹5,000 to unlock a “merged combo task” worth ₹15,000. She paid through PhonePe, then ₹25,000, then ₹78,000. The Telegram group went silent at 4.12 p.m. Total loss: ₹1,08,000. She dialled 1930 at 4.31 p.m., 19 minutes after the channel vanished. Acknowledgement at 4.38 p.m.; freeze reached the receiving Yes Bank account at 5.04 p.m.; ₹62,400 was still in the mule wallet and was lien-marked. She filed FIR No. 0067/2026 at Pune Cyber Police Station next morning under BNS §318 and IT Act §66D, and an RTI on 2026 February 17 to the Yes Bank CPIO under §6(1) RTI Act 2005. The bank replied on 2026 March 9 with the mule's name and PAN. On 2026 April 22 the magistrate ordered refund of ₹62,400. Net recovery: 57.7 percent in 70 days. She is pursuing the balance through the Banking Ombudsman.
To, The Grievance Officer
[Bank Name], [Branch]
Date: DD-MM-2026
Subject: Unauthorised UPI debits arising from work-from-home
task fraud, a/c [XXXX1234], refund demand under RBI
Master Direction 2017 + IT Rules 2021 Rule 3(2)
I write under Rule 3(2) of IT Rules 2021 and the RBI 2017
Master Direction on Limiting Liability of Customers in
Unauthorised Electronic Transactions to dispute these debits:
Date Time Amount UPI handle
DD-MM-2026 HH:MM ₹__________ ____________@____
I was solicited on WhatsApp / Telegram / SMS on DD-MM-2026
with an offer of ₹3,000 per day for "online tasks", and was
induced by deception to deposit the amounts above as "VIP
slab unlock" payments. After the third deposit the operator's
chat group locked me out and the operator vanished.
Filed:
(a) NCRP complaint no. _________ on DD-MM-2026.
(b) FIR no. _________ at _________ Police Station on
DD-MM-2026 under BNS 2024 §§318 + 316 and IT Act 2000
§§66C + 66D.
Requests:
1. Immediate freeze of recipient accounts via I4C
coordination; written report within 7 days.
2. Refund assessment under RBI Master Direction 2017.
3. Confirmation no AutoPay or e-mandate exists on my
UPI ID without my fresh consent.
4. Disclosure of recipient bank, branch, and account
holder name under the Banker's Books Evidence Act 1891.
If unresolved in 30 days I shall escalate to the RBI Banking
Ombudsman under RB-IOS 2021 and to the District Consumer
Disputes Redressal Commission under the Consumer Protection
Act 2019.
[Name, mobile, email, Aadhaar last 4 digits]
To: [email protected] / [email protected] Subject: Takedown of work-from-home task scam network under Rule 3(2) of IT Rules 2021 I, [Name], mobile +91-XXXXXXXXXX, report: 1. Unsolicited message on DD-MM-2026 from +91-YYYYYYYYYY / @username offering ₹3,000 per day for "online tasks". 2. Operator moved me to Telegram group "[name]" with approx [N] members on DD-MM-2026. 3. I was induced to deposit ₹__________ to UPI handle [____________@____] under "VIP slab" unlock pretext. 4. FIR no. __________ and NCRP complaint no. __________ under BNS §§318 + 316 and IT Act §§66C + 66D. Under Rule 3(2)(b) and 3(2)(c) of IT Rules 2021, please suspend the sender's account and the operator's group immediately, add the script template and UPI handles to your known-scam corpus, and acknowledge within 24 hours with resolution in 15 days. [Name, address, contact]
The Right to Information Act 2005 applies to MeitY, the Indian Cybercrime Coordination Centre (I4C, MHA), and NPCI for policy data. The following §6(1) application compels disclosure.
The Public Information Officer
Ministry of Electronics and IT / I4C, MHA / NPCI
Subject: Application under §6(1) of the RTI Act 2005
I, [Name], request the following:
1. Total NCRP / 1930 complaints under "work from home
task scam" in FY 2024-25 and 2025-26.
2. Amount reported defrauded under this category and
amount frozen or recovered through I4C inter-bank
coordination.
3. Number of takedown notices issued by MeitY under
IT Act §69A and IT Rules 2021 Rule 3(1)(d) to
WhatsApp / Telegram / Instagram for these groups
in the last 24 months.
4. Fraudulent UPI handles flagged to NPCI and
de-registered in FY 2025-26 under this category.
5. Any advisory or SOP issued by MeitY / I4C / NPCI
to banks for accelerated recipient-account freezing.
6. Grievance Officer for cyber-fraud with contact, per
IT Rules 2021 Rule 3(2).
Fee of ₹10 enclosed by IPO no. ______. Reply within 30
days under §7(1). Transfer under §6(3) if needed.
[Name, address, contact]
Run the draft through the PIO Reply Checker before posting.
Yes. BNSS 2024 §173 mandates registration of every cognisable offence regardless of amount. NCRP at 1930 accepts complaints from ₹500 upwards, and smaller losses are easier to recover because the mule account often still holds the funds.
Yes. The cheating actus reus occurred in India because the victim transferred money from an Indian bank account, and BNS §318 read with BNSS §197 confers jurisdiction on the police station of the victim's residence.
The bank may argue contributory negligence under the RBI 2017 Master Direction. The counter is that consent obtained by deception is voidable under §19 of the Indian Contract Act 1872. Cite the Master Direction in writing and escalate to the Banking Ombudsman if stonewalled.
Yes. Refusal is itself actionable under BNSS §175. If the SHO refuses, move the jurisdictional Magistrate Court for a direction.
Direct civil action is hard, but takedown is mandatory under IT Rules 2021 Rule 3(2). Shreya Singhal and Avnish Bajaj frame the boundary: a non-acting intermediary loses the safe-harbour shield under IT Act §79.
Cyber slavery involves trafficking victims to Cambodia or Myanmar to operate the scam. The WFH task scam targets you as the victim from your home in India. Same syndicates, opposite roles.
Three checks. First, the offer comes through a portal where you applied. Second, the company is a registered entity (CIN on mca.gov.in, office address, HR on a corporate-domain email). Third, no money flows from you to the employer at any stage.
Statutes and case-law. BNS 2024 §§316, 318, 319 at indiacode.nic.in; IT Act 2000 §§43, 66, 66C, 66D at meity.gov.in; IT (Intermediary Guidelines) Rules 2021 Rules 3(1)(d), 3(2), 4(2); RBI 2017 Master Direction on Limited Liability; RB-IOS 2021; RTI Act 2005 §§6(1), 6(3), 7(1), 19(1); Consumer Protection Act 2019 §§35, 38. Shreya Singhal v. Union of India (2015) 5 SCC 1; Avnish Bajaj v. State (NCT of Delhi) (2008) 150 DLT 769; Lalita Kumari v. State of UP (2014) 2 SCC 1; Indian Medical Association v. V.P. Shantha (1995) 6 SCC 651; Pioneer Urban Land v. Govindan Raghavan (2019) 5 SCC 725.
Official portals. cybercrime.gov.in (NCRP plus 1930); cms.rbi.org.in (RBI Banking Ombudsman, 14448); meity.gov.in (MeitY Sahyog); mha.gov.in (I4C); sancharsaathi.gov.in and TAFCOP; consumerhelpline.gov.in (1915); edaakhil.nic.in; ncs.gov.in; PIB Fact Check; Senior Citizen Helpline 14567.
Tools on this site. AI RTI Drafter for the §6(1) request to the bank or cyber cell; First Appeal Builder for §19(1) escalation; PIO Reply Checker to test the bank's §8 denial.
Related guides. Telegram part-time job scam · Cyber slavery and compound job fraud · Fake immigration consultancy scam · Scholarship scam · Fake customer-care number scam · Weekend Problem Solver · Citizen Crisis Response Network · RTI Act 2005 complete guide.
A work-from-home task scam in 2026 begins with a ₹3,000-a-day SMS and ends, often inside 24 hours, with a family's savings emptied by ₹2 to ₹25 lakh. The defence is the eight-red-flag screen before you say yes, and the 60-minute 1930-plus-NCRP-plus-bank-notice drill if the worst happens. Save 1930, 14448, and 14567 in every family contact list. Bookmark this page for the next forwarded WhatsApp job message and share with every homemaker, student, retired citizen, and gig worker you know. Last reviewed 2026-05-09; next review 2026-08-07.
<script type=“application/ld+json”> {
"@context": "https://schema.org",
"@type": "Article",
"headline": "Work-from-Home Task Scam: Money Recovery Steps (2026)",
"description": "Work-from-home task scam on WhatsApp, Telegram, SMS: ₹50 paid, then ₹5,000 deposit demand, then locked out. Money recovery via NCRP 1930, BNS, RBI guide 2026.",
"author": {"@type": "Organization", "name": "RTI Wiki Citizen Crisis Response Network"},
"publisher": {"@type": "Organization", "name": "RTI Wiki", "url": "https://righttoinformation.wiki"},
"datePublished": "2026-05-09",
"dateModified": "2026-05-09",
"mainEntityOfPage": "https://righttoinformation.wiki/wfh-task-scam-money-recovery-india",
"about": [
{"@type": "Thing", "name": "Work from home task scam"},
{"@type": "Thing", "name": "NCRP 1930"},
{"@type": "Thing", "name": "RBI Master Direction 2017"},
{"@type": "Thing", "name": "BNS Section 318"}
]
} </script>