Digital Arrest Scam: 7-Minute Rescue Plan to Stop and Recover (2026 Guide)

A “CBI officer” / “Mumbai Police” / “Customs Department” calls you on video. Says your Aadhaar / parcel / bank account is linked to drug trafficking / money laundering / sextortion. Tells you to stay on call — “this is a digital arrest” — and transfer money for “verification”. This is the digital arrest scam — India's #1 cyber-extortion racket of 2024-2026, costing citizens ₹2,140+ crore in 2024 alone (NCRP data). There is no such thing as digital arrest in Indian law. What you do in the next 7 minutes decides whether you keep your money. This is the working playbook.

• First 60 seconds: HANG UP. Switch off video. Don't argue, don't explain. No Indian law authorises arrest by video call.
• Minute 1-3: lock UPI + freeze online banking. Call your bank, request immediate account block. Lock Aadhaar biometrics at uidai.gov.in.
• Minute 3-7: dial 1930 — Cyber Crime Helpline. File at https://cybercrime.gov.in under Digital Arrest.
• Within 24 hours: register FIR at cyber police station — IT Act §66D + BNS §308 (extortion) + §318.
• Recovery rate: 40-60% if reported within the first hour. Drops to <5% after 24 hours.
• No agency arrests by video. ED, CBI, Police, Customs, NCB, RBI — none. Period.
• Cost: ₹0 anywhere in the recovery process.

1. Minute 1 — Hang up. Switch off video. Do not say anything more on the call. No Indian law agency uses video extortion.
2. Minute 2 — Block the number. Phone settings → Block + Add to spam. Run a Google search of the number — most are flagged on TrueCaller / NCRP.
3. Minute 3 — Lock UPI. Open BHIM/GPay/PhonePe → Profile → Block UPI ID or freeze. Call your bank's helpline → block all online channels.
4. Minute 4 — Lock Aadhaar biometrics at https://uidai.gov.in or m-Aadhaar app. Stops AePS / eKYC misuse if criminals already captured biometrics.
5. Minute 5 — Dial 1930 (24×7). Tell the operator: “Digital arrest scam — caller pretended to be [agency], demanded money / video custody.” Get complaint number.
6. Minute 6 — File at https://cybercrime.gov.in. Choose Other cyber crimes → Digital arrest or Financial fraud if money was paid.
7. Minute 7 — WhatsApp two trusted people. “I'm okay, just got a digital-arrest scam call. FIR filed. If anyone asks for me, ignore.” Cuts off social-engineering attempts on family.

Digital arrest is a cyber-extortion technique where fraudsters impersonate Indian law-enforcement agencies (CBI, ED, Mumbai/Delhi Police, Customs, NCB, RBI, TRAI) over video call — often using WhatsApp / Skype / Zoom — and convince victims that:

1. A parcel in their name contains drugs / fake passports / sex toys.
2. Their Aadhaar number is “linked” to a money-laundering / sex-trafficking case.
3. Their bank account has flagged international transactions.
4. A case is filed at Patiala House / Powai / Cyber Cell.
5. They are now “under digital arrest” — must stay on video, not contact anyone, and transfer money for “verification” which “will be refunded after RBI clearance”.

The call uses props: fake police uniforms, painted backdrops with “Bharat Sarkar” emblems, fake court summons, fake CBI website screenshares, AI-deepfake voices of senior officers.

There is no provision in any Indian law for digital arrest. Any arrest must be physical, in person, with a written warrant under §35 BNSS, 2023 — except cognisable-offence on-spot arrest with documented grounds. CBI / ED can summon in person under CrPC §41A equivalent in BNSS, never via video call.

• Bengaluru engineer transferred ₹1.2 crore in 35 hours of “digital custody” — Sep 2024.
• Mumbai retired professor lost ₹2.5 crore to fake “ED video custody” — Oct 2024.
• Delhi senior citizen (78) lost ₹4.5 crore life savings — Apr 2024.
• NCRB 2024 data: 1,17,000 digital-arrest complaints, ₹2,140 crore lost.
• Top 5 states: Maharashtra, Karnataka, Delhi, Telangana, Tamil Nadu.
• Origin: 80% of call centres traced to Cambodia / Myanmar / Laos — staffed by trafficked Indians.

• BNSS, 2023 §§35-58 — arrest must be in person, with documented grounds.
• No agency (CBI, ED, Police, Customs, NCB, RBI, TRAI, IT Department) conducts video custody.
• Supreme Court has repeatedly held arrest is a serious deprivation of liberty — requires due process. Arnesh Kumar v State of Bihar (2014) 8 SCC 273.

• IT Act §66C — identity theft (3 years + ₹1 lakh).
• IT Act §66D — cheating by impersonation through computer (3 years + ₹1 lakh).
• BNS §308 — extortion (7 years).
• BNS §318 — cheating (7 years).
• BNS §319 — cheating by personation (5 years).
• BNS §351 — criminal intimidation (2 years).
• PMLA §3 — money laundering, if proceeds laundered abroad (10 years + Tribunal).

• PIB Fact Check (https://factcheck.pib.gov.in) has issued 120+ alerts on digital-arrest impersonation since 2023.
• MeitY under §69A IT Act has ordered take-down of 2,800+ digital-arrest call-back domains in 2024.
• Telecom Department + DoT runs Sanchar Saathi (https://sancharsaathi.gov.in) — report fraud calls + numbers.

• RBI Customer Liability Framework, 2017 — zero liability if reported in 3 working days, similar to AePS.
• NPCI dispute for UPI transactions; chargeback for credit card.

1. 1930 dial — tell operator your transaction details. They freeze the destination account (RBI 3-hour windowed freeze).
2. NCRP file at cybercrime.gov.in → Financial fraud → Digital arrest scam.
3. Bank written complaint — invoke RBI Customer Liability Framework §6.3.
4. Lock all online banking + UPI + cards.

1. Cyber police station OR your area police station with cyber referral.
2. Carry: ID, bank statement, NCRP acknowledgement, screenshots of call (if recorded), call log.
3. Sections: IT Act §66C/§66D, BNS §308/§318/§319/§351.
4. eFIR available in: Karnataka, Maharashtra, UP, Delhi, Haryana, Telangana, Punjab, Tamil Nadu, Madhya Pradesh, Kerala (some district-level only).

1. For UPI: NPCI dispute via your bank.
2. For card: file chargeback with bank → forwarded to Visa/Mastercard/Rupay → typical TAT 60-90 days.
3. For NEFT/IMPS: bank-to-bank intervention via RBI's centralised payments system.

1. Open https://sancharsaathi.gov.in → Chakshu (citizen reporting).
2. Report the calling number + screenshot. DoT can revoke the SIM in 24-48 hours.

1. File at https://cms.rbi.org.in if your bank doesn't refund within 90 days for zero-liability case.
2. Order in 60-90 days.

File RTIs to track your case + push action:

• To MeitY: Have any take-down orders been issued under §69A for the domain that hosted the fake “CBI / police” portal at URL [X]; if so, when?
• To CBI (since they are the impersonated agency): Has CBI logged any complaint on impersonation case linked to phone number [X]; status?
• To DoT/TRAI via Sanchar Saathi: Status of Chakshu complaint number [Y] dated [Z]; date the SIM was deactivated.
• To bank: Status of complaint number [W]; date NPCI dispute raised; reply received from beneficiary bank.
• To local police: FIR [No] status; investigating officer; date of next investigation step.

Use the RTI Drafter for these.

1. Staying on the video call — even to “argue with the officer”. Hang up.
2. Transferring “verification” money — no verification refund exists.
3. Telling the scammer “I will not pay” — they escalate to family / employer harassment. Hang up silently.
4. Trusting the website they share-screen — fake CBI / RBI clones with HTTPS. Don't visit.
5. Posting on social media first — file FIR first; the more public detail, the easier for fraudsters to refine the next attempt.
6. Believing “digital arrest is real because the officer wore a uniform” — uniforms can be bought online for ₹500.
7. Paying “for the arrest warrant to be cancelled” — there is no warrant.
8. Going to Telegram “recovery” agents — they are second-stage scammers.
9. Skipping Sanchar Saathi — that's where SIMs get blocked fastest.

• Video call from international / unknown number claiming to be Indian agency.
• “Stay on call, don't tell anyone, don't disconnect” — coercion.
• Demands money for “verification / unfreezing / case closure”.
• Sends a fake court summons / FIR PDF via WhatsApp.
• Claims your Aadhaar is linked to a parcel / drug case — UIDAI does not do this.
• Threatens a CBI raid — CBI uses written §35 BNSS notice, not video.
• “Refund after RBI clearance” promise — RBI doesn't process refunds via individual deposits.

No. No statute or rule under any Indian law authorises arrest by video call. BNSS §35 requires physical arrest with grounds. Anyone who calls you claiming “digital arrest” is a fraudster — full stop.

They send a written §35 BNSS notice (formerly §41A CrPC) by post or in person. Your local police station has the right to verify any notice. Never transfer money “for verification”.

If reported within 1 hour to 1930: 40-60% recovery. Within 24 hours: 20-30%. After 7 days: <5%. Speed is everything. Most recovery happens via inter-bank reversal before the criminals withdraw.

If the destination was a regulated Indian crypto exchange (e.g., CoinDCX, WazirX), the FIU-IND can freeze the wallet if reported with FIR. Outside India: nearly impossible.

If you shared Aadhaar number on the call: lock biometrics at UIDAI. Get an e-Aadhaar masked copy for everyday use. PAN: monitor IT department portal for unusual filings. File PAN block at https://www.incometax.gov.in if needed.

Possible if they recorded the call. Your defensive move: send a 30-second pre-emptive WhatsApp voice message to family — “If you ever receive an audio/video of me asking for money urgently, ignore. Call me on my known number first.”

Most call centres operate from Cambodia / Myanmar / Laos / Dubai — outside Indian jurisdiction. Mutual Legal Assistance Treaty (MLAT) is slow. India is using Sanchar Saathi + MeitY take-down + financial-system controls as faster alternatives.

1930 — Cyber Crime Helpline (24×7). Also 112 (general emergency). For SIM card fraud: TAFCOP / Sanchar Saathi. For DPDP-related (data misuse): Data Protection Board of India (when notified).

Yes — NALSA helpline 15100 + District Legal Services Authority (DLSA) offer free legal aid. Senior Citizens Helpline 14567. Sakhi One Stop Centres for women under DV / cyber harassment.

Your data is leaked from a public source — old data breaches, public registry, EC voter list, leaked hospital DB. The scam mentions personal info to build credibility, not because they have a “case file”. File DPDP complaint at the data fiduciary's DPO + with Data Protection Board.

Better to file it with NCRP + Sanchar Saathi first. Public posts before FIR can compromise investigation. After FIR, post — but mask phone numbers / personal voice fragments.

Hang up. Block. Dial 1930. No warrant is issued in 30 minutes. No video call delivers a warrant. Period.

Yes — Consumer Protection Act, 2019 + Tort law (mental distress). But suing untraceable foreign-based scammers is largely symbolic. The criminal case via FIR is the real remedy.

Sanchar Saathi (DoT) lets you report fraud calls/SMS at Chakshu, block lost SIMs, and see all SIMs issued in your name at TAFCOP. It's the fastest channel to deactivate fraud SIMs (24-48 hours).

• Cyber Crime Complaint in India — full process
• UPI Fraud Recovery — Dial 1930 + RBI 3-day rule
• RTI Drafter — file an RTI to MeitY / CBI / Police
• Loan App Harassment Recovery
• AePS / Aadhaar Biometric Fraud Recovery
• FedEx Courier Parcel Scam Recovery
• Police Powers — what an arrest legally means
• Consumer Court — file online via e-Daakhil

• National Cyber Crime Reporting Portal — https://cybercrime.gov.in
• Sanchar Saathi (DoT) — https://sancharsaathi.gov.in
• PIB Fact Check — https://factcheck.pib.gov.in
• RBI Banking Ombudsman (CMS) — https://cms.rbi.org.in
• MeitY (§69A take-downs) — https://www.meity.gov.in
• NALSA (free legal aid) — 15100 / https://nalsa.gov.in
• CBI (verify any “officer” claim) — https://cbi.gov.in / 011-24368638.

The digital-arrest scam works because it weaponises citizen respect for authority. The defence is simple: no agency arrests by video, ever. Hang up. Block. Lock. Report. The 7-minute plan above has saved citizens from ₹50 lakh+ losses — every minute of delay halves the recovery chance. Share this article with one elder, one student, one worker — that's how the scam dies.

If you need to escalate via RTI to MeitY, CBI, DoT, or your bank, the RTI Drafter auto-generates the right RTI from your case description.

• Bharatiya Nagarik Suraksha Sanhita, 2023 — §35 (arrest), §175 (FIR).
• Bharatiya Nyaya Sanhita, 2023 — §308, §318, §319, §351.
• Information Technology Act, 2000 — §66C, §66D, §69A.
• RBI Customer Liability Framework, 2017.
• NCRB Cyber Crime Report 2024.
• PIB Fact Check archives 2023-2025.
• Arnesh Kumar v State of Bihar (2014) 8 SCC 273.
• Department of Telecommunications — Sanchar Saathi guidelines.

Last reviewed: 5 May 2026 — RTI Wiki editorial team.