Fake Courier Customs Held Scam: Recovery Steps India 2026

Last reviewed: 1 September 2026.

If a SMS or WhatsApp message claims your DHL, FedEx, or India Post parcel is held by Customs and demands ₹2,500 to ₹15,000 via UPI for clearance, treat it as a scam. Real Customs never collects duty through UPI links sent on WhatsApp. In April 2026, a Hyderabad resident — an illustrative account, not a named person — lost ₹11,800 to a fake India Post Customs SMS that asked her to click a link and pay clearance for a parcel she never ordered. She froze the UPI mandate within 14 minutes, filed NCRP 1930 the same evening, and recovered ₹9,200 in 47 days. The scam works because the message arrives during office hours, mimics official sender IDs, and uses small enough amounts that victims pay before verifying. This guide also covers related frauds including the courier delivery OTP scam, the broader courier package scam ecosystem, and cash-on-delivery parcel fraud.

Understanding the scam flow is the first step to recognising and blocking it. The fraud follows a predictable five-stage pattern that cyber-criminal syndicates operate at scale using automated bulk-messaging tools and SIM-box infrastructure.

1. Stage 1 — Target acquisition. Scammers obtain leaked phone numbers from e-commerce data breaches, restaurant delivery apps, or phishing databases. They prioritise numbers that have recent online shopping activity, because the victim is more likely to believe a parcel notification is genuine. The fake KYC update scam uses the same leaked-number playbook.
2. Stage 2 — Message delivery. A bulk SMS or WhatsApp message is sent using a spoofed sender ID such as DLT-DHL or IndiaPost. The message claims that a parcel addressed to the victim is held by Customs and a clearance fee must be paid within 24 hours or the parcel will be returned or destroyed. This is identical in psychology to the fake electricity bill disconnection scam.
3. Stage 3 — Fake payment page. The message contains a shortened link that opens a phishing page mimicking the DHL, FedEx, or India Post website. The page asks the victim to enter UPI PIN or approve a UPI collect request for ₹2,500 to ₹15,000. Some variants install screen-sharing malware (see the fake app removal guide).
4. Stage 4 — Fund extraction. Once the victim approves the UPI collect or enters PIN, the money is instantly transferred to a mule account. The mule account is drained within minutes through a chain of secondary transfers or cryptocurrency conversion, making recovery time-critical. The bank account freeze guide covers the lien process in detail.
5. Stage 5 — Secondary phishing. Even after the initial payment, scammers may call posing as Customs officers demanding additional GST, penalty, or storage fees. This mirrors the escalation pattern seen in the digital arrest scam, where successive demands drain the victim progressively.

🟡 Citizen tip All these scams share one common thread: urgency + payment link. No legitimate government department, courier company, or lottery sends UPI payment links via SMS. The moment you see both urgency and a payment link, stop and verify on the official website typed manually in your browser.

1. Take screenshot of the issue, the conversation, and the receipt or transaction page.
2. Note the exact time and the transaction ID, booking ID, or reference number.
3. Do not delete any chat messages, emails, app history, or notification SMS.
4. Raise the complaint on the official app or portal first (in-app help, grievance email).
5. Escalate to NCH 1915, NCRP 1930, or the regulator only after you have saved proof.

🟡 Citizen tip: Most weekend complaints fail not because the law is weak but because evidence gets lost in the first hour. Photograph everything before you call any helpline.

Scammers rely on victims not recognising the warning signs. The following red flags, individually or in combination, should trigger immediate suspicion:

1. UPI or payment link in the message. Genuine Customs duty is never collected via UPI collect requests or payment links sent by SMS. The Central Board of Indirect Taxes and Customs (CBIC) collects duty through ICEGATE at icegate.gov.in using a formal bill of entry, not a phone link. See cbic.gov.in for the official Customs framework.
2. Threat of parcel destruction or return within hours. Customs does not impose arbitrary deadlines communicated via WhatsApp. Section 47 of the Customs Act 1962 provides for a formal assessment and duty payment process with statutory timelines, not SMS ultimatums.
3. Sender ID that mimics a brand but is slightly off. Look for DHL-INDIA instead of the official DHL header, or IndiaPostCustoms instead of IndiaPost. The Department of Telecommunications has documented spoofed sender IDs extensively on sancharsaathi.gov.in.
4. WhatsApp message from an unknown international number. Scammers frequently use +92 (Pakistan), +1 (USA), or +44 (UK) numbers. The Ministry of Home Affairs has issued advisories on this pattern via mha.gov.in.
5. Poor grammar or formatting. Many phishing messages have inconsistent capitalisation, spelling errors, or formatting that no legitimate corporate communication department would release.
6. Demand for OTP, KYC documents, or remote access. No legitimate Customs or courier process requires OTP, Aadhaar OTP, or screen-sharing app installation. If asked, it is phishing — see the fake KYC update scam guide.

1. Stop, do not click the link. Real couriers and Customs send official tracking numbers, not UPI collect requests. If you have already clicked, do not enter OTP, card, or UPI PIN. Close the browser and switch off mobile data for 60 seconds to break any auto-redirect chain.
2. Verify on the official tracking portal directly. For India Post type the tracking number on indiapost.gov.in. For DHL use dhl.com tracking, for FedEx use fedex.com tracking, for Blue Dart bluedart.com. If no parcel exists in the official system, the SMS is a scam regardless of how legitimate the sender ID looks.
3. If you already paid, freeze the payment channel within 30 minutes. Open your UPI app, go to autopay or mandates, and revoke any new mandate created in the last 24 hours. Call your bank's 24×7 fraud helpline (SBI customers: 1800-1234 or 1800-1111-09 for unauthorised transactions; for other banks use the number printed on the back of your card or in the bank's official app) and ask them to flag the transaction under Reserve Bank of India circular RBI/2017-18/15 dated July 6, 2017 on limited customer liability for unauthorised electronic transactions, available at rbi.org.in. Detailed steps are in our RBI zero-liability refund guide.
4. File NCRP within 60 minutes for the golden hour benefit. Go to cybercrime.gov.in, choose Report Other Cyber Crime, then Online Financial Fraud. The 1930 helpline can place a temporary lien on the beneficiary account if you call within the golden window of 60 minutes. See the 1930 helpline call script for what to say.
5. File the police FIR under BNS, 2023 sections 318 (cheating), 319 (cheating by personation), and 336 (forgery), read with sections 66C and 66D of the IT Act 2000. Take the NCRP acknowledgement to the local cyber cell or nearest police station. If police refuse to register the FIR, escalate to the Superintendent of Police under section 173(4) of the BNSS, 2023, and to the Magistrate under section 175(3). See NCRP vs police station — which to file first.
6. Block the SIM and report the sender. Forward the scam SMS to 1909 (TRAI spam reporting) and report the WhatsApp number inside WhatsApp by long-pressing the chat and choosing Report. File a Sanchar Saathi complaint on sancharsaathi.gov.in under the Chakshu facility for suspicious communications.
7. Notify Customs only if a real parcel is involved. Genuine Customs duty is paid through ICEGATE (icegate.gov.in) by logging in with the IEC code, never through a UPI collect request to a citizen. If the SMS quotes a real airway bill, email the courier compliance team in writing and keep the email as evidence. For genuine gold or valuables import rules, see bringing gold to India Customs rules.

• Full screenshot of the scam SMS or WhatsApp message showing sender number and timestamp
• Screenshot of the fake payment page or UPI collect request
• Bank passbook entry or UPI app screen showing the debited amount and beneficiary VPA
• UPI transaction reference number (UTR) and the exact debit timestamp
• Screenshot from the official courier tracking portal proving the parcel does not exist
• Call log if you spoke to the fake Customs officer, with duration and number
• Aadhaar and PAN copy for KYC at the police station and bank
• Cancelled cheque or bank account passbook for refund routing
• Copy of the NCRP acknowledgement number once filed
• Copy of the FIR or zero FIR receipt from the police station

🟡 Most citizens miss this: Save the sender phone number as a contact before reporting; once you forward to 1909 and block, the chat may move to your Spam folder and the original timestamp metadata can be lost.

The fastest channel is the National Cyber Crime Reporting Portal at cybercrime.gov.in or the helpline 1930. Both are operated by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs (mha.gov.in). Within 60 minutes of the fraudulent debit, 1930 can request the beneficiary bank to freeze the disputed amount under the Citizen Financial Cyber Fraud Reporting and Management System.

For SMS or WhatsApp impersonation, also file Chakshu on sancharsaathi.gov.in (Department of Telecommunications). For UPI specific issues, raise a dispute inside your UPI app under Help, then escalate to the National Payments Corporation of India through npci.org.in if not resolved in 30 days. For courier impersonation (a real DHL or FedEx brand being misused), email the company fraud desk: [email protected], [email protected], [email protected].

🟡 Citizen tip: File NCRP first, then bank, then courier. The NCRP acknowledgement number is the master reference all other agencies will ask for, including the police station.

Multiple agencies share jurisdiction over fake courier customs scams. Knowing which one does what speeds up resolution and avoids duplicate filings:

• Indian Cyber Crime Coordination Centre (I4C), Ministry of Home Affairs — Operates the NCRP portal and 1930 helpline. Handles fund-freeze requests, assigns complaints to state cyber cells. Official site: mha.gov.in. The I4C is the central node under the Cyber and Information Security Division.
• Central Board of Indirect Taxes and Customs (CBIC) — The actual authority for Customs duty collection. Any genuine Customs duty dispute goes through CBIC, not through SMS. Official site: cbic.gov.in. ICEGATE (icegate.gov.in) is the CBIC e-payment portal.
• Reserve Bank of India (RBI) — Governs the customer liability framework for unauthorised electronic transactions. If your bank refuses the zero-liability refund, escalate to the RBI Ombudsman at cms.rbi.org.in. See the Banking Ombudsman guide for step-by-step filing.
• Department of Telecommunications (DoT) — Operates Sanchar Saathi and the Chakshu module for reporting spoofed sender IDs and suspicious communications. Official site: sancharsaathi.gov.in. DoT can disconnect fraudulent SIMs and block sender headers.
• Department of Posts (India Post) — If the scam impersonated India Post specifically, file at indiapost.gov.in grievance portal or email [email protected].
• State Cyber Crime Cells / Police — Investigate and register FIRs under BNS, 2023 and IT Act sections. Every state has a dedicated cyber crime unit.
• National Payments Corporation of India (NPCI) — For UPI-specific disputes. Escalate at npci.org.in if the bank or UPI app provider does not resolve within 30 days.

Tier 1 (Day 0 to 7): NCRP 1930, your bank fraud helpline, courier company grievance email, and local police cyber cell. Most reversal of frozen funds happens at this tier.

Tier 2 (Day 8 to 30): RBI Banking Ombudsman at cms.rbi.org.in if your bank refuses to credit the disputed amount under the RBI circular on limiting customer liability. Senior Superintendent of Police (Cyber) at the district level for FIR follow-up. National Consumer Helpline 1915 for service deficiency by the courier brand.

Tier 3 (Day 31 onwards): District Consumer Disputes Redressal Commission via e-jagriti.gov.in for refund and compensation. CBI Cyber Crime wing through cbi.gov.in if loss exceeds ₹10 lakh or involves cross-border transfer. Writ petition to the High Court under Article 226 if state agencies remain inert beyond 90 days.

To,
The Officer-in-Charge,
Cyber Crime Police Station, [District]
Through: National Cyber Crime Reporting Portal (cybercrime.gov.in)

Subject: FIR request for online financial fraud through fake Customs clearance SMS, ₹[Amount] debited on [Date]

Respected Sir or Madam,

I, [Name], aged [Age], resident of [Full Address], holder of Aadhaar [last 4 digits] and PAN [number], wish to report a cyber fraud committed against me on [Date] at approximately [Time].

I received an SMS or WhatsApp message from [Sender ID or Number] claiming that my parcel from [DHL or FedEx or India Post] was held by Customs and a clearance fee of ₹[Amount] was payable via UPI. Believing the message to be genuine, I paid ₹[Amount] through UPI transaction reference [UTR] from my account [last 4 digits] in [Bank Name] to VPA [scammer VPA].

On verifying the official courier tracking portal, no such parcel exists in my name. I realised the fraud at [Time] and immediately filed NCRP complaint number [NCRP No].

I request registration of FIR under sections 318, 319, and 336 of the Bharatiya Nyaya Sanhita 2023, read with sections 66C and 66D of the Information Technology Act 2000, and recovery of the defrauded amount.

Enclosed: SMS screenshot, bank statement, UPI transaction screenshot, NCRP acknowledgement.

Yours faithfully,
[Name]
[Phone] [Email]
[Date]

To,
The Central Public Information Officer,
Indian Cyber Crime Coordination Centre (I4C),
Ministry of Home Affairs,
NDCC II Building, Jai Singh Road,
New Delhi 110001

Subject: Application under section 6(1) of the Right to Information Act 2005

Sir or Madam,

I, [Name], resident of [Address], request the following information regarding my NCRP complaint number [NCRP No] dated [Date] for a fraudulent UPI transaction of ₹[Amount] arising from a fake Customs clearance SMS:

1. Status of the lien or hold placed on the beneficiary VPA [VPA] and beneficiary bank account, with date of communication to the bank.
2. Copy of the action-taken report sent by the assigned police station to NCRP.
3. Number of identical fake Customs clearance SMS complaints received by NCRP in the last 12 months in [State], with average resolution time.
4. Standard Operating Procedure followed by I4C for golden-hour freeze of disputed funds.
5. Details of any inter-bank or inter-state communication issued in my case.

Application fee of ₹10 is enclosed by Indian Postal Order number [IPO No] in favour of the Accounts Officer.

I declare that I am a citizen of India.

Yours faithfully,
[Name]
[Phone] [Email]
[Date]

DCDRC ≤₹50 lakh, State ≤₹2 cr, NCDRC > ₹2 cr, filing fee NIL up to ₹5 lakh and ₹200 for claims of ₹5–10 lakh, e-jagriti.gov.in. For fraud claims, FIR + NCRP is the primary path; e-Daakhil is the parallel civil track. See the consumer court filing guide for the full procedure.

🟡 Do this immediately: Disable UPI auto-debit and reduce per-transaction limit to ₹1 the moment a financial dispute opens.

The legal framework for prosecuting fake courier customs scams draws from multiple statutes. Knowing the exact sections strengthens your FIR and any subsequent legal action:

• Bharatiya Nyaya Sanhita (BNS) 2023:
  • Section 318 (Cheating): Dishonest inducement to deliver property. Core charge for the UPI payment fraud.
  • Section 319 (Cheating by Personation): Pretending to be a Customs officer or courier representative. Punishable with up to 5 years imprisonment.
  • Section 336 (Forgery): Creating fake Customs notices, clearance certificates, or courier documents. Punishable with up to life imprisonment depending on severity.
  • If police refuse to register your complaint: Escalate to the Superintendent of Police under section 173(4) of the BNSS 2023, or to the Judicial Magistrate under section 175(3).
• Information Technology Act 2000:
  • Section 66C (Identity Theft): Using another person's identity fraudulently. Up to 3 years imprisonment and ₹1 lakh fine.
  • Section 66D (Cheating by Personation using Computer Resource): Sending fraudulent messages via electronic means. Up to 3 years imprisonment.
  • Section 43A (Compensation for Failure to Protect Data): If a company's data breach led to your number being leaked.
• Customs Act 1962, Section 47: Prescribes the formal procedure for payment of Customs duty through bill of entry, not SMS links. Impersonating a public servant, including a Customs officer, is a separate offence under the Bharatiya Nyaya Sanhita 2023.
• Consumer Protection Act 2019, Section 2(11) and Section 35: Deficiency in service and class action complaints.
• Digital Personal Data Protection Act 2023: Covers liability for unauthorised use of personal data, including leaked phone numbers.

Key precedents:

• Lalita Kumari v State of UP (2014) 2 SCC 1 — Registration of FIR for cognizable offences is mandatory.
• Spring Meadows Hospital v Harjol Ahluwalia (1998) 4 SCC 39 — Standard for service deficiency in consumer disputes.
• Reserve Bank of India circular RBI/2017-18/15 dated July 6, 2017 — Zero customer liability for unauthorised electronic transactions reported within 3 working days. Available at rbi.org.in.

Sender ID spoofing is the technical backbone of the fake courier customs scam. Understanding how it works helps you understand why the sender ID alone cannot be trusted:

• Bulk SMS with forged headers: Scammers use international SMS gateways and SIM-box infrastructure to send messages with headers like DHL-IND or IndiaPost. The Telecom Regulatory Authority of India (TRAI) requires DLT (Distributed Ledger Technology) registration for all commercial headers, but fraudsters bypass this using grey-route international gateways.
• WhatsApp Business API misuse: Scammers register WhatsApp Business accounts with fake business verification documents, then send messages with the WhatsApp green tick occasionally appearing due to verification gaps. Meta has been cracking down, but the volume is enormous.

1. International number spoofing: Many fake Customs messages originate from +92, +1, or +44 numbers routed through VoIP gateways. The Ministry of Home Affairs has flagged this in advisories available at mha.gov.in.

• URL shortener obfuscation: Scammers use services like bit.ly, tinyurl, or custom domains like india-post-customs.xyz to disguise phishing links. Always hover (on desktop) or long-press (on mobile) to preview the actual URL before tapping.
• The DoT countermeasure — Digital Intelligence Platform: Under the Sanchar Saathi initiative (sancharsaathi.gov.in), the Department of Telecommunications has deployed the Digital Intelligence Platform to cross-reference and block fraudulent SIMs and headers in near-real-time. Citizens reporting through Chakshu directly feed this system.

• National Cyber Crime Reporting Portal: cybercrime.gov.in (helpline 1930) — operated by I4C, Ministry of Home Affairs
• Ministry of Home Affairs: mha.gov.in — parent ministry for I4C and cyber crime policy
• Sanchar Saathi Chakshu module: sancharsaathi.gov.in — report spoofed sender IDs
• India Post official tracking: indiapost.gov.in — verify parcel existence
• ICEGATE Customs duty payment: icegate.gov.in — the only legitimate Customs duty portal
• CBIC (Central Board of Indirect Taxes and Customs): cbic.gov.in — Customs authority
• RBI Complaint Management System: cms.rbi.org.in — banking ombudsman escalation
• RBI Master Directions: rbi.org.in — customer liability framework
• e-Daakhil consumer court filing: e-jagriti.gov.in
• CBI Cyber Crime: cbi.gov.in — for high-value or cross-border cases

Prevention is the most effective defence. These measures significantly reduce your exposure to courier and customs phishing:

1. Never pay any fee via a link received by SMS or WhatsApp. Type the official website URL manually in your browser. For Customs duty, always go to icegate.gov.in directly. This single habit blocks most phishing attempts.
2. Enable SIM-based call filtering. Most telecom operators (Jio, Airtel, Vi) offer free spam-call filtering. Activate it through your operator app. Report every scam SMS to 1909 and every suspicious number on sancharsaathi.gov.in.
3. Set a low daily UPI transaction limit. Reduce your UPI per-transaction limit to ₹5,000 or lower if you do not regularly make large payments. This limits the damage if you are ever tricked. Your bank app or UPI app has this setting under Profile or Bank Accounts.
4. Disable UPI autopay mandates you did not create. Review all active mandates in your UPI app under Autopay or Mandates. Revoke any you do not recognise immediately. See the credit line on UPI guide for understanding how mandates work.
5. Do not install screen-sharing or remote-access apps (AnyDesk, TeamViewer, RustDesk) at the request of a caller claiming to be from Customs or a courier. These apps give full phone access. If already installed, follow the fake app removal guide.
6. Verify every parcel notification independently. If you receive a courier SMS, open the courier's official app or website separately and enter the tracking number. Never click the link in the SMS itself. This applies to DHL, FedEx, India Post, Blue Dart, DTDC, and all others.
7. Educate family members, especially seniors. The digital arrest scam and courier scams disproportionately target elderly family members who may be less familiar with phishing tactics. Share this guide with them.

Banks sometimes reject zero-liability refund claims citing customer negligence or delayed reporting. If this happens:

1. Request the rejection in writing. Ask your bank branch for a formal written rejection citing the specific clause under their Customer Protection Policy. Verbal rejection is not sufficient for escalation.
2. Cite RBI circular RBI/2017-18/15 dated July 6, 2017. The RBI framework states that customer liability is zero if unauthorised electronic transactions are reported within 3 working days, and capped between ₹5,000 and ₹25,000 depending on the account type if reported within 4–7 working days. The full text is at rbi.org.in. See our dedicated bank refused cyber fraud refund guide.
3. File a complaint with the RBI Ombudsman. Go to cms.rbi.org.in, select Banking Ombudsman, and upload your bank's rejection letter plus your NCRP acknowledgement. The Ombudsman typically issues a decision within 30 days. See the Banking Ombudsman filing guide.
4. File a consumer complaint. Under the Consumer Protection Act 2019, deficiency in banking service is actionable at the District Consumer Commission via e-jagriti.gov.in. The filing fee is NIL for claims up to ₹5 lakh and ₹200 for claims of ₹5–10 lakh. See how to file in consumer court.
5. File an RTI with the bank's CPIO. Ask for the bank's internal SOP on handling RBI zero-liability claims, the number of zero-liability claims accepted and rejected in the last 12 months, and the reason code for your rejection. Banks are public authorities under RBI regulation for RTI purposes if they are nationalised. See the RTI application guide.

Online shopping and parcel delivery are now routine for a large share of urban Indians, creating a wide pool of people who are expecting courier notifications at any given time. The scam exploits:

1. Recency bias: If you ordered something last week, a “parcel held” message feels timely, not random.

2. Authority intimidation: Words like “customs,” “legal action,” “penalty waived if paid today” trigger compliance.

3. Low cognitive load: Clicking a link requires less effort than opening the courier app, logging in, and searching by AWB.

4. Sender-ID spoofing: TRAI's measures against spoofed commercial-SMS headers block many fake IDs, but scammers rotate sender IDs frequently or use Unicode lookalikes (FEḌEX with a dotted D).

5. Social proof: WhatsApp forwards from “a friend who got their parcel” normalise the fake link as safe.

Many victims later say they felt “something was off” but feared missing a genuine delivery, especially high-value items like electronics or perishable goods.

Most citizens miss this — Legitimate couriers in India (Blue Dart, DHL, FedEx, India Post) never send payment links via SMS. Customs duty for international parcels is collected only at the post-office counter or via the ICEGATE portal (https://www.icegate.gov.in/) for registered importers, never through third-party links.

Minute 0–5:

1. Do not close the browser tab. Take a full-page screenshot (Ctrl+Shift+S on Firefox; Cmd+Shift+4 on Mac). 2. Copy the URL from address bar into Notes app. 3. Turn on Airplane Mode to prevent further automated OTP requests.

Minute 5–15:

4. Call your bank's 24×7 fraud helpline (printed on the back of your debit/credit card). Say: “Unauthorised transaction suspected; request immediate card block and chargeback under the RBI Master Direction on Digital Payment Security Controls 2021.” 5. Call 1930—the national cybercrime helpline. You will receive an acknowledgment number and instructions to file an online complaint at https://cybercrime.gov.in/.

Minute 15–120:

6. File a zero-FIR at the nearest police station (Bharatiya Nagarik Suraksha Sanhita 2023 section 173 allows FIR registration at any station regardless of jurisdiction; the FIR is then transferred to the cyber-cell having jurisdiction over your residence). 7. Forward the scam SMS to 1909 (TRAI's spam reporting number). 8. Register a complaint on the National Consumer Helpline portal (https://consumerhelpline.gov.in/) against the payment gateway if a debit has already posted.

Hour 2–24:

9. File a written complaint with your bank's nodal officer (name and email on the bank's website under “Grievance Redressal”). Cite the RBI circular DBR.No.Leg.BC.78/09.07.005/2017-18 (Limiting Liability of Customers in Unauthorised Electronic Banking Transactions), which provides for zero customer liability where the unauthorised transaction is reported promptly and there is no customer negligence. 10. Email the real courier company's fraud team (for example, the security/fraud address listed on the courier's official website) with screenshots; they maintain blacklists shared with law enforcement.

Citizen tip — If the fraudulent transaction shows as “pending,” call your bank repeatedly until they convert it to a disputed transaction. Once it moves from pending to posted, chargeback windows under card-network rules become tighter.

Ministry of Home Affairs (MHA) Indian Cybercrime Coordination Centre (I4C): Operates the 1930 helpline and the cybercrime.gov.in portal, and coordinates with banks to freeze mule accounts linked to financial-fraud complaints. Verify I4C advisories on https://cybercrime.gov.in/.

Reserve Bank of India (RBI) — customer liability for unauthorised transactions (circular DBR.No.Leg.BC.78/09.07.005/2017-18, 6 July 2017): Zero liability if the unauthorised transaction is reported promptly (within the timeline specified in the circular) and there is no customer negligence; limited liability in a defined slab if reported a few days later; and the bank must credit a provisional/shadow reversal within the period prescribed pending investigation. Read the circular text on https://www.rbi.org.in/ and your bank's customer-protection policy for the exact day-counts and slabs.

Case-law on electronic evidence: In State of Maharashtra v. Dr. Praful B. Desai (2003) 4 SCC 601, the Supreme Court held that evidence may be recorded by video-conferencing in a criminal trial — that “presence” of a witness need not be physical presence in the courtroom. This matters to cyber-fraud prosecutions because witnesses, bank officials, and experts located in another city or country can testify remotely, which is often the only practical way to bring evidence in cross-jurisdiction online-fraud cases.

Telecom enforcement: TRAI's framework requires telecom operators to verify and control commercial-SMS sender headers and to act on consumer complaints; non-compliant headers can be blocked at the network level. Report violations through https://www.trai.gov.in/.

Warning — Even if the police freeze the first mule account, fraud proceeds are often moved through several layered wallets very quickly, so full recovery cannot be assumed. Prevention remains the primary defence.

- Pressing 1 / 9 to talk to “the officer” — the second stage activates only after you confirm interest. Just hang up.

1. Believing the parcel reference number — it's fake but designed to look real.
2. Transferring money “to clear customs” — there is no such verification deposit.
3. Paying with UPI / IMPS thinking “I'll dispute later” — most fraud accounts get drained within 1 hour.
4. Engaging on video to “prove your innocence” — they record you for blackmail.
5. Trusting a fake court summons or fake CBI letter sent over WhatsApp.
6. Believing real police would call you on Skype / Zoom — they don't.
7. Going to “recovery” Telegram groups — all are second-stage scammers.
8. Telling family AFTER paying — tell BEFORE so they can stop you.

• 🛡️ Weekend Problem Solver, 15 emergency topics hub
• 🛡️ Citizen Crisis Response Network, 100 guides
• 📮 Courier delivery OTP scam
• 💰 Cash-on-delivery parcel fraud complaint
• ☎️ Fake customer-care number scam
• 🛂 Digital arrest / fake notice scam
• 🚨 Digital arrest scam: 7-minute rescue
• 🏦 Banking Ombudsman + RBI route
• 🛑 Bank refused cyber fraud refund
• ⚖️ NCRP vs police station
• 📞 1930 helpline call script
• 💸 Recover money sent to wrong account
• ⚡ Electricity bill disconnection scam
• 🚗 Fake e-Challan WhatsApp scam
• 🪪 Fake KYC update scam
• 📱 Remove fake/malware apps from phone
• 🥇 Bringing gold to India: Customs rules
• ⚖️ Consumer court e-Daakhil guide
• 📚 RTI application format
• 💳 Credit line on UPI guide
• 🪄 AI RTI Drafter
• 📬 PIO Reply Checker
• The RTI Playbook

Login to RTI Wiki to download the printable PDF checklist for this article.

No. Genuine Customs duty on imported parcels is collected by the courier (DHL, FedEx, India Post) at the time of delivery, or paid through the ICEGATE portal (icegate.gov.in) using an Importer Exporter Code. Customs never sends a UPI collect request, never asks for clearance fees on WhatsApp, and never threatens parcel destruction within hours. Section 47 of the Customs Act 1962 prescribes a formal bill of entry process, not a SMS link. The Central Board of Indirect Taxes and Customs (CBIC, cbic.gov.in) is the sole authority for Customs duty assessment and collection.

Yes, partial or full recovery is possible if you act fast. File NCRP 1930 within 60 minutes for the best chance of beneficiary account freeze. Then approach your bank under the RBI circular on limiting liability of customers (RBI/2017-18/15, July 6, 2017), which caps customer loss at zero if reported within three working days for transactions due to third-party fraud. Recovery typically takes 30 to 90 days. If your bank refuses, escalate to the RBI Ombudsman at cms.rbi.org.in — see our dedicated guide for bank-refused refunds.

Scammers use SMS header spoofing services and bulk sender IDs that mimic real brands. Section 66D of the IT Act 2000 punishes cheating by personation using a computer resource with up to three years imprisonment. The Department of Telecommunications has rolled out the Digital Intelligence Platform under Sanchar Saathi (sancharsaathi.gov.in) to flag such headers, but enforcement lags. Always verify on the brand official website, never trust the sender ID alone. See our section above on how scammers spoof sender IDs for the technical details.

You can file a complaint against the courier under section 2(11) of the Consumer Protection Act 2019 if you can show their grievance redressal failed, but you cannot hold them liable for impersonation by third parties unless their internal data was leaked. The Supreme Court in Spring Meadows Hospital v Harjol Ahluwalia (1998) 4 SCC 39 set the standard for service deficiency that still guides modern consumer benches. See the consumer court filing guide for the full procedure.

Approach the Superintendent of Police in writing under section 173(4) of the Bharatiya Nagarik Suraksha Sanhita 2023. If still ignored, file a complaint under section 175 of the BNSS before the Judicial Magistrate, who can direct registration. Refusal by police to register a cognizable offence FIR was held mandatory in Lalita Kumari v State of UP (2014) 2 SCC 1 and remains the controlling precedent. See NCRP vs police station — which to file first.

Possibly. Clicking a phishing link can install a tracker or expose your phone number and IP. Run a security scan, change your UPI PIN and net banking password, enable two-factor authentication on email, and check your CIBIL report for any new credit enquiry. File a Chakshu complaint on sancharsaathi.gov.in. Section 43A of the IT Act 2000 read with the Digital Personal Data Protection Act 2023 covers data protection liability. If you accidentally installed an app, follow the fake app removal guide immediately.

The 1930 helpline acts within minutes for the fund freeze request to the beneficiary bank. Investigation by the assigned police station typically begins in 7 to 15 days. Refund of frozen funds requires either a court order or a no-claim certificate from the scammer side, which is rare; most refunds are processed by the bank under the customer liability framework, taking 30 to 90 days. The I4C operates under the Ministry of Home Affairs (mha.gov.in).

Yes. Under section 35 of the Consumer Protection Act 2019, one or more consumers having the same interest may file a joint complaint before the District Commission with permission. For criminal action, group complaints under section 173 of the BNSS speed up FIR registration. Coordinate through verified RTI Wiki community channels, not random WhatsApp groups, to avoid further phishing.

There is no official government database-leak checker, but you can take these steps: check sancharsaathi.gov.in for any SIMs issued in your name without your knowledge using the Know Your Mobile Connections feature. Check your email at HaveIBeenPwned.com for known data breaches. If your number appears in multiple breaches, assume scammers have it and be extra vigilant. Enable spam filtering on your messaging app and report every suspicious message to 1909.

No. Losses from cyber fraud are not deductible under the Income Tax Act 1961 as a personal loss. Capital losses are deductible only against capital gains, and personal theft or fraud losses are not deductible under any provision of the Act. However, if you recover the amount later, it is not taxable as income since it is a recovery of your own capital, not new income. Focus on recovery through NCRP, banking ombudsman, and legal channels rather than tax treatment.

The fake customs courier scam demands an upfront UPI payment for a fictitious customs clearance fee (typically ₹2,500–₹15,000). The courier OTP delivery scam, by contrast, tricks you into sharing an OTP that the scammer uses to authorise a transaction from your account, or to activate a SIM swap. The customs scam is about getting you to pay; the OTP scam is about getting you to authorise a payment you did not initiate. Both require reporting to NCRP 1930, but the OTP variant additionally requires immediate SIM deactivation through your telecom operator.

Partially. WhatsApp messages are end-to-end encrypted, but the phone number and metadata (timestamp, IP at registration) are visible to WhatsApp and can be obtained by law enforcement through formal mutual legal assistance requests. Indian cyber cells routinely request this data from Meta. However, scammers often use disposable virtual numbers or numbers registered with stolen IDs, making the trail cold quickly. The cyber crime complaint guide covers the evidence-preservation steps that improve traceability.

No. Your name and phone number are now “warm leads.” Within a day or two you may receive calls from “courier fraud investigators” or a “cybercrime refund cell” offering to reverse the scam, then asking for your UPI PIN or “verification OTP.” This is a stage-two scam. Block the number, report to 1930, and do not engage. Your number may also be sold to other scam syndicates; expect an uptick in phishing calls. Register DND (send “START 0” to 1909) and enable call-screening on your smartphone.

No. HTTPS only means the connection between your browser and the server is encrypted; it does not verify the legitimacy of the website owner. Scammers obtain free SSL certificates in minutes using automated tools. Always check the domain name in the address bar: “dhl-india-customs.xyz” is fake; “dhl.com” or “dhl.co.in” is real. Bookmark real courier URLs to avoid typo-squatting.

Not necessarily. Under the RBI's framework on customer liability for unauthorised electronic transactions, liability turns on negligence and on how promptly you reported — not merely on whether an OTP was entered after deception. File a written complaint with your bank's nodal officer citing RBI circular DBR.No.Leg.BC.78/09.07.005/2017-18. If there is no satisfactory reply within the prescribed period, escalate to the RBI Ombudsman (https://cms.rbi.org.in/). If the bank still denies, file a complaint before the District Consumer Disputes Redressal Commission under the Consumer Protection Act 2019 (section 69 limitation: two years from the cause of action) for deficiency in service.

Possibly. If the SMS came from an Indian mobile number, the telecom provider can be required to disclose the subscriber details to the police during the investigation. However, many such scams use VoIP or foreign numbers routed through cloud SIP trunks, and tracing those requires mutual legal assistance, which is slow. The real value of the FIR is freezing mule accounts and creating a prosecutable record; cross-border cyber-fraud arrests remain difficult.

You can seek a status update from the investigating officer and the Superintendent of Police (Cyber). You may also file an RTI application under the RTI Act 2005 section 6(1) seeking: (i) the current investigation status, (ii) notices issued and replies received, and (iii) the timeline for the charge-sheet. If there is no response within the statutory period, file a first appeal under RTI Act section 19(1). If money was frozen via CFCFRMS, you may apply for victim compensation under the BNSS 2023 section 396 (State Victim Compensation Scheme); amounts vary by state.