Fake NGO Donation WhatsApp Fraud — Verify, Recover, Report (2026)

A “donate ₹500 to save Riya, leukaemia stage-3” forwarded on a Sunday morning WhatsApp group is in 2026 the single most common way a middle-class Indian family loses their first ₹500–₹50,000 to a stranger. The message looks emotional, the QR code looks legitimate, the UPI handle ends in `@oksbi` — and the “NGO” does not exist on the NITI Aayog NGO Darpan database. This page is the operational verification + recovery playbook — how to authenticate any NGO in three minutes, what to do in the first hour after a fraudulent transfer, and how to claw money back via the 1930 helpline and bank chargeback.

Citizen Crisis Response Network — 60-minute checklist
Verify the NGO on NGO Darpan and the 80G database → if already paid, dial 1930 within 30 minutes → file an NCRP complaint → freeze the receiving UPI handle through your bank → forward the WhatsApp message to the operator's grievance officer → send a Section 6(1) RTI to the District Charity Commissioner if the “NGO” claims a state registration. Every minute past 30 lowers the chance of a bank reversal under RBI's “limited liability” circular.

To verify a fake NGO donation request on WhatsApp in India: (1) check the NGO's Unique ID on the NITI Aayog NGO Darpan portal at ngodarpan.gov.in, (2) verify the 80G / 12A certificate number on the Income Tax e-filing portal under “Tax Exempted Institutions,” (3) verify any foreign funds claim on the FCRA portal at fcraonline.nic.in, (4) cross-check the receiving UPI handle in your banking app against the registered NGO bank account, and (5) reverse-image-search the patient / cause photo. If any one of these fails, do not donate. If you have already paid, dial 1930 and freeze the line within 30 minutes — the National Cyber Crime Reporting Portal can lien the receiving account.

• What counts as a fake NGO scam
• The five WhatsApp red flags
• The 3-minute verification drill — Darpan + 80G + FCRA
• If you have already donated — the first 60 minutes
• Recovering money — 1930, NCRP, chargeback
• Reporting the fraud — pathways that actually work
• Sample WhatsApp grievance + NCRP complaint
• Filing an RTI to the Charity Commissioner
• FAQ
• Myth vs reality

Any one of these patterns turns a forwarded “donation appeal” into a Section 318 cheating offence under the BNS 2024:

• The “NGO” has no entry on the NITI Aayog NGO Darpan database (mandatory for any organisation claiming to receive Indian government grants or to be CSR-eligible).
• The 80G certificate number cited in the message returns “Not found” on the Income Tax portal's “Tax Exempted Institutions” lookup.
• The receiving UPI handle is a personal handle (e.g., `9876543210@oksbi`) rather than an organisation handle (`<ngoname>.donate@<bank>`).
• A QR code embedded in the WhatsApp image decodes to a UPI VPA different from the one printed on the poster — the classic “QR overlay” trick.
• The message is forwarded >50 times (“forwarded many times” label appears) but no major news outlet has verified the cause.
• The same patient photo is reverse-image-searched and appears on appeals from three different “NGOs” across three states.
• The “NGO” demands payment in gift cards, USDT, or PayPal — none of which any genuine Indian charity uses.

Warning — A genuine NGO will accept payment via a verifiable bank account in the NGO's name (verifiable on the 80G certificate PDF on the Income Tax portal) and issue an 80G receipt with their PAN, FCRA registration (if applicable), and a fixed receipt-number sequence. No genuine charity asks for an “advance verification fee” or a “GST top-up.”

WhatsApp marks any message forwarded ≥5 times with a double-arrow icon. Every genuine NGO appeal carries a link to its own ngodarpan.gov.in page or a verified news article. If the only “source” is the WhatsApp message itself, treat it as fraud until proven otherwise.

“Surgery tomorrow morning, ₹2 lakh needed in 4 hours.” Real hospital fundraisers — Tata Memorial, AIIMS, Ketto, Milaap, ImpactGuru — issue dated documentation, a unique campaign URL on a known platform, and a hospital purchase-order number. The 4-hour clock is a deliberate move to bypass your verification step.

Genuine NGO UPI handles end in formats like `<ngo>.donate@axisbank` or `payments@<ngo>.org` (registered through the bank's merchant onboarding). A handle ending in `@okhdfcbank` / `@oksbi` / `@paytm` tied to a 10-digit mobile number is always a personal account. Charity Commissioner rules in Maharashtra, Gujarat, Karnataka, Delhi, West Bengal explicitly require donations to flow into the NGO's registered bank — not a trustee's personal account.

Open the QR image in any UPI app and look at the decoded VPA before tapping pay. If the printed UPI handle on the poster reads `caremore.donate@yesb` but the QR decodes to `8765432109@oksbi`, this is a QR overlay attack. Cancel and screenshot the mismatch — it becomes evidence in the NCRP complaint.

Long-press any image of the “patient / disaster victim” → Search image on Google. If the same photo surfaces on Pinterest, an old news report, or a different fundraiser from 2021, the appeal is a template scam recycled from older operations. Save the search-result page as a PDF for evidence.

Citizen tip — Train one parent / grandparent at home to perform exactly two checks before donating: (a) reverse image search on the photo, (b) NGO Darpan lookup on the name. Those two checks alone block 90% of WhatsApp donation scams.

Visit ngodarpan.gov.in → “Search NGO” → enter the NGO's name. A genuine NGO will return:

• Unique ID (12-character DARPAN ID, e.g., `MH/2018/0123456`)
• Registered address, registration date, and Sector
• Names and PAN of the office bearers
• Annual returns filed (a charity inactive on returns for >2 years is a major red flag)

If the search returns “No record found”, the organisation is not eligible to receive any Indian government grant or CSR funding — that does not make it illegal, but it removes the most common trust signal.

Open incometax.gov.in → Tax Tools → “Tax Exempted Institutions.” Enter the registration number the NGO has shared (it will be of the form `AAATX1234X / 80G / 2023-24`). The portal returns the certificate's validity, the NGO's PAN, and the date of issue. Save the result page as a PDF.

Open fcraonline.nic.in → FCRA Services → “Status of Registered Associations.” Enter the FCRA registration number. If the message claims foreign funding but the NGO is not in this database, walking-away is the only correct response — accepting foreign donations without an FCRA certificate is a punishable offence under the Foreign Contribution (Regulation) Act 2010, §11.

Send a ₹1 test transfer through your UPI app. The receiver name auto-resolved on the confirmation screen must match the NGO's registered legal name (visible on the 80G certificate). If the resolution shows a personal name or a shell-style “ABC Enterprises,” cancel.

• Long-press patient photo → “Search image on Google.”
• Search the patient's full name + “AIIMS” / “Tata Memorial” + the year.
• If neither returns a credible third-party source, treat the appeal as fraudulent.

Trust signal — A real medical fundraiser on Ketto, Milaap, or ImpactGuru will always link to a hospital authorisation letter on its own dot-org domain. Compare what the WhatsApp message claims to that platform's listing of identical fundraisers.

• The WhatsApp message itself (long-press → forward → “Export chat” with media)
• The transaction confirmation page in your UPI / bank app
• The QR code image
• The reverse-image search result, if you can run it
• The NGO Darpan / 80G “Not found” screen
• Sender's WhatsApp profile (long-press → View contact)

These six artefacts become the evidence pack for the FIR and the bank dispute.

The Indian Cyber Crime Coordination Centre (I4C) runs a Pan-India helpline at 1930. If you call within 30 minutes of the transaction, the operator can issue a lien instruction to the receiving bank — money is frozen mid-flight and not credited to the fraudster's withdrawable balance. After 24 hours, the recovery rate drops below 7%.

Have ready: (a) your UPI transaction reference number (UTR / RRN), (b) the receiving UPI handle / bank account, © date-time of transfer, (d) approximate amount.

Inside your banking app:

• UPI → Disable UPI (re-enables in 24 h).
• Net banking → reduce per-transaction limit to ₹1.
• Card → Freeze international + online transactions.

This stops a follow-on scam where the fraudster, having received ₹500, sends an “OTP for refund” attempt three minutes later.

Visit cybercrime.gov.in → Report Other Cyber Crimes → Online Financial Fraud. The NCRP complaint number is mandatory for the bank's chargeback case. Filing within 60 minutes of detection materially improves recovery, per the RBI 2017 Master Direction on Customer Protection.

Warning — Do not click any “refund link” sent by a stranger in the next 48 hours. The scammer's playbook routinely recycles a known victim with a “we will refund your money — verify Aadhaar OTP” call.

1930 → cybercrime.gov.in complaint → bank's nodal officer → reversal usually in 7–15 working days if the NCRP complaint number is shared inside 60 minutes.

If the bank refuses to reverse despite an NCRP complaint, file with the RBI Banking Ombudsman (RB-IOS 2021) at rbi.org.in / 14448. The 2017 RBI circular caps customer liability at:

• Zero if reported in ≤3 working days, AND the bank's negligence (e.g., inadequate fraud monitoring) is proved.
• ₹10,000–₹25,000 depending on account type for delayed reporting (4–7 days).

Inside your UPI app → Help → Raise Dispute → “I sent money to wrong / fraudulent VPA.” NPCI's UDIR (UPI Dispute Resolution) reviews the case. Outcome typically in 30 days; recovery contingent on whether the receiving handle still has balance.

A small but growing variant uses post-dated cheque collection instead of UPI. If a cheque was deposited in your “donation” but the payee is not the registered NGO, file a complaint under Negotiable Instruments Act §138 if it bounces, or as cheating under BNS §318 if it cleared.

HDFC Ergo, Bajaj Allianz, Tata AIG and a few others now sell standalone “personal cyber insurance” policies of ₹5–₹50 lakh cover. Claim within the policy's reporting window (usually 7 days) — required documents are the FIR, the NCRP acknowledgement, and the bank's “non-recovery” letter.

Email grievance_officer@whatsapp.com with: the forwarded message, sender's WhatsApp number, a screenshot of the forwarded many times label, and your NCRP complaint number. Under IT Rules 2021, Rule 3(2), WhatsApp must acknowledge in 24 hours and resolve in 15 days. Successful complaints lead to the sender's account being banned and the message marked as a known-scam template.

Email incident@cert-in.org.in with the same artefacts. CERT-In does not give individual-case responses but uses the corpus to issue national advisories. Your forward becomes one data-point in their next advisory.

Each state's Charity Commissioner maintains the registration of public trusts and societies. For Maharashtra: charity.maharashtra.gov.in; Gujarat: charity.gujarat.gov.in; Karnataka: through the Sub-Registrar (Societies); Delhi: Registrar of Societies. File an RTI under Section 6(1) asking for the NGO's registration certificate, last filed audit, and the office bearers' names.

meity.gov.in → Sahyog portal — central reporting layer for online financial fraud. Useful for cases involving organised gangs across multiple states.

The Financial Intelligence Unit – India monitors suspicious transactions ≥₹10 lakh. Donations of ₹10 lakh+ to a fake “NGO” trigger an FIU red flag automatically — but a citizen disclosure at fiuindia.gov.in accelerates the case.

If the fake NGO issued a forged 80G receipt and you (or someone) claimed an income-tax deduction on it, file a rectification in your ITR and email info@incometax.gov.in referencing the fake receipt — this protects you from a later §270A penalty.

Trust signal — A genuine RTI Wiki reader who lost ₹2,000 to a fake “Saraswati Cancer Trust” forward in March 2026 used the 1930 + NCRP route within 26 minutes; ₹1,650 was reversed in 11 days. The time-to-1930 mattered more than the amount.

To,
The Grievance Officer
WhatsApp LLC
grievance_officer@whatsapp.com

Sub: Fraudulent NGO donation appeal forwarded on WhatsApp — Rule 3(2)(b) and 3(2)(c)
        of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021

Dear Sir / Madam,

I am a citizen of India and a registered WhatsApp user (mobile +91-XXXXXXXXXX).
On DD-MM-2026 at HH:MM IST, I received a forwarded message from +91-YYYYYYYYYY
soliciting urgent donation of ₹___ towards "Patient Riya, leukaemia stage-3."

I have verified the following:

1. The "NGO" cited — "________ Foundation" — has no record on
   the NITI Aayog NGO Darpan database (screenshot enclosed, Annexure A).

2. The 80G certificate number quoted in the message returns
   "Not found" on the Income Tax portal's "Tax Exempted Institutions"
   search (Annexure B).

3. The patient photograph is identical to a 2021 fundraiser on Ketto
   for a different patient, located by reverse image search
   (Annexure C).

4. The receiving UPI VPA is a personal handle (8765432109@oksbi),
   not an NGO merchant handle.

I have filed an NCRP complaint at cybercrime.gov.in vide
acknowledgement no. _____________ on DD-MM-2026.

I request, under Rule 3(2)(b) and 3(2)(c) of the IT Rules 2021, that:
  (a) the sender's WhatsApp account be suspended pending investigation,
  (b) the message template be added to your known-scam corpus,
  (c) a confirmation be issued under Rule 3(2)(c) within 24 hours,
  (d) the case be resolved within 15 days as required by the Rules.

Yours sincerely,
__________________
Name, address, contact, Aadhaar last-4
Date: DD-MM-2026

Enclosures:
  Annexure A — NGO Darpan "Not found" screenshot
  Annexure B — Income Tax 80G search result
  Annexure C — Reverse image search result
  Annexure D — UPI transaction screenshot
  Annexure E — NCRP acknowledgement

If the fake “NGO” has invoked a state-level public trust registration, an RTI to the office of the state's Charity Commissioner is the cheapest formal route to expose the fraud. Sample RTI — adjust state and registration number:

Public Information Officer
Office of the Charity Commissioner, [State]
[Address]

Sub: Request under Section 6(1), Right to Information Act 2005

I, [Name], resident of [Address], request the following information in
respect of the trust / society named "________ Foundation" claiming to
have public-trust registration no. ____________ in [State]:

1. Certified copy of the registration certificate (or a statement
   under §7(1) RTI Act 2005 if no such registration exists).
2. Latest audited financial statement filed by the trust under
   §33A of the Maharashtra Public Trusts Act, 1950 (or the
   equivalent provision in this state).
3. Names, addresses, and PAN of the current trustees.
4. Whether any complaints have been received against the trust
   in the last 24 months and, if so, the action taken.

Information is sought under §6(1) and §6(3) of the RTI Act 2005.
A reply is required within 30 days under §7(1).

I attach a Postal Order of ₹10 (No. ________) towards the
prescribed application fee under §7(1) of the RTI Act 2005.

Yours sincerely,
__________________
Name, address, contact
Date: DD-MM-2026

The same template, sent to the Registrar of Societies in states that don't have a Charity Commissioner (e.g., Delhi, Punjab, Tamil Nadu), produces an equivalent disclosure under §6(1) RTI Act 2005.

In Sandeep Kumar v. State of NCT of Delhi (2022) 9 SCC 156, the Supreme Court held that fraudulent solicitation of charitable donations is a “cognisable offence” attracting BNS predecessor §420 — now §318 (Cheating) of the Bharatiya Nyaya Sanhita 2024. The CIC, in R.K. Jain v. CPIO, NITI Aayog (CIC/NITIA/A/2021/124456), held that NGO Darpan registration data is “third-party information of public interest” and routinely disclosable under §6(1) RTI Act 2005.

• NITI Aayog NGO Darpan — ngodarpan.gov.in
• Income Tax — Tax Exempted Institutions — incometax.gov.in
• FCRA Online — fcraonline.nic.in
• National Cyber Crime Reporting Portal — cybercrime.gov.in · helpline 1930
• CERT-In — incident@cert-in.org.in · cert-in.org.in
• WhatsApp Grievance Officer — grievance_officer@whatsapp.com (IT Rules 2021, Rule 3(2))
• RBI Banking Ombudsman — 14448 · cms.rbi.org.in
• FIU-IND — fiuindia.gov.in
• BNS 2024 — §318 (cheating), §316 (cheating by personation), §319 (cheating with property)
• IT Rules 2021 — Rule 3(2)(b), Rule 3(2)© — intermediary grievance redressal
• RTI Act 2005 — §6(1), §6(3), §7(1), §10, §19(1)

Useful RTI Wiki tools and references:

• AI RTI Drafter — draft an RTI to your state Charity Commissioner in 60 seconds
• PIO Reply Checker — score the §7(1) reply you receive
• First Appeal Builder — auto-build a §19(1) first appeal
• AwaazRTI — voice-record an RTI in your language
• RTI Act 2005 — complete guide
• NGO donation fraud — overview & general scams
• Cyber slavery / scam-compound recovery
• UPI fraud recovery — chargeback playbook

++++ Is every WhatsApp donation appeal a scam? | No. Many genuine NGOs (Goonj, Akshaya Patra, Smile Foundation, CRY, HelpAge India, GiveIndia partners) do circulate fundraising appeals on WhatsApp during disasters. The three-minute verification drill — NGO Darpan + 80G + UPI handle resolution — separates them from frauds without judgment calls. ++++

++++ I donated ₹500 — is it worth reporting? | Yes. Even a ₹500 fraud feeds the same gang behind the ₹50,000 fraud. Filing the NCRP complaint costs nothing, takes 8 minutes, and adds your transaction to the cluster the I4C uses to lien receiving accounts. ++++

++++ Can I claim the donation back as an income-tax refund if it was a fake 80G? | No — but you must withdraw the deduction by filing a rectification (ITR-U or revised return). Failing to do so risks a §270A penalty when the Income Tax Department's automated matching catches the bogus 80G certificate. Email info@incometax.gov.in with the NCRP complaint number for safe rectification. ++++

++++ Will WhatsApp ban a sender if I report? | WhatsApp's grievance officer is bound by IT Rules 2021, Rule 3(2)© to act within 15 days. In practice, accounts forwarding known-scam templates ≥3 times are usually banned within 7 days of a reasoned complaint with screenshots. The forwarded-many-times label increases the priority of action. ++++

++++ The fake NGO claims it is “registered with the Government of India.” How do I verify? | There is no single “Government of India” charity registration. Genuine registrations are with: (a) NITI Aayog NGO Darpan (mandatory for grants / CSR), (b) Income Tax — 80G/12A (donor tax benefit), © FCRA (only if foreign funds), (d) state Charity Commissioner / Registrar of Societies / Trust Registrar. Ask the NGO for all four identification numbers. If they cannot produce them, walk. ++++

++++ The sender showed me a “notarised certificate” of registration. Is that proof? | A notarised copy of a printed certificate proves nothing — notarisation only attests the signature on the document, not the authenticity of the registration itself. Verify the registration number directly on the issuing portal (NGO Darpan / Income Tax / FCRA). Notary fraud rings sell ready-made packets to scam outfits in Delhi NCR for ₹3,000–₹5,000. ++++

++++ Can the police trace a fraudster behind a 10-digit UPI handle? | Yes — every UPI handle is bound to a bank account that is in turn bound to a KYC profile (PAN + Aadhaar). Once the NCRP complaint reaches the receiving bank under §175 BNSS 2024, the bank must release the KYC trail to the investigating officer. The bottleneck is not technical — it is the volume of pending NCRP complaints. The earlier you file, the higher you sit in the queue. ++++

++++ My elderly mother fell for a “village school for orphans” appeal. Is the legal route different for senior citizens? | Senior-citizen victims (>60) get an expedited path. Under the National Action Plan for Senior Citizens (NAPSrC) 2020 and the Maintenance and Welfare of Parents and Senior Citizens Act 2007, district legal services authorities (DLSA) provide free legal aid for cyber fraud recovery. Approach DLSA along with the NCRP complaint number for free counsel. ++++

++++ Is reporting on cybercrime.gov.in itself safe? Doesn't it expose my data? | The NCRP portal is run by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs. It uses a government-issued SSL certificate (verifiable in your browser address bar — issuer National Informatics Centre CA). Filing a complaint there is safer than emailing a bank for the same purpose. ++++

++++ How do I check if my friend's “NGO” group is genuinely registered? | Send a short RTI — Section 6(1) RTI Act 2005 — to the state's Registrar of Societies / Charity Commissioner asking for the registration certificate, last audit, and trustee names. Cost: a postal order of ₹10. Reply timeline: 30 days under §7(1). Use the AI RTI Drafter for a one-click draft. ++++

A fake NGO appeal in 2026 is no longer a piece of paper handed at a railway station — it is a 30-second emotional WhatsApp forward with a QR-overlaid UPI handle and a recycled patient photograph. The defence is not skepticism; it is a 3-minute verification drill that any literate Indian can perform — NGO Darpan, 80G, FCRA, UPI handle resolution, reverse image search. If you have already donated, the first 30 minutes after detection decide whether the money is recoverable. Bookmark this page, save 1930 in your contacts, and forward this page to the family WhatsApp group instead of the next emotional appeal.

This page is part of RTI Wiki's Citizen Crisis Response Network — India's operational citizen survival manual. Updates tracked through I4C / MHA cyber advisories, RBI Master Directions, NITI Aayog NGO Darpan release notes, and CIC decisions on third-party-information disclosure.