📱Test our Android app — free beta!Join Beta GroupYou'll receive the install link by email after joining.

Differences

This shows you the differences between two versions of the page.


—fake-ngo-donation-whatsapp-fraud [2026/07/22 17:47] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +====== Fake NGO Donation WhatsApp Fraud — Verify, Recover, Report (2026) ======
 +
 +
 +
 +{{ :social:auto:fake-ngo-donation-whatsapp-fraud.png?direct&1200 |Fake NGO Donation WhatsApp Fraud — Verify, Recover, Report (2026) — RTI Wiki}}
 +
 +<WRAP center round info 95%>
 +**Quick Reply:** Verify any WhatsApp NGO donation appeal against NGO Darpan, 80G, and FCRA portals before paying. If defrauded, dial 1930 and report at cybercrime.gov.in.
 +</WRAP>
 +
 +{{htmlmetatags>metatag-title=(Fake NGO Donation WhatsApp Fraud Recovery India 2026)&metatag-description=(Verify any WhatsApp NGO donation appeal against NGO Darpan, 80G, and FCRA portals before paying. If defrauded, dial 1930 and report at cybercrime.gov.in.)&metatag-keywords=(fake NGO WhatsApp scam, NGO donation fraud India, NGO Darpan verification, 80G certificate check, FCRA donation scam, UPI charity fraud, 1930 cyber helpline, NCRP NGO complaint)}}
 +
 +A "donate ₹500 to save Riya, leukaemia stage-3" forwarded on a Sunday morning WhatsApp group is one of the most common ways a middle-class Indian family loses their first ₹500–₹50,000 to a stranger. The message looks emotional, the QR code looks legitimate, the UPI handle ends in `@oksbi` — and the "NGO" does not exist on the NITI Aayog NGO Darpan database. This page explains how to authenticate any NGO in three minutes, what to do in the first hour after a fraudulent transfer, and how to seek recovery via the 1930 helpline and your bank.
 +
 +===== Direct answer (featured snippet) =====
 +
 +To verify a fake NGO donation request on WhatsApp in India: (1) check the NGO's **Unique ID** on the **NITI Aayog NGO Darpan** portal at [[https://ngodarpan.gov.in|ngodarpan.gov.in]], (2) verify the **80G / 12A** registration number on the **Income Tax** portal under "Tax Exempted Institutions," (3) verify any foreign-funds claim on the **FCRA** portal at [[https://fcraonline.nic.in|fcraonline.nic.in]], (4) cross-check the receiving **UPI handle** in your banking app against the registered NGO bank account, and (5) reverse-image-search the patient / cause photo. If any one of these fails, do **not** donate. If you have already paid, dial **1930** and freeze the line within 30 minutes — the National Cyber Crime Reporting Portal can lien the receiving account.
 +
 +===== In this guide =====
 +
 +  * [[#What counts as a fake NGO WhatsApp scam|What counts as a fake NGO scam]]
 +  * [[#The five WhatsApp red flags|The five WhatsApp red flags]]
 +  * [[#The 3-minute verification drill|The 3-minute verification drill — Darpan + 80G + FCRA]]
 +  * [[#If you have already donated — the first 60 minutes|If you have already donated — the first 60 minutes]]
 +  * [[#Recovering money — 1930, NCRP, chargeback|Recovering money — 1930, NCRP, chargeback]]
 +  * [[#Reporting the fraud|Reporting the fraud]]
 +  * [[#Sample WhatsApp grievance + NCRP complaint|Sample WhatsApp grievance + NCRP complaint]]
 +  * [[#Filing an RTI to the Charity Commissioner|Filing an RTI to the Charity Commissioner]]
 +  * [[#FAQ|FAQ]]
 +  * [[#Myth vs reality|Myth vs reality]]
 +
 +===== What counts as a fake NGO WhatsApp scam =====
 +
 +Any one of these patterns turns a forwarded "donation appeal" into a **cheating** offence under **§318 of the Bharatiya Nyaya Sanhita (BNS), 2023** (in force 1 July 2024), and where a fake trust certificate or 80G receipt is used, an additional **forgery** offence under **BNS §§336–340**:
 +
 +  * The "NGO" has no entry on the NITI Aayog **NGO Darpan** database (mandatory for any organisation claiming to receive Indian government grants or to be CSR-eligible).
 +  * The 80G registration number cited in the message returns **"Not found"** on the Income Tax portal's "Tax Exempted Institutions" lookup.
 +  * The receiving **UPI handle is a personal handle** (e.g., `9876543210@oksbi`) rather than an organisation handle (`<ngoname>.donate@<bank>`).
 +  * A **QR code embedded in the WhatsApp image** decodes to a UPI VPA different from the one printed on the poster — the classic "QR overlay" trick.
 +  * The message is forwarded **>50 times** ("forwarded many times" label appears) but no major news outlet has verified the cause.
 +  * The **same patient photo** is reverse-image-searched and appears on appeals from three different "NGOs" across three states.
 +  * The "NGO" demands payment in **gift cards, USDT, or PayPal** — none of which any genuine Indian charity uses.
 +
 +> **Warning** — A genuine NGO will accept payment via a verifiable **bank account in the NGO's name** (verifiable on the 80G certificate PDF on the Income Tax portal) **and** issue an 80G receipt with their PAN, FCRA registration (if applicable), and a fixed receipt-number sequence. No genuine charity asks for an "advance verification fee" or a "GST top-up."
 +
 +===== The five WhatsApp red flags =====
 +
 +==== 1. Forwarded-many-times label + no source URL ====
 +
 +WhatsApp marks any message forwarded ≥5 times with a //double-arrow// icon. Every genuine NGO appeal carries a **link** to its own ngodarpan.gov.in page or a verified news article. If the only "source" is the WhatsApp message itself, treat it as fraud until proven otherwise.
 +
 +==== 2. Urgency tied to a medical / disaster event ====
 +
 +"Surgery tomorrow morning, ₹2 lakh needed in 4 hours." Real hospital fundraisers — Tata Memorial, AIIMS, Ketto, Milaap, ImpactGuru — issue **dated** documentation, a unique campaign URL on a known platform, and a hospital purchase-order number. The 4-hour clock is a deliberate move to bypass your verification step.
 +
 +==== 3. UPI VPA on a personal bank ====
 +
 +Genuine NGO UPI handles end in formats like `<ngo>.donate@axisbank` or `payments@<ngo>.org` (registered through the bank's merchant onboarding). A handle ending in `@okhdfcbank` / `@oksbi` / `@paytm` tied to a 10-digit mobile number is **always** a personal account. Charity Commissioner rules in **Maharashtra, Gujarat, Karnataka, Delhi, West Bengal** explicitly require donations to flow into the NGO's registered bank — not a trustee's personal account.
 +
 +==== 4. QR overlay mismatch ====
 +
 +Open the QR image in any UPI app and look at the **decoded VPA before tapping pay**. If the printed UPI handle on the poster reads `caremore.donate@yesb` but the QR decodes to `8765432109@oksbi`, this is a QR overlay attack. Cancel and screenshot the mismatch — it becomes evidence in the NCRP complaint.
 +
 +==== 5. Photo reverse-image-search hit ====
 +
 +Long-press any image of the "patient / disaster victim" → //Search image on Google//. If the same photo surfaces on Pinterest, an old news report, or a different fundraiser from an earlier year, the appeal is a **template scam** recycled from older operations. Save the search-result page as a PDF for evidence.
 +
 +> **Citizen tip** — Train one parent / grandparent at home to perform exactly **two checks** before donating: (a) reverse image search on the photo, (b) NGO Darpan lookup on the name. Those two checks catch the most common templates.
 +
 +===== The 3-minute verification drill — Darpan + 80G + FCRA =====
 +
 +==== Step 1: NGO Darpan lookup (45 seconds) ====
 +
 +Visit [[https://ngodarpan.gov.in/index.php/search/|ngodarpan.gov.in]] → "Search NGO" → enter the NGO's name. A genuine NGO will return:
 +
 +  * **Unique ID** (12-character DARPAN ID, e.g., `MH/2018/0123456`)
 +  * Registered address, registration date, and Sector
 +  * Names and PAN of the office bearers
 +  * Annual returns filed (a charity inactive on returns for >2 years is a major red flag)
 +
 +If the search returns **"No record found"**, the organisation is not eligible to receive any Indian government grant or CSR funding — that **does not** make it illegal, but it removes the most common trust signal.
 +
 +==== Step 2: 80G / 12A verification on the Income Tax portal (60 seconds) ====
 +
 +Open [[https://www.incometax.gov.in/iec/foportal/|incometax.gov.in]] → //Tax Tools// → "Tax Exempted Institutions." Enter the **registration number** the NGO has shared (it will be of the form `AAATX1234X / 80G / 2023-24`). The portal returns the certificate's validity, the NGO's PAN, and the date of issue. Save the result page as a PDF.
 +
 +==== Step 3: FCRA check (only if foreign donations claimed) (45 seconds) ====
 +
 +Open [[https://fcraonline.nic.in|fcraonline.nic.in]] → //FCRA Services// → "Status of Registered Associations." Enter the FCRA registration number. If the message claims foreign funding but the NGO is **not** in this database, walking away is the only correct response — accepting foreign donations without an FCRA certificate is a punishable offence under the **Foreign Contribution (Regulation) Act 2010, §11**.
 +
 +==== Step 4: UPI handle cross-match (15 seconds) ====
 +
 +Send a **₹1 test transfer** through your UPI app. The receiver name auto-resolved on the confirmation screen must match the NGO's **registered legal name** (visible on the 80G certificate). If the resolution shows a personal name or a shell-style "ABC Enterprises," cancel.
 +
 +==== Step 5: Reverse image + news-corpus search (15 seconds) ====
 +
 +  * Long-press patient photo → "Search image on Google."
 +  * Search the patient's full name + "AIIMS" / "Tata Memorial" + the year.
 +  * If neither returns a credible third-party source, treat the appeal as fraudulent.
 +
 +> **Trust signal** — A genuine medical fundraiser on Ketto, Milaap, or ImpactGuru will always link to a hospital authorisation letter on its own dot-org domain. Compare what the WhatsApp message claims to that platform's listing of identical fundraisers.
 +
 +===== If you have already donated — the first 60 minutes =====
 +
 +==== 1. Take screenshots before doing anything else ====
 +
 +  * The WhatsApp message itself (long-press → forward → "Export chat" with media)
 +  * The transaction confirmation page in your UPI / bank app
 +  * The QR code image
 +  * The reverse-image search result, if you can run it
 +  * The NGO Darpan / 80G "Not found" screen
 +  * Sender's WhatsApp profile (long-press → //View contact//)
 +
 +These six artefacts become the evidence pack for the FIR and the bank dispute.
 +
 +==== 2. Dial 1930 (Cyber Crime Helpline) within 30 minutes ====
 +
 +The **Indian Cyber Crime Coordination Centre (I4C)** runs a Pan-India helpline at **1930**. If you call promptly after the transaction, the operator can issue a **lien instruction** to the receiving bank — money is frozen mid-flight and not credited to the fraudster's withdrawable balance. Recovery becomes harder the longer you wait.
 +
 +Have ready: (a) your UPI transaction reference number (UTR / RRN), (b) the receiving UPI handle / bank account, (c) date-time of transfer, (d) approximate amount.
 +
 +==== 3. Lock UPI / freeze the channel ====
 +
 +Inside your banking app:
 +
 +  * UPI → //Disable UPI// (re-enables in 24 h).
 +  * Net banking → reduce **per-transaction limit** to ₹1.
 +  * Card → //Freeze international + online// transactions.
 +
 +This stops a follow-on scam where the fraudster, having received ₹500, sends an "OTP for refund" attempt three minutes later.
 +
 +==== 4. NCRP complaint within the same hour ====
 +
 +Visit [[https://cybercrime.gov.in|cybercrime.gov.in]] → //Report Other Cyber Crimes// → //Online Financial Fraud//. The NCRP complaint number is mandatory for the bank's chargeback case. Filing promptly on detection materially helps recovery under the **RBI Limited Liability framework for unauthorised electronic transactions**.
 +
 +> **Warning** — Do **not** click any "refund link" sent by a stranger in the next 48 hours. The scammer's playbook routinely recycles a known victim with a "we will refund your money — verify Aadhaar OTP" call.
 +
 +===== Recovering money — 1930, NCRP, chargeback =====
 +
 +==== Pathway A: 1930 lien + bank reversal (best for early reporting) ====
 +
 +1930 → cybercrime.gov.in complaint → bank's nodal officer → reversal, where the lien is issued in time and the receiving account still holds balance.
 +
 +==== Pathway B: RBI Ombudsman (failed bank reversal) ====
 +
 +If your bank refuses to reverse despite an NCRP complaint, file with the **RBI Ombudsman under the Reserve Bank - Integrated Ombudsman Scheme, 2026 (RB-IOS 2026)** — in force from 1 July 2026, replacing the 2021 scheme — at [[https://cms.rbi.org.in|cms.rbi.org.in]] / toll-free **14448**. Complain first to the bank; if it does not reply in 30 days (or you are unsatisfied), file with the Ombudsman within 90 days. Under the **RBI Limited Liability framework for unauthorised electronic banking transactions**, your own liability is capped depending on how quickly you reported:
 +
 +  * **Zero** if reported within 3 working days, and the bank's negligence (e.g., inadequate fraud monitoring) is not attributed to you.
 +  * **₹10,000–₹25,000** depending on account type for delayed reporting (4–7 working days).
 +
 +Separately, under RB-IOS 2026 the Ombudsman may direct the bank to compensate you up to **₹30 lakh** for consequential financial loss and up to **₹3 lakh** for harassment, time, and expense.
 +
 +==== Pathway C: NPCI dispute (UPI specifically) ====
 +
 +Inside your UPI app → //Help// → //Raise Dispute// → //"I sent money to wrong / fraudulent VPA."// NPCI's UDIR (UPI Dispute Resolution) reviews the case. Recovery depends on whether the receiving handle still has balance.
 +
 +==== Pathway D: Consumer forum (against the bank or platform) ====
 +
 +If the bank or payment platform failed to act on a verified fraud complaint, you can file a complaint under the **Consumer Protection Act, 2019** before the District / State / National Consumer Commission. Pecuniary jurisdiction, per the **Consumer Protection (Jurisdiction) Rules, 2021**, is: **District Commission ≤ ₹50 lakh**, **State Commission ₹50 lakh–₹2 crore**, **National Commission > ₹2 crore**. Track your case at [[https://e-jagriti.gov.in|e-jagriti.gov.in]] or the relevant State Commission's e-filing portal.
 +
 +==== Pathway E: Section 138 / NI Act (if a cheque was given) ====
 +
 +A small but growing variant uses **post-dated cheque collection** instead of UPI. If a cheque was deposited in your "donation" but the payee is not the registered NGO, file a complaint under **Negotiable Instruments Act §138** if it bounces, or as cheating under **BNS §318** if it cleared.
 +
 +==== Pathway F: Insurance recovery (if you have a cyber-fraud policy) ====
 +
 +Some insurers sell standalone "personal cyber insurance" policies. Claim within the policy's reporting window (usually 7 days) — required documents are the FIR, the NCRP acknowledgement, and the bank's "non-recovery" letter.
 +
 +===== Reporting the fraud =====
 +
 +==== 1. WhatsApp grievance officer (mandatory IT Rules 2021 path) ====
 +
 +Email **[email protected]** with: the forwarded message, sender's WhatsApp number, a screenshot of the //forwarded many times// label, and your NCRP complaint number. Under **IT Rules 2021, Rule 3(2)**, WhatsApp must acknowledge in 24 hours and resolve in 15 days. Successful complaints lead to the sender's account being banned and the message marked as a known-scam template.
 +
 +==== 2. CERT-In (cybersecurity vector) ====
 +
 +Email **[email protected]** with the same artefacts. CERT-In does not give individual-case responses but uses the corpus to issue national advisories.
 +
 +==== 3. State Charity Commissioner (RTI route) ====
 +
 +Each state's Charity Commissioner maintains the registration of public trusts and societies. For **Maharashtra**: [[https://charity.maharashtra.gov.in|charity.maharashtra.gov.in]]; **Gujarat**: charity.gujarat.gov.in; **Karnataka**: through the Sub-Registrar (Societies); **Delhi**: Registrar of Societies. File an **RTI under Section 6(1)** asking for the NGO's registration certificate, last filed audit, and the office bearers' names.
 +
 +==== 4. MeitY / Sahyog portal ====
 +
 +[[https://www.meity.gov.in|meity.gov.in]] → //Sahyog// portal — central reporting layer for online financial fraud. Useful for cases involving organised gangs across multiple states.
 +
 +==== 5. Income Tax — false 80G claim ====
 +
 +If the fake NGO issued a forged 80G receipt and you (or someone) claimed an income-tax deduction on it, file a //rectification// in your ITR and email **[email protected]** referencing the fake receipt — this protects you from a later §270A penalty.
 +
 +===== Sample WhatsApp grievance + NCRP complaint =====
 +
 +<code>
 +To,
 +The Grievance Officer
 +WhatsApp LLC
 +[email protected]
 +
 +Sub: Fraudulent NGO donation appeal forwarded on WhatsApp — Rule 3(2)(b) and 3(2)(c)
 +        of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
 +
 +Dear Sir / Madam,
 +
 +I am a citizen of India and a registered WhatsApp user (mobile +91-XXXXXXXXXX).
 +On DD-MM-2026 at HH:MM IST, I received a forwarded message from +91-YYYYYYYYYY
 +soliciting urgent donation of ₹___ towards "Patient Riya, leukaemia stage-3."
 +
 +I have verified the following:
 +
 +1. The "NGO" cited — "________ Foundation" — has no record on
 +   the NITI Aayog NGO Darpan database (screenshot enclosed, Annexure A).
 +
 +2. The 80G registration number quoted in the message returns
 +   "Not found" on the Income Tax portal's "Tax Exempted Institutions"
 +   search (Annexure B).
 +
 +3. The patient photograph is identical to an earlier fundraiser on Ketto
 +   for a different patient, located by reverse image search
 +   (Annexure C).
 +
 +4. The receiving UPI VPA is a personal handle (8765432109@oksbi),
 +   not an NGO merchant handle.
 +
 +I have filed an NCRP complaint at cybercrime.gov.in vide
 +acknowledgement no. _____________ on DD-MM-2026.
 +
 +I request, under Rule 3(2)(b) and 3(2)(c) of the IT Rules 2021, that:
 +  (a) the sender's WhatsApp account be suspended pending investigation,
 +  (b) the message template be added to your known-scam corpus,
 +  (c) a confirmation be issued under Rule 3(2)(c) within 24 hours,
 +  (d) the case be resolved within 15 days as required by the Rules.
 +
 +Yours sincerely,
 +__________________
 +Name, address, contact, Aadhaar last-4
 +Date: DD-MM-2026
 +
 +Enclosures:
 +  Annexure A — NGO Darpan "Not found" screenshot
 +  Annexure B — Income Tax 80G search result
 +  Annexure C — Reverse image search result
 +  Annexure D — UPI transaction screenshot
 +  Annexure E — NCRP acknowledgement
 +</code>
 +
 +===== Filing an RTI to the Charity Commissioner =====
 +
 +If the fake "NGO" has invoked a state-level public trust registration, an RTI to the office of the state's Charity Commissioner is the cheapest formal route to expose the fraud. Sample RTI — adjust state and registration number:
 +
 +<code>
 +Public Information Officer
 +Office of the Charity Commissioner, [State]
 +[Address]
 +
 +Sub: Request under Section 6(1), Right to Information Act 2005
 +
 +I, [Name], resident of [Address], request the following information in
 +respect of the trust / society named "________ Foundation" claiming to
 +have public-trust registration no. ____________ in [State]:
 +
 +1. Certified copy of the registration certificate (or a statement
 +   under §7(1) RTI Act 2005 if no such registration exists).
 +2. Latest audited financial statement filed by the trust under
 +   §33A of the Maharashtra Public Trusts Act, 1950 (or the
 +   equivalent provision in this state).
 +3. Names, addresses, and PAN of the current trustees.
 +4. Whether any complaints have been received against the trust
 +   in the last 24 months and, if so, the action taken.
 +
 +Information is sought under §6(1) and §6(3) of the RTI Act 2005.
 +A reply is required within 30 days under §7(1).
 +
 +I attach a Postal Order of ₹10 (No. ________) towards the
 +prescribed application fee under §7(1) of the RTI Act 2005.
 +
 +Yours sincerely,
 +__________________
 +Name, address, contact
 +Date: DD-MM-2026
 +</code>
 +
 +The same template, sent to the **Registrar of Societies** in states that don't have a Charity Commissioner (e.g., Delhi, Punjab, Tamil Nadu), produces an equivalent disclosure under §6(1) RTI Act 2005. Use the [[https://righttoinformation.wiki/tools/ai-rti-drafter|AI RTI Drafter]] for a one-click draft.
 +
 +===== Sources & internal links =====
 +
 +  * **NITI Aayog NGO Darpan** — [[https://ngodarpan.gov.in|ngodarpan.gov.in]]
 +  * **Income Tax — Tax Exempted Institutions** — [[https://www.incometax.gov.in|incometax.gov.in]]
 +  * **FCRA Online** — [[https://fcraonline.nic.in|fcraonline.nic.in]]
 +  * **National Cyber Crime Reporting Portal** — [[https://cybercrime.gov.in|cybercrime.gov.in]] · helpline **1930**
 +  * **CERT-In** — [email protected] · [[https://cert-in.org.in|cert-in.org.in]]
 +  * **WhatsApp Grievance Officer** — [email protected] (IT Rules 2021, Rule 3(2))
 +  * **RBI Ombudsman (RB-IOS 2026)** — 14448 · [[https://cms.rbi.org.in|cms.rbi.org.in]]
 +  * **Consumer forum case status** — [[https://e-jagriti.gov.in|e-jagriti.gov.in]]
 +  * **BNS, 2023** — §318 (cheating), §319 (cheating by personation), §§336–340 (forgery)
 +  * **BNSS, 2023** — procedure; replaces CrPC
 +  * **Foreign Contribution (Regulation) Act 2010** — §11
 +  * **Consumer Protection Act 2019** — District/State/National jurisdiction per the 2021 Rules
 +  * **IT Rules 2021** — Rule 3(2)(b), Rule 3(2)(c) — intermediary grievance redressal
 +  * **RTI Act 2005** — §6(1), §6(3), §7(1), §10, §19(1)
 +
 +Related on RTI Wiki:
 +
 +  * [[https://righttoinformation.wiki/rti-act-2005-complete-guide|RTI Act 2005 — complete guide]]
 +  * [[https://righttoinformation.wiki/ngo-donation-fraud-india|NGO donation fraud — overview & general scams]]
 +  * [[https://righttoinformation.wiki/cyber-slavery-scam-compound-job-fraud-india|Cyber slavery / scam-compound recovery]]
 +  * [[https://righttoinformation.wiki/upi-fraud-recovery-india|UPI fraud recovery — chargeback playbook]]
 +
 +===== FAQ =====
 +
 +==== Is every WhatsApp donation appeal a scam? ====
 +
 +No. Many genuine NGOs (Goonj, Akshaya Patra, Smile Foundation, CRY, HelpAge India, GiveIndia partners) do circulate fundraising appeals on WhatsApp during disasters. The three-minute verification drill — NGO Darpan + 80G + UPI handle resolution — separates them from frauds without judgment calls.
 +
 +==== I donated ₹500 — is it worth reporting? ====
 +
 +Yes. Even a ₹500 fraud feeds the same gang behind the ₹50,000 fraud. Filing the NCRP complaint costs nothing, takes a few minutes, and adds your transaction to the cluster the I4C uses to lien receiving accounts.
 +
 +==== Can I claim the donation back as an income-tax refund if it was a fake 80G? ====
 +
 +No — but you must //withdraw// the deduction by filing a rectification (ITR-U or revised return). Failing to do so risks a §270A penalty when the Income Tax Department's automated matching catches the bogus 80G certificate. Email [email protected] with the NCRP complaint number for safe rectification.
 +
 +==== Will WhatsApp ban a sender if I report? ====
 +
 +WhatsApp's grievance officer is bound by **IT Rules 2021, Rule 3(2)(c)** to act within 15 days. In practice, accounts forwarding known-scam templates repeatedly are usually banned within 7 days of a reasoned complaint with screenshots. The **forwarded-many-times** label increases the priority of action.
 +
 +==== The fake NGO claims it is "registered with the Government of India." How do I verify? ====
 +
 +There is no single "Government of India" charity registration. Genuine registrations are with: (a) **NITI Aayog NGO Darpan** (mandatory for grants / CSR), (b) **Income Tax — 80G/12A** (donor tax benefit), (c) **FCRA** (only if foreign funds), (d) **state Charity Commissioner / Registrar of Societies / Trust Registrar**. Ask the NGO for **all four** identification numbers. If they cannot produce them, walk.
 +
 +==== The sender showed me a "notarised certificate" of registration. Is that proof? ====
 +
 +A notarised copy of a //printed// certificate proves nothing — notarisation only attests the signature on the document, not the authenticity of the registration itself. Verify the registration number directly on the issuing portal (NGO Darpan / Income Tax / FCRA). Notary fraud rings sell ready-made packets to scam outfits in Delhi NCR.
 +
 +==== Can the police trace a fraudster behind a 10-digit UPI handle? ====
 +
 +Yes — every UPI handle is bound to a bank account that is in turn bound to a KYC profile (PAN + Aadhaar). Once the NCRP complaint reaches the receiving bank through the investigating officer, the bank must release the KYC trail to the police. The bottleneck is not technical — it is the volume of pending NCRP complaints. The earlier you file, the higher you sit in the queue.
 +
 +==== My elderly mother fell for a "village school for orphans" appeal. Is the legal route different for senior citizens? ====
 +
 +Senior-citizen victims (>60) get an expedited path. Under the **Maintenance and Welfare of Parents and Senior Citizens Act 2007**, district legal services authorities (DLSA) provide free legal aid for cyber fraud recovery. Approach DLSA along with the NCRP complaint number for free counsel.
 +
 +==== Is reporting on cybercrime.gov.in itself safe? Doesn't it expose my data? ====
 +
 +The NCRP portal is run by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs. It uses a government-issued SSL certificate (verifiable in your browser address bar — issuer National Informatics Centre CA). Filing a complaint there is **safer than emailing a bank** for the same purpose.
 +
 +==== How do I check if my friend's "NGO" group is genuinely registered? ====
 +
 +Send a short RTI — Section 6(1) RTI Act 2005 — to the state's Registrar of Societies / Charity Commissioner asking for the registration certificate, last audit, and trustee names. Cost: a postal order of ₹10. Reply timeline: 30 days under §7(1). Use the [[https://righttoinformation.wiki/tools/ai-rti-drafter|AI RTI Drafter]] for a one-click draft.
 +
 +===== Myth vs reality =====
 +
 +^ Myth ^ Reality ^
 +| "If a message has a 80G number printed, it is genuine."     | 80G certificate numbers are **publicly checkable** on the Income Tax portal. A scammer prints any 10-character string and hopes you won't verify. Always look it up. |
 +| "WhatsApp will block the sender automatically."              | WhatsApp acts only on **reported** messages under IT Rules 2021. Unreported, the same scam recycles indefinitely. |
 +| "₹500 is too small for police to investigate."               | **BNS, 2023 §318** has **no minimum threshold**. The complaint feeds the cluster on which I4C lien orders are based. |
 +| "I gave my UPI PIN — recovery is impossible."                | The 1930 helpline can still freeze the receiving account promptly. RBI's Limited Liability framework caps the loss at ₹10,000–₹25,000 if reported within 4–7 days **even if** PIN was shared, provided no negligence is proved against you. |
 +| "An 80G receipt always means a deductible donation."         | Only if the receipt is from an NGO whose 80G certificate is currently valid on the IT portal. Receipts from "AAA Foundation" with a fictitious registration number are routinely rejected by ITR processing. |
 +| "FCRA-registered means government-approved."                 | FCRA only authorises //foreign// donation receipts. It is a clearance, not an endorsement of the NGO's work. Verify NGO Darpan separately. |
 +
 +//Last reviewed: 17 July 2026.//
 +
 +{{tag>pan 1930 fake ngo donation whatsapp fraud verify}}