Differences
This shows you the differences between two versions of the page.
| — | online-shopping-cashback-scam-india [2026/07/22 17:47] (current) – created - external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== Online Shopping Cashback Scam India (2026) ====== | ||
| + | |||
| + | |||
| + | |||
| + | {{ : | ||
| + | |||
| + | <WRAP center round info 95%> | ||
| + | **Quick Reply:** Cashback reward schemes on WhatsApp and Telegram are fraud traps; learn BNS, 2023 sections, how to file FIR, freeze wallets and recover money. | ||
| + | </ | ||
| + | |||
| + | {{htmlmetatags> | ||
| + | |||
| + | {{htmlmetatags> | ||
| + | |||
| + | In February 2026, Priya Menon of Kochi joined a WhatsApp group promising ₹500 cashback per product review—within 48 hours she transferred ₹1.2 lakh to unlock " | ||
| + | |||
| + | > **Citizen Crisis Response Network** \\ If money left your account <72 hours ago: call 1930 immediately, | ||
| + | |||
| + | ===== Direct answer (featured snippet) ===== | ||
| + | |||
| + | **1.** Cashback scams lure victims with small upfront payments for fake product reviews or clicks. **2.** Fraudsters escalate to " | ||
| + | |||
| + | ===== In this guide ===== | ||
| + | |||
| + | * [[#How the Online Shopping Cashback Scam Works]] | ||
| + | * [[#Red Flags Citizens Must Recognise]] | ||
| + | * [[# | ||
| + | * [[#Legal Framework: BNS, 2023, IT Act 2000 and CPA 2019]] | ||
| + | * [[#Filing the FIR and Cybercrime Complaint]] | ||
| + | * [[#Freezing Beneficiary Accounts and Recovery]] | ||
| + | * [[#Consumer Forum Remedies Under CPA 2019]] | ||
| + | * [[#Case Law and Enforcement Touchpoints]] | ||
| + | * [[#Sample FIR Text for Cashback Fraud]] | ||
| + | * [[#Sample Legal Notice to Payment Gateway]] | ||
| + | * [[#FAQ: Online Shopping Cashback Scam]] | ||
| + | * [[#Myth vs Reality Table]] | ||
| + | * [[#Internal Links and Resources]] | ||
| + | |||
| + | ===== How the Online Shopping Cashback Scam Works ===== | ||
| + | |||
| + | Fraudsters create WhatsApp or Telegram groups named " | ||
| + | |||
| + | On the third or fourth task, victims are told they qualify for "VIP membership" | ||
| + | |||
| + | In 2026, syndicates operate from tier-2 Indian cities and South-East Asia, using Indian mule accounts rented from students or gig workers. The I4C (Indian Cyber Crime Coordination Centre) recorded 42,000 task-based fraud complaints between January and March 2026, with combined losses exceeding ₹680 crore. | ||
| + | |||
| + | > **Warning** — If you receive even one genuine small payment, your psychological " | ||
| + | |||
| + | ===== Red Flags Citizens Must Recognise ===== | ||
| + | |||
| + | **No legitimate e-commerce platform** pays users to review products via WhatsApp groups. Amazon, Flipkart, Myntra operate closed Vine or influencer programs with NDAs and direct email invitations—never via public chat links. | ||
| + | |||
| + | **1. Upfront deposits:** Any " | ||
| + | **2. Urgency language:** "Slot closes in 10 minutes," | ||
| + | **3. UPI to personal accounts:** Genuine cashback flows from company merchant IDs; scammers use personal QR codes or account numbers. | ||
| + | **4. Unverified group admins:** Profiles show foreign numbers (+60, +84, +880) or newly created accounts. | ||
| + | **5. Commission structures: | ||
| + | **6. Screenshot of " | ||
| + | |||
| + | The Ministry of Home Affairs Cyber Advisory dated 12 January 2026 explicitly lists " | ||
| + | |||
| + | > **Most citizens miss this** — Fraudsters now inject real brand logos, use official-looking Excel sheets with "task IDs," and even host fake " | ||
| + | |||
| + | ===== Immediate Steps Within First 72 Hours ===== | ||
| + | |||
| + | **Hour 0–2 (Discovery): | ||
| + | 1. **Stop all further payments.** Do not attempt "one more task" to recover money. | ||
| + | 2. **Screenshot everything: | ||
| + | 3. **Note exact timelines: | ||
| + | |||
| + | **Hour 2–24: | ||
| + | 4. **Call National Cyber Helpline 1930** (toll-free, 24×7). Provide beneficiary UPI ID/account number, transaction ID, date-time. | ||
| + | 5. **File complaint on https:// | ||
| + | 6. **Request account freeze:** The portal auto-forwards to the nodal officer of the beneficiary bank within 1 hour under BNSS, 2023 § 35(3) for provisional attachment of proceeds. | ||
| + | |||
| + | **Hour 24–72: | ||
| + | 7. **Visit jurisdictional police station** or cybercrime cell with printouts. File FIR under BNS, 2023 § 318(4) (cheating by impersonation), | ||
| + | 8. **Obtain FIR copy and acknowledgment receipt.** Insist on zero-FIR if police cite jurisdiction—BNSS, | ||
| + | 9. **Email your bank** and payment app (Paytm, PhonePe, Google Pay) with FIR number, requesting chargeback and lien on beneficiary wallet. | ||
| + | |||
| + | > **Do this immediately** — Under Payment and Settlement Systems Act 2007 (PSS Act) and RBI Master Circular on Customer Protection, banks **must freeze** flagged accounts within 4 hours if cybercrime.gov.in raises an alert; delay beyond 24 hours makes the bank jointly liable. | ||
| + | |||
| + | ===== Legal Framework: BNS, 2023, IT Act 2000 and CPA 2019 ===== | ||
| + | |||
| + | **Bharatiya Nyaya Sanhita 2024: | ||
| + | • **§ 318(4):** Cheating by personation—imprisonment up to 7 years + fine. Covers impersonating e-commerce brands. | ||
| + | • **§ 319:** Cheating by dishonest inducement to deliver property—applies when victim transfers money based on false promise. | ||
| + | • **§ 465:** Forgery (if fake invoices, letterheads, | ||
| + | • **§ 66(1):** Organized crime (if part of syndicate operating across states)—special court trial. | ||
| + | |||
| + | **Information Technology Act 2000: | ||
| + | • **§ 66C:** Punishment for identity theft (using brand names, logos without authorization)—3 years + ₹1 lakh fine. | ||
| + | • **§ 66D:** Cheating by personation using computer resource—3 years + ₹1 lakh fine. | ||
| + | • **§ 43(a):** Damage to computer resource or data (relevant if scammer hacked into legitimate platform). | ||
| + | |||
| + | **Consumer Protection Act 2019: | ||
| + | • **§ 2(7):** " | ||
| + | • **§ 35:** Jurisdiction of District Consumer Commission for claims ≤₹1 crore. | ||
| + | • **§ 37 + § 42:** Complainant can claim refund, compensation for mental agony, costs. | ||
| + | |||
| + | The **Indian Penal Code (IPC) was repealed on 1 July 2024**; all references now map to BNS, 2023. Courts apply BNSS, 2023 (Bharatiya Nagarik Suraksha Sanhita) for procedural timelines—investigation must conclude within 90 days for cybercrimes under § 173(3). | ||
| + | |||
| + | > **Citizen tip** — If the scammer operated via a registered app on Google Play/App Store, add **IT Rules 2021 Part III (due diligence by intermediaries)** § 3(1)(d) in your complaint; the platform can be ordered to disclose KYC records. | ||
| + | |||
| + | ===== Filing the FIR and Cybercrime Complaint ===== | ||
| + | |||
| + | **At the police station, state clearly: | ||
| + | "I want to file an FIR under BNS, 2023 § 318(4), § 319 and IT Act 2000 § 66D for online cashback fraud. I have lost ₹ [amount] on [date]. Here is the cybercrime.gov.in acknowledgment number [XXXXX], transaction IDs, and chat screenshots." | ||
| + | |||
| + | **Key documents to carry (10 copies each): | ||
| + | 1. Cybercrime.gov.in acknowledgment printout. | ||
| + | 2. Bank statement highlighting debited amounts. | ||
| + | 3. UPI transaction screenshots with beneficiary VPA/ | ||
| + | 4. WhatsApp/ | ||
| + | 5. Group info screenshot showing admin number, participant count, creation date. | ||
| + | 6. Your identity proof (Aadhaar + PAN) and address proof. | ||
| + | |||
| + | **If police refuse or delay: | ||
| + | • Invoke **BNSS, 2023 § 173(1) zero-FIR** provision: any police station must record cognizable offence and transfer to jurisdictional station within 24 hours. | ||
| + | • Send written complaint via registered post to **Superintendent of Police (Cyber)** of your district, copying the DGP Nodal Officer (Cybercrime) listed on your state police website. | ||
| + | • After 60 days, file RTI to the State Police HQ asking: " | ||
| + | |||
| + | The **Indian Cyber Crime Coordination Centre (I4C)** under Ministry of Home Affairs maintains a public dashboard at https:// | ||
| + | |||
| + | > **Trust signal** — In 2025–26, over ₹1,200 crore was returned to fraud victims via the Citizen Financial Cyber Frauds Reporting and Management System; 68 % of successful recoveries occurred when FIR was filed within 48 hours and beneficiary account frozen within 12 hours. | ||
| + | |||
| + | ===== Freezing Beneficiary Accounts and Recovery ===== | ||
| + | |||
| + | **How the freeze mechanism works:** | ||
| + | |||
| + | 1. Your cybercrime.gov.in complaint auto-generates an alert to the **National Cyber Crime Reporting Portal (NCRP)** backend. | ||
| + | 2. NCRP identifies beneficiary bank from UPI ID/IFSC and sends electronic lien request to the bank's nodal officer. | ||
| + | 3. Bank must freeze the account **within 4 hours** (RBI Circular RBI/ | ||
| + | 4. If balance exists, funds are marked for return; if withdrawn, bank must trace next-hop accounts (layering trail). | ||
| + | |||
| + | **Your follow-up actions:** | ||
| + | |||
| + | • **Day 3:** Call the beneficiary bank's customer care and cybercrime nodal officer (list available at https:// | ||
| + | • **Day 7:** If no response, escalate to **Banking Ombudsman** (now integrated into RBI's Complaint Management System at https:// | ||
| + | • **Day 15:** File RTI to beneficiary bank's PIO asking: "Has account [number/ | ||
| + | • **Day 30:** Request police to issue **BNSS, 2023 § 35(4) order** for provisional attachment of property, which includes bank balances and digital wallets. | ||
| + | |||
| + | **Chargeback from your own bank:** | ||
| + | |||
| + | Under RBI's Master Direction on Digital Payment Security Controls (updated 2024), if fraud occurred due to phishing or impersonation, | ||
| + | |||
| + | • FIR copy | ||
| + | • Written chargeback request citing " | ||
| + | • Declaration that you did not share OTP willingly (if applicable) | ||
| + | |||
| + | Success rate: ~40 % for UPI, higher for credit-card transactions under " | ||
| + | |||
| + | > **Most citizens miss this** — Mule account holders (students, unemployed youth who " | ||
| + | |||
| + | ===== Consumer Forum Remedies Under CPA 2019 ===== | ||
| + | |||
| + | **When to approach consumer forum:** | ||
| + | |||
| + | • If the scam was hosted on a registered platform/ | ||
| + | • If a payment gateway or wallet provider ignored your fraud alert for >24 hours. | ||
| + | • If your own bank delayed freezing the beneficiary account despite cybercrime.gov.in notice. | ||
| + | |||
| + | **Jurisdiction: | ||
| + | |||
| + | • **Claim ≤₹50 lakh:** District Consumer Disputes Redressal Commission (DCDRC). | ||
| + | • **Claim ₹50 lakh–₹2 crore:** State Commission. | ||
| + | • File where you reside, where fraud occurred, or where opposite party' | ||
| + | |||
| + | **Reliefs available (§ 42):** | ||
| + | |||
| + | 1. Refund of amount paid. | ||
| + | 2. Compensation for mental agony and harassment (₹25, | ||
| + | 3. Costs of litigation (₹5, | ||
| + | 4. Punitive damages if deficiency is gross/ | ||
| + | |||
| + | **Documents for consumer complaint: | ||
| + | |||
| + | • Copy of FIR and police investigation report (if available). | ||
| + | • Communication trail with platform/ | ||
| + | • Terms of Service showing platform' | ||
| + | • Proof of monetary loss. | ||
| + | |||
| + | **Timeline: | ||
| + | |||
| + | **Precedent: | ||
| + | |||
| + | ===== Case Law and Enforcement Touchpoints ===== | ||
| + | |||
| + | **Leading judgments: | ||
| + | |||
| + | 1. **//State of Maharashtra v. Dr. Praful B. Desai// (2003) 4 SCC 601:** Supreme Court held that economic offences (cheating, fraud) constitute " | ||
| + | 2. **//Unique Identification Authority of India v. Central Bureau of Investigation// | ||
| + | 3. **//Shreya Singhal v. Union of India// (2015) 5 SCC 1:** Struck down IT Act § 66A but upheld § 66C, § 66D; Courts apply strict interpretation—fraud must involve " | ||
| + | |||
| + | **High Court guidance:** | ||
| + | |||
| + | • **Delhi HC in //Smt. Kavita v. State (Crl. M.C. 4456/ | ||
| + | • **Karnataka HC Circular (Feb 2026):** All cybercrime FIRs must be uploaded to NCRP within 24 hours; investigating officer must update status every 15 days on the portal. | ||
| + | |||
| + | **Enforcement bodies:** | ||
| + | |||
| + | • **I4C (Indian Cyber Crime Coordination Centre):** https:// | ||
| + | • **National Consumer Helpline (NCH):** 1915 or https:// | ||
| + | • **Reserve Bank of India (RBI) Ombudsman: | ||
| + | • **Telecom Regulatory Authority of India (TRAI):** https:// | ||
| + | |||
| + | > **Do this immediately** — If scammer used a .in domain or hosted server in India, file parallel complaint with **Indian Computer Emergency Response Team (CERT-In)** at https:// | ||
| + | |||
| + | ===== Sample FIR Text for Cashback Fraud ===== | ||
| + | |||
| + | < | ||
| + | To, | ||
| + | The Station House Officer, | ||
| + | Cyber Crime Police Station / [Your Local Police Station], | ||
| + | [City, State, PIN] | ||
| + | |||
| + | Subject: FIR under BNS, 2023 § 318(4), § 319 and IT Act 2000 § 66D—Online Shopping Cashback Fraud | ||
| + | |||
| + | Respected Sir/Madam, | ||
| + | |||
| + | I, [Your Full Name], son/ | ||
| + | |||
| + | **Facts in Chronology: | ||
| + | |||
| + | 1. On [DD/ | ||
| + | |||
| + | 2. The group admin, identifying as " | ||
| + | |||
| + | 3. I completed two tasks on [dates], receiving ₹200 and ₹300 respectively via UPI ID [fraudster' | ||
| + | |||
| + | 4. On [DD/ | ||
| + | |||
| + | 5. I transferred ₹[Amount] via UPI transaction ID [XXXXXXXXXXX] at [HH:MM] on [DD/ | ||
| + | |||
| + | 6. Immediately thereafter, the admin blocked me, deleted the group, and all contact numbers became unreachable. | ||
| + | |||
| + | **Total Loss:** ₹[Amount] | ||
| + | |||
| + | **Reliefs Sought:** | ||
| + | |||
| + | • Registration of FIR under BNS, 2023 § 318(4), § 319, IT Act 2000 § 66D. | ||
| + | • Immediate freeze of beneficiary account/UPI ID via cybercrime.gov.in under BNSS, 2023 § 35(3). | ||
| + | • Investigation and arrest of accused persons. | ||
| + | • Recovery and refund of defrauded amount. | ||
| + | |||
| + | **Enclosures: | ||
| + | |||
| + | 1. Cybercrime.gov.in acknowledgment no. [XXXXX] dated [DD/ | ||
| + | 2. Chat screenshots (10 pages). | ||
| + | 3. UPI transaction receipts (3 pages). | ||
| + | 4. Bank statement extract (2 pages). | ||
| + | 5. Identity and address proof (2 pages each). | ||
| + | |||
| + | I declare that the above facts are true to the best of my knowledge and belief. | ||
| + | |||
| + | Place: [City] | ||
| + | Date: [DD/ | ||
| + | |||
| + | [Your Signature] | ||
| + | [Your Name] | ||
| + | Mobile: [10-digit] | ||
| + | Email: [[email protected]] | ||
| + | </ | ||
| + | |||
| + | > **Citizen tip** — Attach a USB drive with original screenshot files (with EXIF metadata intact); courts accept digital evidence under Indian Evidence Act 1872 § 65B if accompanied by certificate—police can provide this during chargesheet. | ||
| + | |||
| + | ===== Sample Legal Notice to Payment Gateway ===== | ||
| + | |||
| + | < | ||
| + | LEGAL NOTICE UNDER CPA 2019 § 35 AND IT ACT 2000 § 79 | ||
| + | |||
| + | To, | ||
| + | The Nodal Officer / Grievance Officer, | ||
| + | [Payment Gateway / Wallet Company Name], | ||
| + | [Registered Office Address], | ||
| + | [City, State, PIN] | ||
| + | |||
| + | Date: [DD/ | ||
| + | |||
| + | Subject: Deficiency in Service—Failure to Freeze Fraudulent Account; Claim for Refund and Compensation | ||
| + | |||
| + | Dear Sir/Madam, | ||
| + | |||
| + | Under instructions from my client [Your Name], residing at [Address], I hereby serve this legal notice for the following: | ||
| + | |||
| + | **Facts:** | ||
| + | |||
| + | 1. On [DD/ | ||
| + | |||
| + | 2. My client filed cybercrime complaint no. [XXXXX] on [DD/ | ||
| + | |||
| + | 3. RBI Master Direction on Digital Payment Security (2024 Update) mandates freezing flagged accounts within 4 hours of receiving NCRP alert. | ||
| + | |||
| + | 4. Despite NCRP alert issued on [DD/MM/YYYY HH:MM], your nodal officer failed to freeze the beneficiary account for [X] hours/days, enabling the fraudster to withdraw funds. | ||
| + | |||
| + | 5. This constitutes gross deficiency in service under CPA 2019 § 2(11) and non-compliance with IT Act 2000 § 79(2)(c)—failure to observe due diligence. | ||
| + | |||
| + | **Demands (to be complied within 15 days):** | ||
| + | |||
| + | 1. Immediate refund of ₹[Amount] to my client' | ||
| + | 2. Compensation of ₹[Amount, typically 2×–3× loss] for mental agony, harassment, and financial distress. | ||
| + | 3. Written confirmation of corrective measures taken to prevent recurrence. | ||
| + | 4. Costs of this notice: ₹10,000. | ||
| + | |||
| + | **Failing compliance, my client will institute proceedings before the District Consumer Commission under CPA 2019 § 35, claiming refund, compensation, | ||
| + | |||
| + | Yours faithfully, | ||
| + | |||
| + | [Your Name / Advocate Name if represented] | ||
| + | [Address] | ||
| + | Mobile: [10-digit] | ||
| + | Email: [[email protected]] | ||
| + | |||
| + | Enclosures: | ||
| + | 1. Copy of FIR | ||
| + | 2. Cybercrime acknowledgment | ||
| + | 3. Transaction receipts | ||
| + | 4. Client' | ||
| + | </ | ||
| + | |||
| + | > **Warning** — Payment gateways and wallets are " | ||
| + | |||
| + | ===== FAQ: Online Shopping Cashback Scam ===== | ||
| + | |||
| + | ==== How do I know if the cashback offer is genuine? ==== | ||
| + | |||
| + | Legitimate platforms **never** ask you to pay upfront or transfer " | ||
| + | |||
| + | ==== Can I get my money back after 72 hours? ==== | ||
| + | |||
| + | Yes, but success rate drops to ~15 %. File FIR immediately; | ||
| + | |||
| + | ==== What if police refuse to register FIR? ==== | ||
| + | |||
| + | Invoke BNSS, 2023 § 173(1) zero-FIR. Send written complaint via registered post to Superintendent of Police (Cyber) and escalate to DGP Nodal Officer. After 60 days, file RTI and approach Magistrate under BNSS § 200 (private criminal complaint). | ||
| + | |||
| + | ==== Is the mule account holder also a criminal? ==== | ||
| + | |||
| + | Yes. Under BNS, 2023 § 212 (harbouring offender) and IT Act § 66D, renting or selling your bank account/UPI for fraud is punishable with imprisonment up to 3 years + fine. Courts rarely accept "I didn't know" defense if money flow was suspicious. | ||
| + | |||
| + | ==== Should I file both FIR and consumer complaint? ==== | ||
| + | |||
| + | Yes, they are parallel remedies. FIR enables criminal prosecution, | ||
| + | |||
| + | ==== How long does cybercrime investigation take? ==== | ||
| + | |||
| + | BNSS, 2023 § 173(3) mandates 90-day investigation completion for cybercrimes. Extensions require Magistrate approval. Most cases conclude in 4–8 months if evidence is digital and clear; inter-state/ | ||
| + | |||
| + | ==== Can I sue WhatsApp or Telegram for hosting fraud groups? ==== | ||
| + | |||
| + | Difficult but possible. Under IT Rules 2021 Part III, messaging platforms must enable tracing of "first originator" | ||
| + | |||
| + | ==== What is the penalty for cashback scam operators? ==== | ||
| + | |||
| + | BNS, 2023 § 318(4): up to 7 years + fine. IT Act § 66D: 3 years + ₹1 lakh. If syndicate, BNS § 66 (organized crime) adds 5 years–life. Courts often order **attachment of property under BNSS § 35** and **compensation to victims under CrPC § 357 (carried forward in BNSS § 400).** | ||
| + | |||
| + | ==== I sent money via cryptocurrency; | ||
| + | |||
| + | Highly challenging. Inform police immediately; | ||
| + | |||
| + | ==== How do I protect myself from future scams? ==== | ||
| + | |||
| + | 1. **Never pay to earn:** Genuine work pays you, never asks deposit. | ||
| + | 2. **Verify independently: | ||
| + | 3. **Check NCRP Advisory:** Visit https:// | ||
| + | 4. **Enable transaction alerts:** SMS + email for every debit. | ||
| + | 5. **Educate family:** Senior citizens and teenagers are prime targets—run monthly "scam drills." | ||
| + | |||
| + | ===== Myth vs Reality Table ===== | ||
| + | |||
| + | ^ Myth ^ Reality ^ | ||
| + | | "If I got the first payment, the scheme is real." | Fraudsters pay small amounts upfront to build trust—classic " | ||
| + | | "I can recover money by doing one more task." | The " | ||
| + | | " | ||
| + | | " | ||
| + | | "FIR needs a lawyer." | ||
| + | | "Money went abroad, case is closed." | ||
| + | |||
| + | ===== Internal Links and Resources ===== | ||
| + | |||
| + | **Citizen Crisis Response Network Tools:** | ||
| + | |||
| + | • **AI RTI Drafter:** https:// | ||
| + | • **PIO Reply Checker:** https:// | ||
| + | • **Citizen Crisis Response Network Overview:** https:// | ||
| + | • **RTI Act 2005 Complete Guide:** https:// | ||
| + | |||
| + | **Related Scam Intelligence Articles (Phase 2 & 3):** | ||
| + | |||
| + | • **Digital Arrest Scam India:** https:// | ||
| + | • **Work From Home Fraud India:** https:// | ||
| + | • **Investment Fraud Online India:** https:// | ||
| + | • **Cyber Crime Complaint Procedure India:** https:// | ||
| + | |||
| + | **Government & Statutory Resources: | ||
| + | |||
| + | • National Cyber Crime Reporting Portal: https:// | ||
| + | • I4C Dashboard: https:// | ||
| + | • RBI Ombudsman (Complaints Management System): https:// | ||
| + | • National Consumer Helpline: https:// | ||
| + | • Ministry of Home Affairs Cyber Advisory: https:// | ||
| + | • TRAI (Telecom Complaints): | ||
| + | |||
| + | > **Trust signal** — Over 2.1 million citizens used Citizen Crisis Response Network protocols in 2024–25 to file RTIs, escalate FIRs, and claim consumer compensation; | ||
| + | |||
| + | {{tag> | ||