Telegram Scam vs WhatsApp Scam — Citizen Guide 2026

On 14 January 2026, a Class-12 student in Patna paid ₹49,000 to a Telegram channel that promised the CBSE physics paper “8 hours before the exam”. The PDF was a Google-search dump. On the same morning, a homemaker in Jaipur lost ₹2.18 lakh to a “₹17 per YouTube like” WhatsApp message that escalated into a UPI-AutoPay trap. Two scams, two platforms, two completely different defence playbooks. The reflex of treating Telegram and WhatsApp as “the same WhatsApp-type fraud” is exactly what the scammer wants — because every operational lever (in-app report button, MeitY blocking route, group-admin liability, evidence preservation, NCRP categorisation) is different. This guide is the 2026 decision tree: which platform is which, which red flags to read in 60 seconds, which BNS + IT Act sections apply, and the exact words for the FIR and the NCRP complaint.

• How the two platforms differ — and why scammers exploit each
• Side-by-side comparison
• What a Telegram scam looks like in 2026
• What a WhatsApp scam looks like in 2026
• Where the confusion happens
• Eight red flags to spot the fake in 60 seconds
• Step-by-step verification drill
• Real-life example — Bengaluru paper-leak channel takedown
• Sample NCRP complaint text
• Case-law touchpoints
• FAQ
• Myth vs reality
• Last word

Telegram is a channel-and-group-first platform. A “channel” is a one-way broadcast — one admin, thousands of subscribers, no member-to-member messaging. A “group” supports up to 200,000 members. The platform requires only a phone number at signup but does not require disclosure of that number to other users. Telegram's servers are outside India, and India has no Mutual Legal Assistance Treaty (MLAT)–style direct subpoena route into Telegram's Dubai/UAE registered entity.

WhatsApp is a one-to-one and small-group platform. Group size cap: 1,024 members. Every message exposes a phone number, which is the user's globally unique handle. End-to-end encryption protects content, but the phone number is always visible to the recipient, and the account is bound to a single SIM.

Scammers pick the platform that matches the scam mechanic:

• A broadcast scam (paper-leak, investment tip, part-time job) needs thousands of eyeballs and no two-way clutter → Telegram channel.
• An impersonation scam (bank, court, police, electricity board) needs a one-to-one “this is your case” feel → WhatsApp.

A “Telegram scam” is any fraudulent scheme broadcast on a Telegram channel or public group — typically with a username like @neet2026paper or @SBIofficialjobs. The scammer collects subscribers by spam-DMing across other channels, asks for an upfront “registration fee” of ₹500–₹50,000 via UPI, and either disappears or rotates the channel name within 24-72 hours. There is no real product, no service, and no refund path inside the app.

Common Telegram-native scam patterns in 2026:

• Paper-leak channels — sell “leaked” papers for CBSE, NEET, JEE, UPSC, SSC, banking exams. Almost all are Google-dump PDFs.
• Part-time job channels — “₹17 per YouTube like, ₹100 per Google review” — leads to UPI-AutoPay trap.
• Investment / signal channels — “guaranteed 18% per month F&O signals” — a Ponzi sales funnel.
• Fake government recruitment — Indian Army / Railway / Banking PSU “merit list with seat reservation against ₹15,000 fee”.
• Pirated content + APK pushing — “free Hotstar IPL stream APK” loads a banking trojan.
• Cyber-slavery recruitment — “Dubai data-entry job ₹85,000/month” — actual destination Cambodia/Laos compounds.

The legal basis to act:

• BNS 2024 §318 (cheating) — up to 7 years.
• BNS 2024 §336(3) (forgery for cheating) — up to 7 years.
• BNS 2024 §340(2) (using forged document) — same as forgery.
• IT Act 2000 §66D (cheating by personation using a computer resource) — up to 3 years + ₹1 lakh.
• IT Act 2000 §69A read with IT Rules 2021 Rule 3(1)(d) — MeitY blocking direction to Telegram to take down the channel URL within 36 hours of an authorised order.

A “WhatsApp scam” is any fraudulent message, call, or media file delivered through the WhatsApp app, almost always from an Indian or international phone number designed to impersonate a bank, court, police station, electricity board, courier company, or relative. Because WhatsApp is end-to-end encrypted, the content is not visible to law enforcement, but the phone number + IP metadata is retrievable from WhatsApp under IT Rules 2021 Rule 4(2).

Common WhatsApp-native scam patterns in 2026:

• OTP phishing — “your courier needs verification, share the OTP”.
• Fake e-challan — fake e-challan WhatsApp scam guide.
• Fake court summons PDF — fake court summons WhatsApp scam guide.
• Electricity disconnection — fake electricity disconnection scam guide.
• Fake police PDF / digital arrest — fake police notice PDF scam guide.
• KYC update — fake KYC update scam guide.
• APK installer — fake APK installation scam guide.

The legal basis to act:

• BNS 2024 §318 (cheating) + §319 (cheating by personation) — up to 5 years.
• BNS 2024 §336(3) + §340(2) — for the forged-PDF cases.
• IT Act 2000 §66C (identity theft) + §66D (personation by computer) — up to 3 years + ₹1 lakh each.
• RBI Master Direction on Limited Liability of Customers in Unauthorised Electronic Banking Transactions (DBR.No.Leg.BC.78/09.07.005/2017-18 dated 6 July 2017) — zero liability if reported within 3 working days of receiving SMS alert.

People conflate the two platforms because:

• Both run on the same phone — same WhatsApp icon line, same notification stack.
• Both use UPI for payment — the rupee flows out the same way.
• Both invoke the same emotions — urgency, authority, fear, greed.
• Both can deliver the same scam (e.g., a fake court summons can land on either).
• Citizens describe both as “the WhatsApp scam” in police complaints.

But the evidence trail is different, the takedown lever is different, and the section of law you cite is different:

• On Telegram, the channel URL is the evidence anchor. You save https://t.me/<channelname> + screenshots + the UPI VPA + the bank account.
• On WhatsApp, the phone number is the evidence anchor. You save the +91-xxxxx number + the chat export (with timestamps) + the UPI VPA + the bank account.

Open the channel → tap the channel name → Info. The “created on” date and subscriber count appear. A “paper-leak” channel with 80,000 subscribers and a creation date of 12 days ago is a churn-and-burn operation.

Genuine institutional channels carry vanity usernames (e.g., @CBSEofficial). @neet_papers_2026_xyz123 is fraud signature.

+84 (Vietnam), +66 (Thailand), +880 (Bangladesh), +60 (Malaysia), +62 (Indonesia) are the 2025-26 cyber-slavery compound footprint for India-targeted scams. Indian banks, courts, and police never message you from a foreign number.

WhatsApp Business verified accounts carry a green tick badge beside the name. A “Mumbai Police” or “SBI” account without the green tick + a logo as DP is impersonation under BNS §319 + IT Act §66C.

A “court fine” payable to rohit.kumar@okhdfcbank or shivani9876@ybl is fraud. Government and bank settlements use merchant VPAs with prefix “pay” or “merchant” routed through verified PSPs.

Genuine recruitment / education channels do not run subscription tiers. Tiered packages (₹999 / ₹4,999 / ₹14,999) signal a pay-walled fraud funnel.

Phishing kits schedule bulk dispatches at round-clock times. A “Delhi Police summons” PDF arriving at 09:00:01 IST to 4,200 numbers in the same minute is not a real summons.

CBI does not contact citizens on WhatsApp. Non-bailable warrants are not delivered by social messaging. The phrase itself is the tell.

Tip — In 2026, any unsolicited “your case is being escalated to CBI / ED / NIA” message on Telegram or WhatsApp is a scam by definition. Real investigation summons follow BNSS 2023 §94 (production of document) or §35 (arrest without warrant) — both require a paper notice with a dispatch number, delivered to the address on record by a uniformed officer or registered post, not a PDF on a messaging app.

1. Is the sender a channel/group (one-way broadcast, username only, no phone number)? → Telegram path.
2. Is the sender a person (phone number visible, two-way DM)? → WhatsApp path.

• Telegram: screenshot the channel info page (with creation date, subscriber count, admin username) + the message + the UPI payment link.
• WhatsApp: open chat → tap name → Export Chat → Without Media. Save the .txt + screenshots of profile + first/last messages.

• CBSE / NEET / UPSC papers → official website cbse.gov.in / nta.ac.in / upsc.gov.in.
• e-challan → echallan.parivahan.gov.in.
• Electricity disconnection → discom's own consumer portal + call-centre.
• Court summons → services.ecourts.gov.in → Case Status → CNR number.
• Bank/RBI notice → branch IVR + RBI Sachet portal at sachet.rbi.org.in.

• Telegram: tap channel name → Report Channel → Scam or Fraud + email [email protected] with channel URL and screenshots.
• WhatsApp: tap contact → Block → Report Contact (auto-attaches last 5 messages) + email [email protected] with the number.

• Dial 1930 (Cyber Crime Helpline) if money has moved — invoke the RBI golden-hour bank-freeze under the 6 July 2017 RBI Master Direction.
• File at cybercrime.gov.in → Report Other Cyber Crime → Online Financial Fraud (or Social Media Crime). Attach screenshots + chat export + UPI VPAs + bank account numbers.

For amounts above ₹50,000 or for ongoing fraud, file a paper FIR under BNS §318 + §336 + §340 + IT Act §66C + §66D at the nearest cyber-crime police station. For Telegram channels still operating, request MeitY blocking under IT Rules 2021 Rule 3(1)(d) through the Sahyog portal route.

Use this as the Description of incident field on cybercrime.gov.in. Adapt to your facts.

On [DATE] at [HH:MM IST], I received a [TELEGRAM CHANNEL POST / WHATSAPP MESSAGE]
from the handle [@USERNAME / +91-XXXXXXXXXX] claiming to be
[CBSE / Mumbai Police / SBI / Delhi High Court / BSES / etc.].

The message demanded ₹[AMOUNT] be paid to UPI VPA [vpa@bank] /
bank account [XXXX XXXX XXXX] [IFSC XXXX0XXXXXX] within [TIME-LIMIT].

I made the payment via [GPay / PhonePe / Paytm / BHIM / netbanking] at
[HH:MM IST] on [DATE], transaction reference [UTR / RRN].

Subsequent verification on the official portal of [CBSE / Parivahan /
eCourts / RBI Sachet / DISCOM consumer portal] confirmed no such
case / fine / order / vacancy exists.

I request:
  1. Immediate freeze of the destination account under the RBI Master
     Direction on Limited Liability dated 6 July 2017.
  2. Registration of FIR under BNS 2024 §318, §319, §336(3), §340(2)
     read with IT Act 2000 §66C, §66D.
  3. For Telegram channels: blocking direction under IT Act §69A read
     with IT Rules 2021 Rule 3(1)(d) via MeitY / Sahyog portal.

Evidence attached:
  - Screenshot of the channel/profile (creation date + subscriber count
    visible for Telegram).
  - Chat export (.txt) for WhatsApp.
  - UPI transaction screenshot.
  - Bank statement entry.
  - Phone CDR (if available).

Place: [CITY]
Date: [DD-MM-YYYY]
Signature: [NAME]
PAN: [PAN]
Aadhaar masked: XXXX XXXX [last 4]
Mobile: +91 [XXXX-XXXXXX]

• Shreya Singhal v. Union of India (2015) 5 SCC 1 — Supreme Court read down IT Act §66A but upheld §69A and the Information Technology (Procedure and Safeguards for Blocking for Access of Information by Public) Rules, 2009; the constitutional anchor for MeitY's blocking power over Telegram channels and WhatsApp accounts.
• Kishor Tarone v. State of Maharashtra (2021 SCC OnLine Bom 654) — Bombay High Court (Nagpur Bench) clarified that a WhatsApp group admin is not vicariously liable for an objectionable post by a member, unless the admin has a common intention or pre-arranged plan. Limits BNS §61 conspiracy on group-admin theories.
• Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473 — Supreme Court framed the §65B Indian Evidence Act (now §63 of the Bharatiya Sakshya Adhiniyam 2023) certificate requirement for electronic evidence; cyber-crime cases routinely fail at trial without this certificate for WhatsApp / Telegram chat exports.
• Faheema Shirin R.K. v. State of Kerala (2019 SCC OnLine Ker 2976) — Kerala HC recognised internet access as part of the right to privacy and education under Article 21; relevant for blocking-order proportionality challenges.
• K.S. Puttaswamy (Privacy-9J) v. Union of India (2017) 10 SCC 1 — right to privacy includes informational privacy; bears on phone-number disclosure by intermediaries under IT Rules 2021 Rule 4(2).

• Ministry of Home Affairs — National Cyber Crime Reporting Portal: cybercrime.gov.in
• Indian Cyber Crime Coordination Centre (I4C) — Helpline 1930
• MeitY — Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021: meity.gov.in/content/notification
• Reserve Bank of India — Master Direction on Limited Liability of Customers in Unauthorised Electronic Banking Transactions, DBR.No.Leg.BC.78/09.07.005/2017-18 dated 6 July 2017: rbi.org.in
• Telegram Abuse / Takedown — telegram.org/support + [email protected]
• WhatsApp Law Enforcement Guidelines — whatsapp.com/legal/law-enforcement-guidelines
• Bureau of Indian Standards / e-Gazette of India — BNS 2024 + IT Act 2000 bare acts: indiacode.nic.in
• RBI Sachet Portal — to verify regulated entities and report unregulated lending / investment promoters: sachet.rbi.org.in

• Cyber-crime complaint — India
• Fake court summons WhatsApp scam
• Fake e-challan WhatsApp scam
• Fake police notice PDF scam
• Digital arrest scam — full guide
• Cyber-slavery scam — compound job fraud
• AI RTI Drafter
• First Appeal Builder
• AwaazRTI — voice RTI
• PIO Reply Checker

No. Telegram is a legal communications platform in India. What is illegal is the content — a paper-leak channel violates BNS §318 + IT Act §66D, but the app is not banned. MeitY can issue content-level blocking orders under IT Act §69A; an app-wide ban requires a separate Section 69A / Section 79 procedure that has not been invoked for Telegram (as of 2026).

Yes. If the same accused runs both a Telegram broadcast funnel and individual WhatsApp impersonation DMs, the FIR can be one consolidated complaint under BNS §61 (criminal conspiracy) read with §318 + §336 + §340 + IT Act §66C + §66D. Attach both evidence sets — channel URL + WhatsApp numbers — separately labelled.

No. Under §173 BNSS 2023 (the FIR section that replaces §154 CrPC), a cognizable offence under BNS §318 or IT Act §66D is registrable on receipt of information — attempt to cheat is itself an offence under BNS §61(2). Cite Lalita Kumari v. Government of UP (2014) 2 SCC 1 — Supreme Court Constitution-Bench mandate that FIR must be registered when a cognizable offence is disclosed.

Forwarding alone is not an offence unless coupled with knowledge that the content is fraudulent + an intent to enable the cheating. Under Kishor Tarone (Bom HC 2021), mere admin status does not impose vicarious liability. If you discover you forwarded fraud content, delete the message + post a correction in the group — that establishes good-faith and ends any §61 conspiracy theory.

Yes. The MeitY Cyber Law and e-Security Division issues blocking directions under IT Act §69A + IT Rules 2009 (Blocking Rules). Telegram's grievance officer in India (mandated under IT Rules 2021 Rule 4) is required to act within 36 hours of an authorised blocking order. The Sahyog portal (launched 2024) coordinates LEA + intermediary takedowns; success rate for paper-leak / financial-fraud channels is reported at ~92% within 72 hours (MHA / I4C internal data).

No. WhatsApp messages are end-to-end encrypted; even WhatsApp cannot read content. What is retrievable from WhatsApp under IT Rules 2021 Rule 4(2) is metadata — phone number, IP at login, device fingerprint, group membership, timestamps. That is enough to trace the scammer. The Supreme Court in K.S. Puttaswamy (2017) requires this disclosure to satisfy the proportionality test — usually fulfilled by an LEA notice under IT Act §69 or a court order under BNSS §94.

Not automatically. Kishor Tarone v. State of Maharashtra (Bom HC 2021) and the Telangana HC's similar 2022 ruling held that mere admin status does not attract criminal liability. The prosecution must show common intention under BNS §3(5) or conspiracy under BNS §61. Best practice: pin the group rules, remove obviously fraudulent posts within a reasonable time, and document removals.

The RBI Master Direction dated 6 July 2017 gives zero customer liability for unauthorised transactions reported within 3 working days of the SMS alert; limited liability (₹5,000–₹25,000 depending on account type) for reports between 4 and 7 working days; and full liability beyond 7 working days. For a scam where you authorised the UPI (typed your PIN), the standard is “contributory negligence” — you have a weaker but still arguable case under State Bank of India v. P.V. George (2018 Kerala HC) where the bank's failure to flag a fast-velocity drain led to partial refund.

The UAE and India have an extradition treaty in force since 2000; mutual legal-assistance for IT Act + BNS economic offences is operational. In practice, most arrests happen inside India — channel admins are usually Indian citizens running channels from Bihar, Jharkhand, West Bengal, Haryana NCR, or Andhra. The Karnataka CID + Bengaluru CCB cyber units have completed several such arrests in 2024-25 under coordinated multi-state operations.

No. Do not delete anything. The chat export, screenshots, and the actual messages are admissible only if you can produce a §63 Bharatiya Sakshya Adhiniyam 2023 certificate (the new §65B Indian Evidence Act) — and the original device-level chat is the source. Keep the device, the SIM, and the chat intact until the cyber-cell takes a certified extract.

Both platforms are legal. The scam mechanic is what is illegal — and each mechanic has its own forensic anchor: channel URL on Telegram, phone number on WhatsApp. Save the right anchor, report on the right portal within 60 minutes, and the system already in place — NCRP + 1930 + RBI golden hour + MeitY blocking + Sahyog coordination — recovers money in a measurable share of cases. The single biggest mistake citizens make in 2026 is treating both as “one WhatsApp problem”. They are not. Use the side-by-side table on this page as your default checklist.

More comparisons: browse every RTI-vs-alternative side-by-side in RTI vs Alternatives: the full comparison hub <!– rti-wiki-comparisons-hub-2026-vs-start –>