Alerts

Current scam alerts

From CERT-In and CBI. Share the cards on WhatsApp: each carries its source and the 1930 helpline.

CERT-InSeverity: High Published 2025-12-19

WhatsApp account takeover campaign ('GhostPairing')

Attackers use WhatsApp's device-linking (pairing code) feature to add their own browser as a trusted device, without a password, OTP or SIM swap. They can then read synced messages and message the victim's contacts. Lures typically start with a message such as 'Hi, check this photo' linking to a fake Facebook or WhatsApp viewer page.

What to doDo not click suspicious links, even from known contacts. Do not enter your phone number on external sites claiming to be WhatsApp or Facebook. Check Settings > Linked devices and log out any device you do not recognise.

CERT-In advisory as reported by Business Standard; the Linked devices check is from the same coverage · Source: CERT-In

Download card

CBI Published 2026-05-15

'Digital arrest' has no legal existence — verify notices with ABHAY

Fraudsters send official-looking notices, then keep victims under coercive video surveillance or sham legal proceedings. CBI states that 'digital arrest' has no legal existence in Indian law and has launched ABHAY, an AI-based helpbot that checks whether a notice in CBI's name is genuine.

What to doTo check a notice in CBI's name: go to CBI's official website, click the ABHAY logo, verify your mobile number by OTP and upload a scan of the notice. ABHAY reports whether it is genuine or potentially fraudulent.

CBI procedure as reported in coverage of the PIB release · Source: PIB / CBI

Download card