How scams work

Know the steps. Break the chain.

Scammers follow the same script with thousands of people. Each step below has a warning sign you can spot, and one thing that stops the scam there.

Scam script

Digital arrest

No agency arrests anyone over a video call.

The notice

You receive an official-looking notice or call claiming to be from CBI, police or another agency.

Warning signA legal notice arrives on your phone and demands you act immediately.

Break the chainCheck any notice in CBI's name with ABHAY on CBI's official website before doing anything.

Source: PIB / CBI · issuer advice (as reported)

The video call

You are told you are under 'digital arrest' and must stay on a video call, under watch.

Warning sign'Digital arrest' has no legal existence in Indian law (CBI).

Break the chainEnd the call. A real agency will never keep you on camera.

Source: PIB / CBI · issuer and general safety advice

The sham process

Fraudsters stage a fake legal process and keep you under surveillance, sometimes for days.

Warning signOfficials, hearings or documents that only exist on a call.

Break the chainTalk to someone you trust and contact your local police station in person.

Source: PIB / CBI · issuer and general safety advice

The payment

You are pressured to transfer money to 'clear your name'. Digital-arrest scams account for about 8% of losses discussed at NHRC.

Warning signAny demand to move money to prove innocence.

Break the chainDo not pay. If you already paid, call 1930 at once: fast reports help stop the money moving.

Source: PIB / NHRC · I4C · issuer and general safety advice

How often? Real cases in Karnataka

270 digital-arrest cases registered from Jan 2025 to Oct 2025; the peak month in the data was October 2024 with 156. Karnataka Police monthly Crime Review. Read from a public copy of the data.gov.in tables; not yet checked against data.gov.in itself.

Lost money? Call 1930 now, or report at cybercrime.gov.in

Scam script

WhatsApp 'GhostPairing'

The link comes from a friend. The attacker is already inside their account.

The lure

A message like 'Hi, check this photo' arrives with a Facebook-style link preview, often from someone you know.

Warning signAn unexpected link, even from a known contact.

Break the chainDon't click. Ask the sender on a call whether they really sent it.

Source: CERT-In · issuer and general safety advice

The fake viewer

The link opens a fake Facebook or WhatsApp viewer page that asks you to 'verify' yourself.

Warning signA website asking for your phone number to show you a photo.

Break the chainNever enter your phone number on sites claiming to be WhatsApp or Facebook.

Source: CERT-In · issuer advice (as reported)

The pairing

The attacker uses a pairing code to add their browser as a trusted device on your account, with no password, OTP or SIM swap.

Warning signA device-linking prompt or code you did not start.

Break the chainOpen Settings > Linked devices and log out any device you don't recognise.

Source: CERT-In · issuer advice (as reported)

The takeover

The attacker reads your synced messages and messages your contacts as you, spreading the lure.

Warning signFriends mention odd messages 'from you'.

Break the chainLog out unknown devices, warn your contacts, and report at cybercrime.gov.in.

Source: CERT-In · I4C · issuer and general safety advice

Lost money? Call 1930 now, or report at cybercrime.gov.in