Pioneering Creative Excellence
Cyber Security

Online fraud in India: how to spot scams and what to do in the first hour

UPI tricks, fake job and investment offers, “digital arrest” calls and courier scams – how to recognise them, and the exact steps to take in the first hour if you lose money.

Tinos Editorial TeamTinos Software and Security Solutions LLP 12 Nov 2026 3 min read
Online fraud in India: how to spot scams and what to do in the first hour
Key takeaways
  • Scammers create urgency and fear – slow down and verify before you pay or share anything.
  • You never need to enter your UPI PIN to receive money.
  • No police or government agency arrests or questions people over a video call.
  • If you lose money, call 1930 and report at cybercrime.gov.in immediately, then call your bank.

Online fraud affects people of every age and background – students, homemakers, professionals and retired people. The scams change constantly, but they rely on the same few tricks: urgency, fear, greed and trust in a familiar name. Learning those patterns is the best protection.

Common scams and how to spot them

ScamHow it worksRed flag
UPI “collect request”You are asked to approve a request or enter your PIN to “receive” moneyAny request to enter a PIN to receive money
“Digital arrest”Callers posing as police, customs or investigators claim a parcel or case in your name and demand money on video callThreats, secrecy and payment demands from “officials”
Part-time job / task scamPaid for liking videos or reviews, then asked to “invest” to unlock earningsPaying money to earn money
Investment / trading groupsWhatsApp or Telegram groups promising huge returns, fake trading appsGuaranteed or very high returns
Fake customer careNumbers from search results or ads ask you to install a remote-access appRequests to install apps or share screen
KYC / electricity / bank alertsSMS saying your account or connection will be blocked unless you click a linkShort deadlines and links in SMS
Real police and government agencies do not arrest, question or collect money from people over video calls. If someone says otherwise, hang up and call the police on a number you look up yourself.

If you lose money: the first hour

  1. Call 1930, the national cyber-crime helpline, and register the fraud. Quick reporting gives the best chance of the money being frozen before it moves on.
  2. Report online at cybercrime.gov.in with transaction IDs, account or UPI IDs, phone numbers and screenshots.
  3. Call your bank using the number on your card or the official app, and block cards or UPI if needed.
  4. Change passwords and PINs if you shared any, starting with email and banking.
  5. Uninstall remote-access apps the scammer asked you to install, and get your phone checked.
  6. Keep all evidence – do not delete chats, call logs or messages.

Everyday habits that prevent fraud

  • Never share OTPs, PINs, CVV or passwords – with anyone
  • Look up customer-care numbers only on official websites or apps
  • Do not install apps or APK files sent by strangers
  • Set daily transaction limits in your banking app
  • Use the government's Sanchar Saathi portal to check mobile connections in your name and report suspected fraud calls
  • Talk to elderly parents and children about these scams
This article is general guidance, not legal advice.

Our personal cyber security team helps individuals after fraud – preserving evidence, supporting reports and securing devices and accounts. Businesses can read our security basics for SMEs or talk to our cyber security team.

Frequently asked questions

Can I get my money back after online fraud?

Sometimes. Reporting immediately through 1930 and cybercrime.gov.in gives the best chance of freezing the money in the receiving accounts. Recovery then depends on the investigation and banks.

Is it safe to receive money through UPI?

Yes. Receiving money never needs your UPI PIN. Any request to enter your PIN or approve a request to “receive” money is a scam.

What should I do if I shared my OTP?

Call your bank immediately to block transactions, change your passwords, and report on 1930 if money has been taken.

Found this useful? Share it
in X
Written byTinos Editorial Team

Engineers, security specialists and product people at Tinos Software and Security Solutions LLP, sharing practical lessons from 15+ years of building software, AI and security for businesses.

Work with Tinos

Need help with cyber security?

Talk to our specialists about your business. Free consultation, a clear proposal and no obligation.

Explore Cyber Security
Get new insights by email

Practical articles on software, AI and security. No spam, unsubscribe anytime.