Digital Arrest Scam in India: Legal Steps to Report and Recover Money

A video call comes in from a number that looks like a police station. The person on the other end wears a uniform, shows an ID, and says a parcel in your name was intercepted with drugs or that your Aadhaar number is linked to a money laundering case. They tell you not to disconnect, not to tell anyone, and to transfer money to a "verification account" to prove your innocence. Within hours, a lifetime's savings are gone. This is the digital arrest scam, and it has become one of the most damaging forms of cyber fraud in India.

The scam works because it exploits authority, isolation and time pressure. The victim is kept on the call for hours, prevented from consulting family or a lawyer, and made to believe that any delay will result in arrest. Understanding how the fraud is structured is the first step to stopping it — and, if money has already moved, to recovering it.

How the Digital Arrest Scam Works

The script follows a recognisable pattern. The caller claims to be from the police, the CBI, the Enforcement Directorate, the customs department or the telecom regulator. They cite a specific case number and a specific allegation — a courier in your name containing narcotics, a bank account in your name used for terror funding, a SIM card issued fraudulently. They may send a forged notice on official-looking letterhead, or show a forged warrant on the video call.

They then create isolation. The victim is told the case is confidential and that speaking to anyone will amount to obstructing the investigation. Some victims are told to book a hotel room and stay there for the duration of the "interrogation". Others are told to keep the call connected overnight. The isolation is deliberate: it prevents the victim from hearing the obvious objection that no Indian police force arrests people over a video call.

The demand follows. Money is sought as a "security deposit", "verification of funds", "refundable guarantee" or "court fee". It is routed to bank accounts opened in the names of mules — often students, labourers or small traders who have rented out their accounts for a commission. Once the transfer is complete, the accounts are emptied across multiple layers within minutes.

What to Do in the First Hour

Speed determines recovery. The first hour is when the money is still traceable and the mule accounts are still open.

1. Do not transfer any more money. Stop the call. Do not negotiate. Do not share OTPs, bank details, Aadhaar or PAN numbers.
2. Call the national cyber fraud helpline 1930. This is the dedicated number for reporting financial cyber fraud. It operates 24 hours and connects to the Citizen Financial Cyber Fraud Reporting and Management System.
3. File a complaint on cybercrime.gov.in. The National Cyber Crime Reporting Portal allows online filing, and complaints relating to financial fraud are routed to the concerned state police.
4. Inform your bank immediately. Call the bank's fraud helpline, ask for the account to be frozen for debit, and request a chargeback or dispute. Send a written email so there is a record.
5. Preserve evidence. Do not delete the call logs, the messages, the WhatsApp chats, the forged notices or the bank transaction alerts. Take screenshots. Note the phone numbers, the UPI IDs, the account numbers and the timestamps.
6. Report to the local police station. File an FIR under the relevant provisions of the Bharatiya Nyaya Sanhita, 2023 relating to cheating and impersonation, read with the Information Technology Act, 2000. If the station refuses, approach the Superintendent of Police or the magistrate under Section 175 of the Bharatiya Nagarik Suraksha Sanhita, 2023.

Reporting on cybercrime.gov.in

The portal asks the complainant to select a category. For financial fraud, the relevant category covers cheating by impersonation and online financial fraud. The complainant must provide name, address, mobile number, the details of the fraud, the amounts involved, the bank account or wallet used and the suspect's details where known. An acknowledgement number is generated and should be saved — it is needed for follow-up and for the bank's chargeback process.

Where the complaint relates to sexual content or child sexual abuse material, the portal provides a separate anonymous route. For financial fraud, the complaint is not anonymous and will be forwarded to the police.

The Bank Chargeback Route

Where money was transferred through UPI, NEFT, IMPS or a card, the bank is the fastest lever. Under the Reserve Bank of India's guidelines on customer protection and the rules of the payment networks, a customer who reports an unauthorised transaction promptly has a right to limited liability. The bank must acknowledge the report within a specified period and resolve it within a defined timeline.

For UPI transactions, the National Payments Corporation of India operates a dispute resolution mechanism through the banks. The complainant should raise the dispute with the remitting bank, which will contact the beneficiary bank. Where the beneficiary account is a mule account flagged by the cyber crime portal, the funds may be frozen and returned.

The critical point is timing. RBI's limited liability framework protects a customer who reports within three working days. Delay beyond that shifts liability, and delay beyond the outer limits can extinguish the claim. Report the same day.

Drafting the Complaint

A well-drafted complaint gets acted on. A vague one gets filed and forgotten. A cyber fraud complaint should contain:

• The complainant's full name, address, mobile number and email.
• A chronological narrative of the fraud: the date and time of the first call, the number that called, the identity claimed by the caller, the allegations made, the duration of the call and the demands.
• The exact amounts transferred, with the transaction reference numbers, the date and time of each transfer, the bank account or UPI ID debited and the account or UPI ID credited.
• A description of the forged documents or communications received, with copies attached.
• The names and contact details of any witnesses, including family members who observed the victim during the call.
• A request for specific action: freezing the beneficiary accounts, tracing the funds, registering an FIR and investigating under the relevant sections.
• A list of annexures, numbered and referenced in the body.

Attach bank statements showing the debits, screenshots of the call log and chats, copies of the forged notices, and the acknowledgement from the 1930 helpline and the portal. Sign the complaint and, where filing at a police station, obtain a receipt with the FIR or complaint number.

Legal Provisions That Apply

The scam typically attracts several offences. Under the Bharatiya Nyaya Sanhita, 2023, the relevant provisions include cheating under Section 318, cheating by personation under Section 319, criminal intimidation under Section 351, and forgery under Sections 336 and 340 where forged notices or warrants are used. Where the fraudster impersonates a public servant, Section 204 applies.

Under the Information Technology Act, 2000, Section 66C covers identity theft, Section 66D covers cheating by personation using a computer resource, and Section 66 covers computer-related offences. Where the fraud involves unauthorised access to a device or account, Section 43 and Section 66 apply.

Where the amount is large and the trail crosses state borders, the case may be transferred to the cyber crime cell of the state police or to the Central Bureau of Investigation. The Indian Cyber Crime Coordination Centre coordinates multi-state cases.

Civil Recovery

A criminal complaint punishes the offender but does not automatically return the money. For recovery, the victim can file a civil suit for recovery of the amount, or a complaint under Section 2(1)(r) of the Consumer Protection Act, 2019 where the failure is attributable to the bank's negligence in permitting an unauthorised transaction. Where the bank has failed to act on a timely report, a consumer complaint before the District Consumer Disputes Redressal Commission is a practical and low-cost route.

Where the fraudster is identified and the money is traced to a specific account, the victim can seek attachment of the proceeds of crime. The police can freeze accounts under the Criminal Procedure Code and now under the Bharatiya Nagarik Suraksha Sanhita, and the ED can attach proceeds of crime under the Prevention of Money Laundering Act, 2002 where the offence is scheduled under that Act.

Protecting Family Members Before It Happens

Digital arrest scams disproportionately target senior citizens living alone and people with limited exposure to technology. Prevention is more effective than recovery:

• Agree a family rule: no call about a case, an arrest or a legal problem is ever handled alone. Call a family member first.
• Explain that no agency arrests by video call and that no government department asks for money by transfer to a personal account.
• Set transaction limits on bank accounts and UPI applications for elderly family members, and enable alerts to a trusted family member.
• Keep the 1930 helpline number and the local cyber cell number visible near the telephone.
• Report suspicious numbers to the Sanchar Saathi portal operated by the Department of Telecommunications, which allows reporting of fraud communications and disconnection of the number.

What Not to Do

• Do not pay "to close the case". There is no case. Payments only confirm that the victim is worth pursuing.
• Do not delete evidence because it feels embarrassing. The call logs and messages are the case.
• Do not approach a "recovery agent" who promises to get the money back for a fee. Recovery fraud is a second scam that targets the same victims.
• Do not delay the bank report while waiting for the police to act. The bank timeline runs independently.
• Do not file only a general diary. Insist on an FIR or, where the police decline, use the statutory route to compel registration.

Frequently Asked Questions

Can I get my money back after a digital arrest scam?

Recovery is possible where the report is made within hours and the funds are still in the beneficiary account. It becomes progressively less likely as time passes and the money is layered through multiple accounts. Report to 1930 and the bank immediately.

Is filing on cybercrime.gov.in enough, or do I need an FIR?

The portal complaint is the starting point. For a criminal investigation and for insurance or chargeback purposes, an FIR at the local police station is usually required. File both.

What if the police station refuses to register my complaint?

You can approach the Superintendent of Police or the magistrate under the Bharatiya Nagarik Suraksha Sanhita, 2023. The refusal to register an FIR in a cognizable offence is itself actionable.

Can the bank refuse to refund because I authorised the transfer?

Where the transfer was induced by fraud, the transaction is not a valid authorisation. RBI's limited liability framework applies to unauthorised transactions, and the bank's failure to act on a timely report can itself ground a consumer complaint. The strength of the case depends on how quickly the report was made.

Is the call recording useful?

Yes. Any recording, screenshot or message is valuable evidence. Do not delete it. Where the call was on WhatsApp or another app, the chat and call log should be preserved.

Complaint Drafting Support

Our drafting team prepares cybercrime complaints for filing on the National Cyber Crime Reporting Portal and at the police station, bank chargeback representations, and consumer complaints against banks for failure to act on reported fraud, with a documented chronology and a complete annexure index.