How to avoid online fraud: 10 common scams and what to do if you are cheated

Short answer: never share an OTP, UPI PIN or password with anyone, don't open unknown links or .apk files, and slow down whenever someone pushes you to "act now". You never need a PIN to receive money, and there is no such thing as a legal "digital arrest". If you are cheated, call the national cyber helpline 1930 at once and file a complaint on cybercrime.gov.in.

What are the 10 most common online scams?

1. KYC update or "account blocked" messages

"Your bank account or SIM will be blocked today, update your KYC" — with a link. The link opens a fake site that asks for bank details or an OTP. Banks never do KYC through such links.

2. Electricity disconnection threats

"Your power will be cut tonight, call this number." The caller then gets you to install an app that hands control of your phone to the fraudster.

3. Drugs in a parcel and "digital arrest"

A call claiming to be from a courier company or the police says illegal goods were found in a parcel in your name. Fake officers on a video call then threaten "digital arrest" and pressure you into transferring money. Remember: there is no such thing as digital arrest in law. No investigating agency arrests anyone over a video call or asks for money.

4. Part-time job and "task" scams

You are offered money to like videos or write reviews. At first you receive a few hundred rupees; then you are asked to deposit money for a "bigger task", which never comes back.

5. Stock trading and investment groups

WhatsApp or Telegram groups show screenshots of huge profits and get you to invest through a fake app. The app shows gains, but you can never withdraw.

6. Fake customer care numbers

A "helpline" number found through a web search may belong to a fraudster. Always take customer care numbers from the company's official website or app.

7. QR codes "to receive money"

If someone asks you to scan a QR code and enter your PIN to receive money, it is a scam. You never need a UPI PIN to receive money. The PIN is only for sending.

8. APK files posing as invitations or bills

An ".apk" file arrives on WhatsApp, described as a "wedding card" or "bill". Installing it lets the fraudster read your messages and OTPs. Install apps only from the Play Store or App Store.

9. Lottery, prize and KBC calls

"You've won a lottery — pay the tax or fee." A lottery you never entered cannot be won.

10. Video call blackmail

Answering a video call from an unknown number can lead to an obscene recording being used for blackmail. Don't answer unknown video calls, and if it happens, don't panic — report it at once.

What are the 6 rules to stay safe?

1. Never share your OTP, UPI PIN, card CVV or password with anyone — no bank employee will ask for them.
2. Stop and think when someone says "today only" or "or else".
3. Don't open unknown links or files.
4. Don't install screen-sharing (remote access) apps because someone asks you to.
5. Take bank and company numbers only from official websites.
6. Share these points with older and younger family members.

What should I do immediately if I am cheated?

• Call 1930: the Government of India's national cybercrime helpline. The sooner you report, the better the chance that the money can be frozen.
• Report on cybercrime.gov.in: the Ministry of Home Affairs' National Cyber Crime Reporting Portal accepts complaints online.
• Tell your bank at once: block your card and net banking.
• Keep the evidence: messages, the caller's number, transaction IDs and screenshots.
• Report suspicious calls and messages: the Department of Telecommunications' Sanchar Saathi portal has a "Chakshu" option for reporting fraud calls and messages, and lets you check the mobile connections registered in your name.

Follow crime news and fraud alerts on our Crime page.