Top 10 Online Scams in India You Must Know About

Introduction

Online fraud in India has exploded in scale and sophistication over the past few years. According to data from the Reserve Bank of India, thousands of crores of rupees are lost every year to digital fraud — and those are just the cases that get reported. The actual numbers are almost certainly far higher, because many victims feel too embarrassed or confused to file a complaint.

The real problem is that scammers have gotten clever enough to fool even careful, educated people. These are not the obvious Nigerian prince emails of the early internet days. Modern scams in India are designed by professionals who study human psychology, understand the Indian banking system inside out, and know exactly which emotional buttons to press. They exploit urgency, fear, greed, and trust. They impersonate banks, government agencies, and well-known companies with frightening accuracy.

This is not about being stupid or careless. A doctor in Delhi lost Rs 1.5 crore to an investment scam. A retired army officer in Pune was cleaned out by a fake KYC call. An engineering student in Bengaluru sent money to a fake OLX seller. These scams work because they are designed to work, tested on thousands of people, and refined until the success rate is high enough to be profitable.

Here are ten scams that specifically target Indian users. If you recognize even one of these patterns before it happens to you, this article has done its job.

1. Fake KYC Update Calls

This is one of the most widespread scams in India today, and it works because KYC (Know Your Customer) is a real process that every bank and financial institution requires. Scammers exploit the fact that people know KYC is legitimate and that not completing it can actually lead to account restrictions.

Here is how it works. You receive a phone call, often from a number that looks like it could be from a bank. The caller speaks professional Hindi or English, uses banking terminology correctly, and may even know your name and which bank you use — information that is easily available from data leaks or purchased in bulk on the dark web. They tell you that your KYC has expired and your account will be frozen within 24 hours unless you update it immediately.

The urgency is the key. They do not give you time to think. They ask you to confirm your Aadhaar number, PAN card number, and then the crucial step — they ask for the OTP that was just sent to your phone. That OTP is actually a transaction authorization code. The moment you share it, money leaves your account.

Some variants of this scam involve sending you a link to a fake banking website that looks identical to the real one. You enter your credentials thinking you are updating KYC, and they capture everything. Other times, they ask you to download an app or fill out a form that gives them access to your device. The sophistication is alarming — some scammers even spoof caller IDs to display your bank's official phone number on your screen.

2. UPI Payment Request Scams

This scam is devastatingly simple and catches thousands of people every month. It specifically targets the way UPI (Unified Payments Interface) apps like Google Pay, PhonePe, and Paytm work. Most people understand that UPI can be used to send money, but fewer understand the collect request feature — and scammers exploit that gap ruthlessly.

The typical scenario goes like this. You have listed something for sale online, or you are expecting a refund from someone. You get a call from the scammer who says they are going to send you money. They say something like, “I am sending you Rs 5,000 right now, just approve the request on your phone.” What they actually do is send you a collect request — which is a request for you to pay them, not receive money. The notification on your phone shows the amount and an “approve” button. If you are not paying close attention, or if you are distracted by the caller talking rapidly, you tap approve and the money goes from your account to theirs.

A more sophisticated version involves QR codes. The scammer sends you a QR code and says, “Scan this to receive the payment.” But scanning a QR code in a UPI app initiates a payment from you, not to you. You never need to scan a QR code to receive money. If someone tells you otherwise, it is a scam, full stop.

Another variant targets people who have sold items on platforms like OLX. The buyer says they have sent the payment via UPI but claims the transaction is “pending” and asks you to send a small amount (say Rs 1 or Rs 2) to “verify” the transaction. Once you send even a rupee, they have confirmed that your account is active and linked, and they may use phishing to escalate the scam further.

3. OLX and Marketplace Fraud

Online classifieds platforms like OLX, Quikr, and Facebook Marketplace have become hunting grounds for scammers. The fraud takes many forms, but the most common and most effective one in India is the “army officer” scam.

In this scam, someone lists an item — usually a car, motorcycle, or expensive electronic — at a price that is noticeably below market value but not so low that it looks suspicious. When you enquire, they claim to be an army officer posted in a remote location (often Kashmir, the Northeast, or a border area). They say they need to sell urgently because of a transfer and cannot meet in person. They send you a photo of a fake army ID card. They ask you to pay an advance via UPI or bank transfer and promise to have the item delivered through a courier or a “unit vehicle.”

People fall for this because the Indian military is widely respected and trusted. The urgency of the transfer story seems plausible. The fake ID card looks convincing enough on a phone screen. And the price is just good enough to make you want to believe it is real. Thousands of Indians have lost money this way, with amounts ranging from a few thousand rupees for small electronics to several lakhs for vehicles.

Other common marketplace scams include fake payment screenshots (someone shows you an edited screenshot of a completed payment that was never actually made), overpayment scams (they “accidentally” send you more than the asking price and ask you to return the difference, but the original payment was fake), and the good old bait-and-switch where the item you receive is nothing like what was advertised.

4. Fake Job Offers

India has millions of young people desperately looking for work, and scammers know this. Fake job scams have exploded on WhatsApp, Telegram, and even through SMS. The pitch is always tempting: work from home, flexible hours, earn Rs 5,000 to Rs 50,000 per day for simple tasks.

The most common variant right now involves so-called “YouTube liking” or “product review” jobs. You receive a WhatsApp message from an unknown number saying something like, “We are hiring part-time workers for our digital marketing team. Task: Like YouTube videos and get paid Rs 50 per like. Daily income Rs 5,000+.” They start you off with a few genuine small payments to build trust. You like a few videos, and they actually pay you Rs 150 or Rs 200 via UPI.

Then comes the trap. They tell you that to access “premium tasks” with higher payouts, you need to deposit money into a task wallet or pay a “registration fee.” The amounts start small — Rs 500 or Rs 1,000 — but they quickly escalate. Victims are shown a dashboard (on a fake app or website) where their “earnings” keep growing, which motivates them to invest more. By the time they try to withdraw, the scammers either disappear or demand even more money for “withdrawal fees” or “tax deductions.”

Other variants include fake data entry jobs that require you to buy a “software license,” fake government job offers that require an “application processing fee,” and Telegram groups where you are asked to invest in products that you then supposedly resell for profit. Some of these scams have stolen lakhs of rupees from individual victims who kept investing because they believed their dashboard earnings were real.

5. Loan App Harassment

This is one of the most terrifying scams in India, and it has driven multiple victims to suicide. Unauthorized loan apps — mostly operated from China and Southeast Asia but targeting Indian users — offer instant small loans of Rs 2,000 to Rs 10,000 with seemingly easy terms. They are widely promoted through SMS, social media ads, and even Google Play Store listings (before they get taken down).

When you install the app, it asks for permissions to access your contacts, photos, gallery, and phone storage. Most people blindly grant these permissions without thinking. The loan is disbursed quickly, but the interest rate is astronomical — sometimes 100%% or more for a week. If you borrowed Rs 5,000, you might owe Rs 10,000 within seven days.

When you cannot repay on time — which is almost inevitable given the rates — the harassment begins. They send threatening messages to everyone in your contact list, telling your family, friends, and colleagues that you are a defaulter. They create morphed photos using images from your gallery — often explicit or humiliating — and threaten to send these to your contacts. Victims have had fake obscene images of themselves circulated to their parents, spouses, and bosses.

The psychological trauma is immense. People pay far more than they borrowed just to make the harassment stop, but it often does not stop because the scammers sell your data to other scam operations. RBI has repeatedly warned against such apps, and police have busted several operations, but new ones keep appearing under different names.

6. Fake Customer Care Numbers

This scam exploits a simple habit that most of us have: when we need customer support, we Google the company name followed by “customer care number.” Scammers know this, and they flood the internet with fake customer care numbers for major companies like Amazon, Flipkart, Paytm, PhonePe, and various banks.

These fake numbers appear in Google search results, on social media pages, on fake websites designed to look official, and even in Google Maps listings. When you call one of these numbers, the person who answers sounds professional and helpful. They ask about your problem, confirm your name and basic details to seem legitimate, and then gradually move toward gaining access to your device or accounts.

The most common technique is to ask you to install a remote access app like AnyDesk, TeamViewer, or QuickSupport. They say it is needed to “diagnose the problem” or “process your refund.” Once you install the app and share the access code, they can see your entire phone screen, including when you open your UPI app or enter your banking PIN. They watch you enter your credentials and drain your accounts in real time, often while keeping you distracted on the phone with friendly conversation.

Some scammers skip the remote access route and instead send you a “refund link” that takes you to a phishing page. Others send collect requests on UPI claiming it is a refund process. The common thread is that the scam starts with a fake customer care number that you found yourself and called voluntarily, which makes you trust the person on the other end far more than you would trust a random cold caller.

7. Investment and Crypto Scams

The promise of easy money through trading and investments has led to an epidemic of financial scams in India, many of them operating through WhatsApp and Telegram groups. The basic structure is remarkably consistent: you are added to a group (or invited via a link) where a “market expert” or “trading guru” shares stock tips or crypto investment opportunities that promise guaranteed returns.

The group is filled with fake members who post screenshots of their profits, thank the expert effusively, and create an atmosphere of excitement and urgency. “I invested Rs 50,000 last week and already made Rs 2,00,000!” “This man changed my life!” These are all planted messages from accounts controlled by the scammers, but they are extremely convincing when you are surrounded by dozens of seemingly real people all confirming the same story.

The scam typically works through a fake trading platform — a website or app that looks like a real brokerage but is entirely controlled by the scammers. You deposit money, and the platform shows your investment growing rapidly. You might even be able to withdraw a small amount initially, which builds your confidence and encourages you to invest more. But when you try to withdraw a large amount, there are always obstacles: a tax needs to be paid first, a processing fee is required, your account is “under review.” Eventually, the platform disappears and the money is gone.

Crypto scams follow the same pattern but add technical jargon about blockchain, DeFi, and yield farming to sound sophisticated. Some scammers create entirely fake cryptocurrencies, run initial coin offerings (ICOs) to collect money, and then vanish in what is called a “rug pull.” Others simply promise guaranteed returns on Bitcoin or Ethereum investments, which is itself a massive red flag since no investment anywhere can guarantee returns.

8. Lottery and Prize Messages

You have almost certainly received one of these: “Congratulations! Your number has been selected for a prize of Rs 25,00,000 in the Jio/Airtel/KBC Lucky Draw! Call this number to claim your prize.” These messages arrive by SMS, WhatsApp, email, and even through phone calls. They are among the oldest online scams in the world, but they continue to work in India because they are adapted to local brands and shows that people trust.

The KBC (Kaun Banega Crorepati) variant is particularly effective. Scammers call claiming to be from the KBC team and tell you that your phone number was selected through a “computerized lucky draw.” They might play a recording of Amitabh Bachchan's voice (clipped from the show) to sound authentic. They tell you that you have won Rs 25 lakhs or even Rs 1 crore, but to claim the prize, you need to pay a “processing fee,” “tax deduction amount,” or “courier charges.” These fees are usually Rs 5,000 to Rs 25,000 — small enough relative to the “prize” that victims are willing to pay.

Once you pay the first fee, more follow. There is always another charge — government tax clearance, RBI verification fee, insurance amount, GST payment. Each payment is explained with official-sounding language and comes with fake receipt numbers and reference codes. Some victims have paid lakhs of rupees in accumulated fees before realizing that no prize is coming. The scammers are patient and persistent, sometimes working a single victim for weeks.

A newer variant involves WhatsApp messages that look like they are from well-known brands. “Amazon Anniversary Spin the Wheel — Win iPhone 15!” These link to phishing websites that either steal your personal data or trick you into making small payments that lead to larger fraud. They spread virally because the messages ask you to share the link with friends to “unlock” your prize.

9. SIM Swap Fraud

SIM swap fraud is one of the most dangerous scams because once it succeeds, the scammer gains access to all OTPs sent to your phone number — which means they can authorize bank transactions, reset passwords, and take over your accounts without needing your physical phone.

The scam works in stages. First, the scammer collects your personal information through phishing, social engineering, or from data available on the dark web. They need your name, phone number, Aadhaar number, and ideally your bank details. Next, they contact your mobile operator (Jio, Airtel, Vi, etc.) and request a SIM replacement, claiming that the original SIM was lost or damaged. If they have enough personal information to pass the verification checks (which are unfortunately not always rigorous), the operator issues a new SIM card to the scammer. At this point, your original SIM stops working.

This is the critical moment. When your phone suddenly shows “No Signal” or “SIM not registered” for no apparent reason, it could mean someone has swapped your SIM. The scammer now receives all your calls and SMS messages, including OTPs from your bank. They log into your net banking, initiate transfers, and approve them with the OTPs that come to their new SIM card. This can all happen within minutes while you are still confused about why your phone lost signal.

Some scammers work with insiders at telecom companies to expedite the SIM swap process. Others use forged documents. In some cases, they first trick you into sharing personal details through a phishing call (pretending to be from the telecom company and asking you to “verify” your identity for a network upgrade), and then use that same information to authorize the SIM swap at a store.

10. Aadhaar and PAN Misuse

Your Aadhaar and PAN numbers are the two most critical pieces of identification in India. They are linked to your bank accounts, your tax records, your mobile connections, and increasingly to everything else from property records to insurance policies. When these numbers are compromised — and they are compromised far more often than most people realize — the consequences can be severe and long-lasting.

Aadhaar data has been leaked through multiple channels over the years. Government databases with poor security, telecom companies, financial services, even photocopied Aadhaar cards left with property brokers, gym memberships, and hotel check-ins. Once your Aadhaar number and associated details are in the wrong hands, they can be used to open bank accounts, apply for loans, purchase SIM cards, and commit identity theft — all in your name without your knowledge.

The most common misuse scenario involves unauthorized loans. Scammers use stolen Aadhaar and PAN details to apply for personal loans or microfinance loans through digital lending platforms that have weak verification processes. The victim only discovers the loan when they start getting collection calls or when their credit score mysteriously drops. By then, the scammer has taken the loan money and disappeared, leaving the victim to deal with collection agencies and damaged credit.

SIM card fraud is another major concern. Under current regulations, SIM cards are issued against Aadhaar verification. If someone has your Aadhaar details and a passable forged document, they can obtain SIM cards in your name. These SIM cards may then be used for further scams or criminal activity, making you a suspect in crimes you had nothing to do with. PAN misuse is equally damaging — if someone files fraudulent tax returns using your PAN, or uses it to create fake invoices for GST fraud, you may face scrutiny from the Income Tax Department for income you never earned and transactions you never made.

Conclusion: What to Do If You Are Scammed

If you have fallen victim to any of these scams, speed is critical. The faster you act, the better your chances of recovering at least some of your money and preventing further damage. Here is exactly what you should do, in order:

1. Call your bank immediately and ask them to freeze your account and block all cards linked to it. Every minute matters here — if the scammer has not yet withdrawn the money from their receiving account, the bank can sometimes freeze the transaction.
2. Call the Cyber Crime Helpline at 1930. This is the national helpline run by the Indian government specifically for financial cyber fraud. They can coordinate with banks in real time to freeze the scammer's account before the money disappears.
3. File an online complaint at cybercrime.gov.in. This is the official National Cyber Crime Reporting Portal. File under the “Financial Fraud” category and provide all details including transaction IDs, phone numbers, screenshots, and UPI IDs used by the scammer.
4. File an FIR at your local police station. While the online portal is faster for initial reporting, an FIR creates an official legal record that you may need later for insurance claims, bank disputes, or legal proceedings.
5. Change all your passwords immediately — banking passwords, email, UPI PIN, and any accounts that may have been compromised. Do this from a different device if possible, in case your primary device has been compromised through malware or remote access.
6. Report the scammer's phone number and UPI ID on the platform where the fraud occurred (WhatsApp, your UPI app, OLX, etc.) so they can take action and prevent other users from falling victim.

Share this article with your family, especially with elderly parents and relatives who may not be as familiar with digital scams. Many of these frauds specifically target older people who are less comfortable with technology but have substantial savings. One conversation about these scams could save someone from losing their life savings.