How they actually get people.
Every one of these is running in India right now. The script barely changes — which is exactly why it is catchable.
Scam types
101 scams
UPI & QR · Aadhaar-linked payment fraud
Aadhaar Enabled Payment System (AePS) Fraud
A fraud scheme targets Aadhaar-enabled banking/payment transactions or authentication at AePS touchpoints The objective is typically to cause an unauthorized Aadhaar-enabled debit or withdrawal.
Also called Aadhaar payment scam, AePS scam
Account Takeover & Identity · Identity theft
Aadhaar Identity Appropriation / Misuse
Aadhaar-holder identity information is altered, appropriated, disclosed or used without authorization The objective is typically to impersonate the victim or enable financial/service fraud using stolen identity.
Also called Aadhaar identity theft, Aadhaar misuse
Device & Malware · Mobile malware
Android Accessibility-Control Malware Fraud
A malicious Android app abuses accessibility permissions to gain persistent or extensive device control The objective is typically to take control of the device, steal data/authentication and facilitate financial fraud.
Also called Android God Mode malware, accessibility scam
Shopping & Services · Marketplace impersonation
Army Personnel Marketplace Impersonation Scam
A fraudster uses Army personnel details or identity cues to create trust in a buying/selling transaction The objective is typically to exploit the trusted identity to induce a fraudulent payment.
Also called army officer OLX scam, military buyer scam
Banking & Payments · PIN theft
ATM / Keypad PIN Thermal-Residue Theft
A fraudster analyzes residual heat left by recent finger presses on a keypad The objective is typically to infer a PIN/password that can support later account or card fraud.
Also called heat signature PIN scam, thermal PIN attack
Banking & Payments · KYC social engineering
Bank KYC Update Phishing Scam
An SMS or email says your bank KYC is due and includes a link or urgent instruction The objective is typically to capture credentials or move the victim into a fraudulent payment/account-takeover flow.
Also called KYC scam, bank KYC phishing
Banking & Payments · Credential phishing
Banking Credential Phishing Email
An email impersonates RBI, a bank or a security team and claims an account/security action is required The objective is typically to steal credentials and identity information for unauthorized access.
Also called bank security email scam, internet banking phishing
Device & Malware · Financial malware
Banking Trojan Credential Theft
Malware is delivered to a device and is designed to steal banking or confidential information The objective is typically to steal credentials and confidential information for financial fraud.
Also called bank Trojan, banking malware
Advance Fee & Prize · Giveaway fraud
Bogus Giveaway Scam
A social/video-platform post promises free money, products or prizes The objective is typically to take payment/crypto or steal account/payment information.
Also called free giveaway scam, prize giveaway scam
Business & Corporate · Email/payment diversion
Business Email Compromise (BEC)
A business email account or lookalike identity is used to manipulate employees into payments or sensitive actions The objective is typically to divert company money or sensitive information to the attacker.
Also called BEC, email takeover fraud
Business & Corporate · Official reporting category
Business Email Takeover (Umbrella)
A business mailbox is compromised and used to impersonate a legitimate sender The objective is typically to enable payment diversion, BEC or data theft.
Also called BEC account takeover, email takeover
Advance Fee & Prize · Business opportunity fraud
Business Partnership / Large-Sum Email Scam
An email proposes a lucrative business partnership or access to a large sum of money The objective is typically to collect fees or misuse business/banking information under a fake partnership pretext.
Also called business proposal scam, partnership scam
The tactics
Eight scripts that account for most of what lands on Indian phones.
The one that empties accounts fastestKYC / PAN / Aadhaar "expiry"
An SMS or WhatsApp from "your bank" says your KYC has expired and the account will be frozen within 24 hours. A link takes you to a page that looks exactly right, and asks for your card number, then the OTP.
The one that starts with ₹150 creditedPart-time task job
A WhatsApp message from an unknown international number offers ₹2,000–5,000 a day for liking YouTube videos or rating hotels. You’re moved to Telegram. The first three tasks pay real money into your account. Then comes the "prepaid task" — deposit ₹10,000 to unlock a bigger commission. Every deposit needs one more deposit to withdraw.
The one people are too embarrassed to reportDigital arrest
A call claiming to be CBI, Customs, or the Narcotics Bureau: a parcel in your name contained drugs, or your Aadhaar was used for money laundering. They move you to a video call with a fake police backdrop and keep you on it for hours, telling you not to contact anyone. Then they demand a "verification deposit" to a bank account.
The one that reverses the direction of moneyQR code "to receive"
You’re selling something on OLX or Facebook Marketplace. The "buyer" sends a QR code and says scan it to receive the payment. Sometimes they even send a small amount first to build trust.
The one that uses your own screen against youFake customer care + screen share
You Google a helpline number for a refund and land on a paid ad or an SEO’d fake page. The "agent" is helpful, then asks you to install AnyDesk, TeamViewer, or Quick Support so they can "process the refund faster". Once installed, they watch you type your PIN.
The one that looks like a favourWrong transfer / refund reversal
Money arrives in your account. A stranger calls, distressed, saying they transferred it by mistake and please send it back. The incoming money is often from a stolen account or a credit that will be reversed — you end up paying twice.
The one that ends in blackmailInstant loan apps
A loan approved in four minutes with no paperwork — but the app demands access to your contacts and photo gallery. Repayment terms turn out to be brutal, and when you fall behind, they message everyone in your contacts and send morphed photos.
The one dressed up as financial literacyWhatsApp trading group
You’re added to a group with a "SEBI-registered" analyst and hundreds of members posting screenshots of profits. The calls are free and seem accurate. Then comes an invitation to a private app with a special IPO allotment or block deal. The app shows your money growing. It just can’t be withdrawn.