How they actually get people.
Every one of these is running in India right now. The script barely changes - which is exactly why it is catchable.
Scam types
Account Takeover & Identity
- All scams
- Account Takeover & Identity10
- Advance Fee & Prize5
- Banking & Payments16
- Business & Corporate6
- Crypto2
- Device & Malware6
- Extortion2
- Government & Authority Impersonation13
- Investment & Trading12
- Jobs & Earnings6
- Loans & Credit1
- Relationship & Social3
- Shopping & Services8
- Tax, Insurance & Benefits4
- UPI & QR7
10 scams
Account Takeover & Identity · Identity theft
Aadhaar Identity Appropriation / Misuse
Aadhaar-holder identity information is altered, appropriated, disclosed or used without authorization The objective is typically to impersonate the victim or enable financial/service fraud using stolen identity.
Also called Aadhaar identity theft, Aadhaar misuse
Account Takeover & Identity · Telephony impersonation
Caller ID Spoofing Impersonation Scam
A fraudster falsifies the caller ID shown on the victim's phone to disguise the true origin The objective is typically to increase success of impersonation, credential theft or fraudulent payments.
Also called fake caller ID, spoofed call
Account Takeover & Identity · Password reuse attack
Credential-Stuffing Account Takeover
Stolen username/password pairs are automatically tried against other online accounts The objective is typically to take over accounts and potentially access money, identity data or contacts.
Also called credential stuffing, password reuse attack
Account Takeover & Identity · AI-enabled identity fraud
Deepfake / Synthetic Identity Financial Fraud
AI-generated faces, videos or synthetic identities are used to defeat or deceive financial authentication The objective is typically to bypass identity checks and enable account, payment or other financial fraud.
Also called AI identity scam, deepfake KYC fraud
Account Takeover & Identity · Identity authority impersonation
Fake Aadhaar / Identity-Collection Agency Scam
A person or organization pretends to be authorized to collect Aadhaar identity information The objective is typically to misuse identity information for impersonation, unauthorized services or downstream fraud.
Also called Aadhaar agent scam, fake Aadhaar centre
Account Takeover & Identity · Social-account phishing
Fake Social-Media Verification Badge Scam
A message/page offers or threatens account verification and uses the platform's verification-badge concept The objective is typically to steal credentials and take over the social-media account.
Also called blue tick scam, verification badge phishing
Account Takeover & Identity · Government-account takeover
Income Tax E-filing Account Takeover / Misuse
An Income Tax e-filing account is compromised or accessed without authorization The objective is typically to misuse the tax account, identity information or linked services.
Also called e-filing hack, income tax account takeover
Account Takeover & Identity · Identity/account compromise
Profile Hacking / Identity Theft
A social or online profile is taken over or personal identity data is stolen for fraud The objective is typically to take over accounts, impersonate the victim or enable financial fraud.
Also called identity theft, profile hack
Account Takeover & Identity · Messaging-account takeover
WhatsApp Account Takeover Fraud
Fraudsters obtain control of a WhatsApp account and then use the trusted identity to deceive contacts The objective is typically to take over the account and use it to solicit money or sensitive information from contacts.
Also called WhatsApp OTP scam, WhatsApp hacked scam
Account Takeover & Identity · Account rental
WhatsApp Web Account Renting Scam
Social-media posts recruit people to rent or provide access to their WhatsApp Web accounts The objective is typically to allow the account to be used in fraud/crime and expose the owner and contacts to harm.
Also called WhatsApp Web rental, WhatsApp rent scam
The tactics
Eight scripts that account for most of what lands on Indian phones.
The one that empties accounts fastestKYC / PAN / Aadhaar "expiry"
An SMS or WhatsApp from "your bank" says your KYC has expired and the account will be frozen within 24 hours. A link takes you to a page that looks exactly right, and asks for your card number, then the OTP.
The one that starts with ₹150 creditedPart-time task job
A WhatsApp message from an unknown international number offers ₹2,000-5,000 a day for liking YouTube videos or rating hotels. You’re moved to Telegram. The first three tasks pay real money into your account. Then comes the "prepaid task" - deposit ₹10,000 to unlock a bigger commission. Every deposit needs one more deposit to withdraw.
The one people are too embarrassed to reportDigital arrest
A call claiming to be CBI, Customs, or the Narcotics Bureau: a parcel in your name contained drugs, or your Aadhaar was used for money laundering. They move you to a video call with a fake police backdrop and keep you on it for hours, telling you not to contact anyone. Then they demand a "verification deposit" to a bank account.
The one that reverses the direction of moneyQR code "to receive"
You’re selling something on OLX or Facebook Marketplace. The "buyer" sends a QR code and says scan it to receive the payment. Sometimes they even send a small amount first to build trust.
The one that uses your own screen against youFake customer care + screen share
You Google a helpline number for a refund and land on a paid ad or an SEO’d fake page. The "agent" is helpful, then asks you to install AnyDesk, TeamViewer, or Quick Support so they can "process the refund faster". Once installed, they watch you type your PIN.
The one that looks like a favourWrong transfer / refund reversal
Money arrives in your account. A stranger calls, distressed, saying they transferred it by mistake and please send it back. The incoming money is often from a stolen account or a credit that will be reversed - you end up paying twice.
The one that ends in blackmailInstant loan apps
A loan approved in four minutes with no paperwork - but the app demands access to your contacts and photo gallery. Repayment terms turn out to be brutal, and when you fall behind, they message everyone in your contacts and send morphed photos.
The one dressed up as financial literacyWhatsApp trading group
You’re added to a group with a "SEBI-registered" analyst and hundreds of members posting screenshots of profits. The calls are free and seem accurate. Then comes an invitation to a private app with a special IPO allotment or block deal. The app shows your money growing. It just can’t be withdrawn.