How they actually get people.
Every one of these is running in India right now. The script barely changes - which is exactly why it is catchable.
Scam types
Banking & Payments
- All scams
- Account Takeover & Identity10
- Advance Fee & Prize5
- Banking & Payments16
- Business & Corporate6
- Crypto2
- Device & Malware6
- Extortion2
- Government & Authority Impersonation13
- Investment & Trading12
- Jobs & Earnings6
- Loans & Credit1
- Relationship & Social3
- Shopping & Services8
- Tax, Insurance & Benefits4
- UPI & QR7
16 scams
Banking & Payments · PIN theft
ATM / Keypad PIN Thermal-Residue Theft
A fraudster analyzes residual heat left by recent finger presses on a keypad The objective is typically to infer a PIN/password that can support later account or card fraud.
Also called heat signature PIN scam, thermal PIN attack
Banking & Payments · KYC social engineering
Bank KYC Update Phishing Scam
An SMS or email says your bank KYC is due and includes a link or urgent instruction The objective is typically to capture credentials or move the victim into a fraudulent payment/account-takeover flow.
Also called KYC scam, bank KYC phishing
Banking & Payments · Credential phishing
Banking Credential Phishing Email
An email impersonates RBI, a bank or a security team and claims an account/security action is required The objective is typically to steal credentials and identity information for unauthorized access.
Also called bank security email scam, internet banking phishing
Banking & Payments · Card fraud
Card-Not-Present / E-commerce Card Fraud
Card credentials are stolen or socially engineered for use without the physical card The objective is typically to perform unauthorized online card transactions.
Also called CNP fraud, online card fraud
Banking & Payments · Card fraud
Debit / Credit Card Fraud
Card details, authentication information or the physical/payment context are abused to make unauthorized transactions The objective is typically to make unauthorized card payments or withdrawals.
Also called card fraud, credit card scam, debit card scam
Banking & Payments · Securities-account takeover
Demat / Depository Account Fraud
A demat or depository account is targeted through unauthorized access, impersonation or credential theft The objective is typically to take control of or misuse securities holdings/account access.
Also called demat scam, depository fraud
Banking & Payments · Wallet fraud
E-Wallet Related Fraud
A digital-wallet account or wallet-linked transaction is targeted through social engineering, credential theft or unauthorized access The objective is typically to make unauthorized wallet transactions or move wallet-linked funds.
Also called mobile wallet fraud, wallet scam
Banking & Payments · Support impersonation
Fake Customer Care / Helpline Scam
A victim searches online or on social media for customer support and reaches a number controlled by fraudsters The objective is typically to steal credentials or induce unauthorized payments while pretending to solve the original problem.
Also called fake helpline, fake support number
Banking & Payments · Voice social engineering
Fraud Call / Vishing Scam
A caller pretends to represent a trusted institution and requests sensitive or transaction information The objective is typically to use voice-based social engineering to obtain credentials or cause an unauthorized transfer.
Also called fraud call, vishing
Banking & Payments · Online banking fraud
Internet Banking Account Takeover
Credentials or authentication are stolen to gain unauthorized access to internet banking The objective is typically to access the account and transfer funds without authorization.
Also called netbanking fraud, online banking takeover
Banking & Payments · Official reporting category
Internet Banking Related Fraud (Umbrella)
Online banking access or transactions are abused through credential theft, impersonation or account compromise The objective is typically to cause unauthorized internet-banking transactions.
Also called netbanking fraud
Banking & Payments · Fraud-proceeds laundering
Money Mule Recruitment Scam
A person is recruited to receive and forward money through their bank account, often for a commission The objective is typically to involve the account holder in laundering proceeds of fraud and expose them to financial/legal consequences.
Also called account rental, money transfer job, mule account
The tactics
Eight scripts that account for most of what lands on Indian phones.
The one that empties accounts fastestKYC / PAN / Aadhaar "expiry"
An SMS or WhatsApp from "your bank" says your KYC has expired and the account will be frozen within 24 hours. A link takes you to a page that looks exactly right, and asks for your card number, then the OTP.
The one that starts with ₹150 creditedPart-time task job
A WhatsApp message from an unknown international number offers ₹2,000-5,000 a day for liking YouTube videos or rating hotels. You’re moved to Telegram. The first three tasks pay real money into your account. Then comes the "prepaid task" - deposit ₹10,000 to unlock a bigger commission. Every deposit needs one more deposit to withdraw.
The one people are too embarrassed to reportDigital arrest
A call claiming to be CBI, Customs, or the Narcotics Bureau: a parcel in your name contained drugs, or your Aadhaar was used for money laundering. They move you to a video call with a fake police backdrop and keep you on it for hours, telling you not to contact anyone. Then they demand a "verification deposit" to a bank account.
The one that reverses the direction of moneyQR code "to receive"
You’re selling something on OLX or Facebook Marketplace. The "buyer" sends a QR code and says scan it to receive the payment. Sometimes they even send a small amount first to build trust.
The one that uses your own screen against youFake customer care + screen share
You Google a helpline number for a refund and land on a paid ad or an SEO’d fake page. The "agent" is helpful, then asks you to install AnyDesk, TeamViewer, or Quick Support so they can "process the refund faster". Once installed, they watch you type your PIN.
The one that looks like a favourWrong transfer / refund reversal
Money arrives in your account. A stranger calls, distressed, saying they transferred it by mistake and please send it back. The incoming money is often from a stolen account or a credit that will be reversed - you end up paying twice.
The one that ends in blackmailInstant loan apps
A loan approved in four minutes with no paperwork - but the app demands access to your contacts and photo gallery. Repayment terms turn out to be brutal, and when you fall behind, they message everyone in your contacts and send morphed photos.
The one dressed up as financial literacyWhatsApp trading group
You’re added to a group with a "SEBI-registered" analyst and hundreds of members posting screenshots of profits. The calls are free and seem accurate. Then comes an invitation to a private app with a special IPO allotment or block deal. The app shows your money growing. It just can’t be withdrawn.