Digital Arrest Scam: Laws and Remedies in India

Introduction

“Digital arrest” has emerged as one of the most dangerous forms of cyber-enabled financial fraud in India.

The expression sounds official, but it has no legal existence under Indian law. Police officers, the Central Bureau of Investigation (CBI), the Enforcement Directorate (ED), the Reserve Bank of India (RBI), the Narcotics Control Bureau (NCB), courts and other government authorities do not place citizens under “digital arrest” through WhatsApp, Skype, video calls or similar platforms.

The Indian Cyber Crime Coordination Centre (I4C) has expressly warned that there is no concept of digital arrest under Indian law. In a typical scam, criminals impersonate police officers, CBI personnel, RBI officials, narcotics authorities or other government officials and accuse a victim of involvement in money laundering, drug trafficking, terrorism, illegal parcels or other serious offences. The victim is then threatened with arrest, prosecution, property seizure or reputational harm and pressured into transferring money.

These operations are frequently sophisticated. Fraudsters may use fake police stations, forged FIRs, fabricated court orders, official-looking logos, uniforms, spoofed telephone numbers, video calls and even AI-generated material to convince victims that they are communicating with genuine authorities.

The scale of the problem has become serious enough for the Supreme Court of India to initiate suo motu proceedings concerning victims of digital-arrest scams and to direct a coordinated national response involving the CBI, RBI, I4C, banks, telecom operators and other authorities.

This article examines what a digital-arrest scam is, how it operates, the criminal offences that may apply under Indian law, the remedies available to victims, the role of banks and law-enforcement agencies, and the steps an individual should take immediately after receiving such a call or transferring money.

What Is a “Digital Arrest” Scam?

A digital-arrest scam is essentially a combination of impersonation, intimidation, cheating, extortion and cyber fraud.

The fraud usually begins with a telephone call, automated voice message, WhatsApp call or video call.

A person may be told that:

their mobile number is linked to a crime;
their Aadhaar details have been misused;
a bank account in their name is involved in money laundering;
a parcel addressed to them contains narcotics or illegal articles;
their SIM card was used in criminal activity;
they are linked to terrorism financing;
a warrant has been issued against them;
a relative has been arrested;
the CBI, ED, police, RBI or another authority is investigating them; or
their assets will be frozen unless they cooperate.

The fraudsters then attempt to isolate the victim.

The I4C has explained that victims may be forced to remain continuously available on video calls through WhatsApp, Skype or similar platforms while being told that they are under “digital arrest”. Some fraudsters operate from spaces designed to look like police stations or government offices.

Eventually, the victim may be asked to transfer money for purposes such as:

“verification of funds,”
“security deposit,”
“RBI verification,”
“safe account transfer,”
“money laundering clearance,”
“temporary investigation account,”
“court security,” or
“settlement of the case.”

All of these are red flags.

Is “Digital Arrest” Recognised Under Indian Law?

No.

There is no legal procedure known as digital arrest under Indian criminal law.

The CBI reiterated this position in May 2026 while launching its ABHAY notice-verification system, expressly stating that “digital arrest” has no legal existence in India.

A genuine criminal investigation follows procedures prescribed under law.

An investigating agency may summon a person, issue notices, conduct searches where authorised, investigate offences and make arrests in accordance with the applicable statutory framework.

However, a genuine police officer or investigating agency does not legally:

arrest a person through a WhatsApp video call;
require the person to remain visible on camera for hours or days;
demand money to avoid arrest;
ask the person to transfer savings into a “safe account”;
demand payment to verify whether money is legitimate;
ask for banking passwords or OTPs; or
negotiate cancellation of a criminal case through an immediate transfer of money.

The moment a caller claims that money must be transferred to avoid “digital arrest”, the interaction should be treated as potentially fraudulent.

How Digital-Arrest Scams Typically Operate

The I4C’s advisory identifies several recurring stages.

Stage 1: Impersonation

The fraudster pretends to represent a government or regulatory institution.

Common identities include:

CBI officer;
police officer;
ED officer;
NCB officer;
RBI official;
customs officer;
telecom department official;
courier-company representative; or
judicial officer.

Fraudsters may spoof telephone numbers or display official-looking photographs and identification cards.

Stage 2: Creating Fear

The victim is told that he or she is connected with a serious criminal offence.

The objective is psychological pressure.

References to offences such as drug trafficking, money laundering, terrorism or child pornography are often used because they create immediate panic and discourage the victim from thinking critically.

Stage 3: Isolation

The fraudster often tells the victim:

“Do not tell anyone.”

“You are under surveillance.”

“Do not disconnect the video call.”

“Sharing details of the investigation is itself an offence.”

This isolation is critical to the scam because speaking to a family member, lawyer, police officer or bank official may quickly expose the fraud.

Stage 4: Fabricated Evidence

Fraudsters may display:

fake FIRs;
forged warrants;
fake Supreme Court orders;
fabricated arrest notices;
false CBI documents;
Aadhaar details;
photographs;
bank statements;
fake government seals; or
manipulated videos.

The Supreme Court’s 2025 suo motu proceedings themselves arose from allegations that fraudsters impersonated CBI and ED officials and displayed forged judicial documents while coercing victims into transferring substantial amounts.

Stage 5: The “Safe Account” Story

The victim may then be told that the authorities need to verify whether his or her funds are connected with criminal activity.

Money is transferred to an account described as an:

RBI account;
government account;
surveillance account;
court account;
verification account; or
safe custody account.

There is no legitimate law-enforcement procedure under which citizens are required to transfer their savings to unknown accounts to prove their innocence.

Why Are Digital-Arrest Scams Particularly Effective?

These scams exploit authority, fear and urgency rather than technical sophistication alone.

Victims are often well-educated professionals, businesspersons, senior citizens and retired government employees.

The fraud works because criminals deliberately create circumstances in which rational decision-making becomes difficult.

The threat may be:

“You will be arrested within two hours.”

“Police are arriving at your house.”

“Your property will be seized.”

“Your children will be investigated.”

“Your bank accounts will be frozen.”

When accompanied by uniforms, official logos and forged paperwork, such claims may appear credible.

The Government has therefore repeatedly warned citizens that law-enforcement agencies do not conduct “digital arrests”.

How Serious Is the Problem?

Cyber-enabled financial fraud has become a significant national concern.

According to the Ministry of Home Affairs, the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS) had, by 30 June 2026, helped prevent the siphoning of more than ₹11,158 crore in over 32.80 lakh complaints.

Government data also indicates that millions of financial-fraud complaints have been submitted through the National Cyber Crime Reporting Portal in recent years.

In June 2026, the National Human Rights Commission also discussed digital-arrest scams as a serious threat to the dignity, security and rights of victims, particularly because scammers frequently use fear and coercion to obtain large financial transfers.

Laws Applicable to Digital-Arrest Scams in India

There is presently no standalone statutory offence titled “digital arrest”.

Instead, the conduct may attract several offences under the Bharatiya Nyaya Sanhita, 2023, the Information Technology Act, 2000, and other laws depending on the facts.

1. Cheating — Section 318 BNS

Section 318 of the Bharatiya Nyaya Sanhita deals with cheating.

Broadly, cheating involves deception through which a person is fraudulently or dishonestly induced to deliver property or to do or omit something that he or she would not otherwise have done, resulting or potentially resulting in harm.

Where a fraudster deceives a victim and dishonestly induces the victim to transfer money, Section 318(4) may be particularly relevant.

It provides punishment extending up to seven years’ imprisonment and fine where cheating results in dishonest inducement to deliver property.

A digital-arrest scam fits the classic structure of cheating where the victim transfers money because of fabricated representations about criminal proceedings, government investigations or legal consequences.

2. Cheating by Personation — Section 319 BNS

Section 319 deals with cheating by personation.

A person commits this offence when he cheats by pretending to be another person or falsely represents himself or another person as someone else.

The offence applies whether the person impersonated is real or imaginary.

The punishment may extend to five years’ imprisonment, fine or both.

This provision may directly apply where scammers pretend to be:

CBI officers;
IPS officers;
ED officials;
judges;
RBI officials;
police personnel; or
government employees.

3. Extortion — Section 308 BNS

Many digital-arrest scams go beyond deception and involve explicit threats.

Section 308 of the BNS deals with extortion.

A person commits extortion where he intentionally places another person in fear of injury and thereby dishonestly induces that person to deliver property or valuable security.

This is especially relevant where a victim is told:

“Pay immediately or you will be arrested.”

“Transfer the money or your property will be attached.”

“Pay or your family member will be arrested.”

“Pay or the criminal allegations against you will be made public.”

Section 308 also specifically provides enhanced punishment in certain situations involving threats of accusations relating to serious offences.

This makes the extortion provisions particularly relevant to the modus operandi of many digital-arrest operations.

4. Criminal Intimidation — Section 351 BNS

Section 351 BNS deals with criminal intimidation.

A threat to a person’s body, reputation or property, made with the intention of causing alarm or compelling the person to do something he or she is not legally required to do, can amount to criminal intimidation.

Digital-arrest scammers often deliberately create fear of:

arrest;
imprisonment;
prosecution;
social embarrassment;
seizure of property; or
harm to family members.

Depending upon the nature of the threats, Section 351 may therefore become applicable.

5. Forgery-Related Offences

Digital-arrest scams frequently involve forged documents.

These may include:

arrest warrants;
FIRs;
court orders;
government identity cards;
notices;
attachment orders;
investigation reports; and
official seals.

Forgery-related provisions of the BNS may therefore be invoked depending on the documents created and used.

The Supreme Court’s suo motu digital-arrest proceedings, for example, arose in a case where the victims alleged that forged judicial and investigative documents had been shown to them. The FIRs in that matter included BNS provisions relating to cheating, extortion and forged documents.

6. Identity Theft — Section 66C, Information Technology Act

Section 66C of the Information Technology Act, 2000 deals with identity theft.

It applies where a person fraudulently or dishonestly uses another person’s electronic signature, password or other unique identification feature.

The offence is punishable with imprisonment extending up to three years and fine.

Where cybercriminals misuse Aadhaar-linked information, passwords, digital identities or other unique electronic credentials, this provision may become relevant.

7. Cheating by Personation Using Computer Resources — Section 66D IT Act

Section 66D is particularly important in online impersonation fraud.

It punishes cheating by personation carried out through a communication device or computer resource.

The punishment may extend to three years’ imprisonment and fine.

Because digital-arrest scams commonly occur through mobile phones, WhatsApp, Skype or internet-based video platforms, Section 66D may operate alongside relevant BNS provisions.

Can More Than One Provision Apply?

Yes.

One scam can involve several distinct acts.

For example, a criminal may:

impersonate a CBI officer,
send a forged warrant,
threaten the victim with arrest, and
deceive the victim into transferring ₹20 lakh.

Such conduct may potentially involve offences relating to:

cheating;
cheating by personation;
extortion;
criminal intimidation;
forgery;
use of forged documents;
identity theft; and
cheating through computer resources.

The precise provisions applied depend upon the evidence and the investigating agency’s findings.

Supreme Court Intervention on Digital-Arrest Scams

The seriousness of the issue has led to direct intervention by the Supreme Court.

In In Re: Victims of Digital Arrest Related to Forged Documents, Suo Motu Writ Petition (Criminal) No. 3 of 2025, proceedings were initiated after a senior citizen couple complained that fraudsters had impersonated CBI, ED and judicial officials and allegedly coerced them into transferring over ₹1 crore.

On 1 December 2025, the Supreme Court recorded the national dimensions of digital-arrest fraud and recognised that multiple FIRs had been registered across different States. It observed that senior citizens were frequently targeted.

The Court subsequently directed the CBI to undertake investigation into digital-arrest cases on a nationwide basis and sought cooperation from States and other institutions.

The proceedings have also examined issues concerning:

mule bank accounts;
involvement of bank officials;
fraudulent SIM cards;
telecom infrastructure;
inter-agency coordination;
restoration of victims’ money;
bank grievance mechanisms; and
technological methods for detecting suspicious transactions.

In August 2026, the Supreme Court issued further interim directions concerning prevention, investigation, grievance redressal and restoration of defrauded funds, while emphasising that continued monitoring remained necessary.

These proceedings mark an important development because digital-arrest fraud is increasingly being addressed not merely as an isolated cheating offence but as an organised cybercrime ecosystem involving communications networks, banking channels and mule accounts.

What Should You Do If You Receive a Digital-Arrest Call?

The first principle is simple:

Do not panic.

If someone claims that you are under “digital arrest”, you should assume the claim is false unless independently verified through official channels.

Take the following steps.

Disconnect the call

You are not legally required to remain connected to a supposed police officer through WhatsApp or video call.

Disconnect.

Do not transfer money

Never transfer funds to an alleged:

RBI verification account;
police account;
court account;
investigation account;
CBI account; or
safe account.

Government investigators do not establish your innocence by asking you to transfer your savings.

Never disclose:

OTPs;
UPI PINs;
card CVVs;
internet-banking passwords;
debit-card PINs; or
account-access credentials.

Government agencies do not require such credentials to conduct criminal investigations.

Verify independently

Do not call back the number provided by the alleged officer.

Find the institution’s official contact information independently through its official website or other trusted source.

CBI Notice Verification Through ABHAY

An important development in 2026 is the CBI’s introduction of ABHAY, an AI-powered system for verifying notices purportedly issued by the CBI.

A person receiving a suspicious CBI notice can access the verification system through the CBI’s official website, complete OTP verification and upload the notice for authenticity checking.

The CBI introduced the system specifically in response to fake-notice and digital-arrest frauds.

This is particularly useful because sophisticated scams increasingly rely on realistic-looking forged notices.

What If You Have Already Transferred Money?

Speed is extremely important.

The faster the transaction is reported, the greater the possibility that funds may still be traced, held or prevented from being transferred through further mule accounts.

Step 1: Call 1930 Immediately

India’s national cyber financial-fraud helpline is:

1930

It is operated as part of the national cybercrime response framework.

The purpose of the system is to facilitate rapid reporting and coordination with banks and financial intermediaries so that fraudulent funds may potentially be intercepted before being dissipated.

Step 2: Report the Fraud on the National Cyber Crime Reporting Portal

A complaint should also be submitted through:

National Cyber Crime Reporting Portal — cybercrime.gov.in

The NCRP allows citizens to report cybercrime incidents and routes complaints to the relevant State or Union Territory law-enforcement agency.

Preserve the acknowledgement or complaint number.

Step 3: Contact Your Bank Immediately

Inform the bank that the transaction resulted from cyber fraud.

Request the bank to:

mark the transaction as fraudulent;
trace the beneficiary account;
contact the beneficiary bank;
attempt to place a hold or lien where possible;
preserve transaction records; and
provide a written acknowledgement of your complaint.

The banking trail can move very quickly through multiple mule accounts, so delay may significantly reduce the possibility of recovery.

Step 4: Approach the Police or Cyber Crime Police Station

Depending upon the circumstances, a victim may approach:

the nearest police station;
the local cybercrime police station;
the State cybercrime unit; or
another competent law-enforcement agency.

Provide the 1930 acknowledgement and NCRP complaint details where available.

Step 5: Preserve Evidence

Do not delete anything.

Preserve:

telephone numbers;
WhatsApp chats;
video-call logs;
screenshots;
fake warrants;
notices;
emails;
UPI IDs;
beneficiary account details;
bank statements;
transaction IDs;
QR codes;
website addresses;
Telegram usernames;
Skype IDs;
photographs of alleged officers;
voice recordings, where lawfully available; and
dates and times of conversations.

This material may help investigators establish the digital and financial trail.

Can the Money Be Recovered?

Sometimes, yes—but recovery is not guaranteed.

The chances are generally better where the fraud is reported rapidly before the funds are transferred through multiple accounts or converted into other assets.

The Government’s Citizen Financial Cyber Fraud Reporting and Management System connects law-enforcement agencies with banks, payment intermediaries and other financial institutions to attempt to stop the movement of defrauded funds.

By 30 June 2026, the system had helped save more than ₹11,158 crore across more than 32.80 lakh complaints, according to the Ministry of Home Affairs.

This is why victims should not spend hours trying to investigate the scam themselves.

The priority should be:

1930 → Bank → NCRP → Police

as quickly as possible.

Will the Bank Automatically Refund the Money?

Not necessarily.

This is an important legal distinction.

RBI rules on customer liability provide protection in specified cases of unauthorised electronic banking transactions.

For example, where a third-party breach occurs without negligence by the customer or bank and the customer reports the transaction within the prescribed period, the customer’s liability may be limited or zero depending on the circumstances.

However, many digital-arrest scams involve a victim personally authorising the transfer because of deception or coercion.

That can make the situation legally different from an unauthorised transaction in which the customer did not approve the payment at all.

Accordingly, victims should not assume that RBI’s zero-liability framework automatically guarantees reimbursement in every digital-arrest case.

The specific facts matter, including:

how the transaction occurred;
whether credentials were compromised;
whether the customer authorised payment;
when the bank was informed;
whether fraud-detection systems raised alerts;
whether the bank acted promptly after receiving the complaint; and
whether institutional negligence contributed to the loss.

The Supreme Court’s ongoing proceedings are significant in this respect because they have focused specifically on grievance redressal and restoration mechanisms for cyber-fraud victims.

RBI Integrated Ombudsman

If a customer believes that a regulated bank or payment institution has failed to properly address a complaint relating to banking services, the Reserve Bank – Integrated Ombudsman Scheme, 2021 may provide an additional grievance-redress mechanism, subject to the Scheme’s conditions.

The Scheme covers specified regulated entities including commercial banks and other covered financial institutions.

This should be distinguished from criminal proceedings against the fraudsters.

An Ombudsman complaint concerns deficiencies attributable to a regulated financial entity; it does not substitute for reporting the underlying cybercrime to police, NCRP or 1930.

What Are Mule Accounts?

Digital-arrest fraud rarely ends with the first receiving account.

Fraudsters frequently use mule accounts—bank accounts used to receive, move or disguise proceeds of crime.

Money may move rapidly through several accounts, payment systems, wallets or other financial channels.

The Supreme Court proceedings concerning digital-arrest scams have specifically examined the role of mule accounts and possible involvement or negligence within banking channels.

This is another reason immediate reporting is essential.

Once funds move through multiple layers, tracing and recovery become considerably more difficult.

Why Senior Citizens Are Frequently Targeted

Supreme Court proceedings have noted that senior citizens appear frequently among victims of these scams.

Fraudsters may deliberately target individuals believed to have:

retirement savings;
fixed deposits;
limited familiarity with cyber fraud;
fear of legal authorities; or
less immediate access to technical assistance.

Families should therefore discuss digital-arrest scams proactively with elderly relatives.

A useful family rule is:

No large transfer should ever be made in response to a law-enforcement call without first speaking to a trusted family member, lawyer or the local police.

Common Red Flags

A communication should immediately raise suspicion where the caller:

says you are under “digital arrest”;
insists you remain on video continuously;
tells you not to speak to family members;
asks for OTPs or passwords;
demands immediate money transfer;
asks you to transfer all savings for “verification”;
claims the RBI maintains a temporary safe account for investigations;
threatens arrest if the call is disconnected;
sends judicial documents through WhatsApp and demands money;
asks you to liquidate fixed deposits;
claims an investigation can be “settled” by paying money; or
insists that confidentiality prevents you from consulting a lawyer.

These are characteristic indicators of fraud rather than genuine criminal procedure.

What Genuine Law-Enforcement Agencies Do Not Do

Citizens should remember the following principle:

A genuine criminal investigation does not require you to prove your innocence by transferring your money to the investigating officer.

CBI, police, ED, RBI and courts do not operate secret “safe accounts” into which citizens must transfer their life savings.

The RBI is a banking regulator and central bank. It does not conduct criminal investigations into individual citizens through video calls or demand fund transfers for verification.

Similarly, courts do not conduct proceedings by threatening citizens through WhatsApp and directing payments into personal or unfamiliar bank accounts.

Government Measures Against Digital-Arrest Fraud

The Union Government has adopted several responses through I4C, telecom authorities, banks and law-enforcement agencies.

These have included:

blocking accounts used in cybercrime;
blocking fraudulent SIM cards;
identifying suspicious telecom infrastructure;
public awareness campaigns;
coordination between financial institutions and police;
operation of the 1930 helpline;
development of cyber-fraud monitoring systems; and
collaboration with online platforms.

The Government has also worked to identify and block thousands of Skype IDs and WhatsApp accounts reportedly associated with digital-arrest fraud.

The Department of Telecommunications has additionally introduced measures aimed at reducing misuse of Indian mobile-number identities in app-based communication systems, including measures directed at phishing, impersonation and digital-arrest scams.

The Role of CFCFRMS

One of the most important mechanisms for victims is the Citizen Financial Cyber Fraud Reporting and Management System.

CFCFRMS brings together:

law-enforcement agencies;
banks;
payment intermediaries;
financial institutions;
wallets;
payment systems; and
other stakeholders

to facilitate rapid action after cyber-financial fraud is reported.

In July 2026, the Ministry of Home Affairs stated that a comprehensive SOP had been issued concerning complaint processing, bank coordination, grievance redressal, lien removal and restoration of defrauded money to rightful claimants through the NCRP/CFCFRMS framework.

This represents a significant development in the victim-recovery architecture.

Can a Victim Be Blamed for Falling for the Scam?

Legally, the focus should remain on the conduct of the offenders and the applicable evidentiary issues.

Digital-arrest scams are carefully engineered psychological operations.

Victims may be kept under pressure for hours or days and subjected to a combination of:

fear;
authority;
isolation;
false evidence;
surveillance claims;
legal terminology; and
threats.

Falling victim to such manipulation does not change the criminal character of the perpetrators’ conduct.

At the same time, questions concerning reimbursement by banks may depend on the technical circumstances surrounding the transaction and the conduct of both the financial institution and customer.

The criminal case and the banking-liability question should therefore not be confused.

Do Not Pay “Recovery Agents”

A second fraud sometimes follows the first.

After a cyber-fraud victim reports the loss publicly or seeks assistance online, another person may claim:

“We can recover your money.”

The alleged recovery agent may then demand:

legal processing fees;
cryptocurrency deposits;
unlocking charges;
tracing fees; or
advance commissions.

Victims should therefore be cautious about unsolicited recovery offers.

Recovery should ordinarily be pursued through recognised banking, law-enforcement and legal channels.

Practical Checklist for Victims

If you receive a suspicious law-enforcement call:

Stop. Disconnect. Verify.

If money has already been transferred:

Call 1930 immediately.
Notify your bank immediately.
File a complaint on cybercrime.gov.in.
Approach the police/cybercrime police station.
Preserve all electronic evidence.
Provide complete beneficiary and transaction details.
Do not make additional payments.
Do not communicate with alleged recovery agents without verification.
Change compromised passwords and secure banking accounts where necessary.
Continue following up using your NCRP, bank and police complaint numbers.

Important Legal Distinction: Digital Arrest Is Not a New Police Power

The phrase “digital arrest” should not be normalised as though it refers to a new method of arrest created by technology.

It does not.

It is principally a term used to describe a fraudulent method through which criminals create the illusion that a person is under official custody while the victim remains physically at home or another location.

The legal reality is almost the opposite:

the supposed “arrest” is fake, while the cheating, intimidation, forgery and extortion may constitute genuine criminal offences.

Conclusion

Digital-arrest fraud represents a modern form of organised crime built around an old principle: fear can be used to induce a person to surrender property.

What has changed is the technology.

Video calls, artificial intelligence, spoofed numbers, forged digital documents, fake government offices and instant banking systems allow fraudsters to create extraordinarily convincing scenarios and transfer money across multiple accounts within minutes.

Indian law does not recognise any concept of “digital arrest.”

Depending upon the facts, perpetrators may face criminal liability for offences including cheating under Section 318 BNS, cheating by personation under Section 319, extortion under Section 308, criminal intimidation under Section 351, forgery-related offences, identity theft under Section 66C of the IT Act and online cheating by personation under Section 66D.

The Supreme Court’s ongoing intervention demonstrates the seriousness of the threat and the need for coordinated action involving investigating agencies, financial institutions, telecom operators, regulators and technology platforms.

For an individual citizen, however, the most important legal and practical rule remains straightforward:

No genuine law-enforcement agency will place you under “digital arrest” through a phone or video call and demand that you transfer money to avoid arrest or prove your innocence.

If money has already been transferred, speed can determine whether it is recoverable.

The immediate response should therefore be:

Call 1930, notify the bank, report the matter through the National Cyber Crime Reporting Portal and approach the competent police or cybercrime authorities without delay.

Public awareness remains one of the strongest defences against the scam. The more citizens recognise that “digital arrest” has no legal existence, the harder it becomes for criminals to convert fear of law enforcement into financial loss.