Cyber Threats & Protection Master Catalog
Scams and threats Indian users face today under various groups — how each works, the red flags, and how to stay protected.
Fraudsters create fake KYC messages and look-alike websites.
Unexpected SMS or WhatsApp links, urgency.
Never click unsolicited KYC links; open official bank/wallet app directly.
Scammers claim accidental money transfer and send UPI collect requests disguised as refunds.
Unsolicited UPI collect requests labeled as 'refunds'.
Remember accepting payment requests can send money OUT. Verify bank statement independently.
Scammers hijack mobile numbers to intercept banking OTPs and gain account control.
Sudden loss of mobile network without explanation.
Never disclose OTP for SIM replacement; contact telecom provider immediately if network drops.
Tricking users into scanning QR codes and entering UPI PIN under the guise of receiving money.
Being asked to scan a QR code and enter a PIN to receive funds.
Read UPI screen carefully; entering PIN sends money OUT.
Delivery impersonator claims a refund is due and prompts a QR scan.
Refunds requiring QR scan or PIN entry.
Read UPI screen; refunds never require entering PIN.
Unauthorized contactless transactions via NFC in crowded environments.
Unmonitored NFC enabled on devices.
Switch off NFC when not in use, monitor notifications regularly.
Fake investment apps show false profits, small initial returns, then demand taxes/fees for withdrawals.
Unsolicited contact via WhatsApp/Telegram, guaranteed high returns, withdrawal fees.
Verify intermediary/company through official SEBI channels before investing.
Lures victims with fake lottery wins and requires advance 'processing fees' to release funds.
Unexpected prize notifications, demand for advance payment to claim winnings.
Ask if you entered the lottery; never send money or pay processing fees for unexpected prizes.
Claims policy matured with large payouts pending, demanding advance release fees or taxes.
Demands for advance fees to release insurance maturity funds.
Contact LIC through official channels; never pay strangers to release maturity money.
Bogus agents request KYC and OTP under the pretext of health insurance policy updates.
Unsolicited calls from agents requesting OTP.
Verify agent and policy directly through insurer's official website/app.
Fake airdrops or minting sites trick users into connecting wallets and signing malicious smart contract approvals.
Free token promises, urgent dApp connections, unexpected signature requests.
Never connect wallets to unverified links; revoke unnecessary token allowances regularly.
Scammers pose as Police, CBI, or officials conducting 'digital arrest' over video call, claiming involvement in crime.
Video call arrest threats, fear tactics, demand for immediate money transfer.
Stop the call, disconnect, and independently contact organization/family. Never transfer money under threat.
Exploits fear of losing regular pension income through fake urgent KYC/update messages.
Urgent SMS/WhatsApp links regarding pension or EPFO KYC.
Check service directly through official EPFO website/app; inspect website addresses.
Exploits fear of family medical emergencies by demanding immediate UPI payment for hospital bills.
Urgent hospitalization messages with direct UPI IDs.
Call hospital using independently obtained official numbers to confirm status.
Fake parcels, drug allegations, or customs cases used to create panic and extort money.
Calls about illegal parcels, customs duty, or police involvement over phone.
Do not share Aadhaar, OTP, or money. Check parcel status via official courier apps only.
Unauthorized attempts to access biometric data or trick users into sharing UIDAI OTPs.
Calls claiming to be from UIDAI asking for OTP.
Use official UIDAI/My Aadhaar channels; lock/unlock biometrics yourself.
Exploits love for children/grandchildren by claiming an emergency or lost phone, asking for urgent money.
Urgent money requests from unknown numbers claiming to be family.
Call child's previously known number directly. Create a family secret code word.
Fake identities built over time (military personnel, expats) leading to requests for financial assistance.
Online-only relationships asking for money after building trust.
Do not transfer money to online acquaintances.
Manipulating targets using personal info, photos, and simulated voices of loved ones.
Urgent financial requests from familiar names/photos.
Independently call family member before acting.
Simulated emergency calls testing organizational or family readiness against scams.
Panic-inducing emergency calls from 'family'.
Stop, disconnect, call known family number, use secret word.
Pop-ups claim virus detected; scammers trick victims into installing remote access software (AnyDesk).
Pop-up warnings, requests to install remote access apps or share screens.
Never allow unknown persons remote access or install remote software based on stranger instructions.
AI imitates voices and faces of family members on video calls to request urgent funds.
Familiar face/voice urgently asking for money.
Pause, use family secret code word, or call known number.
Fraudsters create typosquatted websites with similar names and spellings to capture credentials.
Subtle spelling changes, extra words, strange domains, padlock alone.
Check complete website address; open official apps/sites directly.
Risks from unofficial apps, lack of device locks, or insecure public Wi-Fi.
Using unofficial app stores or public Wi-Fi for banking.
Use official apps from trusted stores, enable PIN/biometric locks, avoid public Wi-Fi.
Scammers use short audio clips from social media to clone voices of family members or executives for emergency calls.
Unusual phone numbers, hurried emergency tones, demands for immediate wire/UPI transfers.
Establish family/office verification code words; call back on known independent numbers.
Fake messages threaten immediate power disconnection unless payment links are clicked.
Threatening SMS/WhatsApp messages about electricity disconnection.
Check bill through official app/website using official customer-care numbers.
Attractive salaries used as bait, followed by demands for registration, joining, or training fees.
Requests for advance fees before employment.
Verify company and job vacancy through official websites.
Exploits charitable intentions after disasters using forwarded messages and fake UPI IDs.
Forwarded WhatsApp donation appeals with unknown UPI IDs.
Go directly to recognized organization's official website to donate.
Scammers impersonate Army officers or professionals on marketplaces to build trust, then request token payments/QR scans.
Sellers claiming military/official status asking for advance QR scans or token payments.
Meet safely, verify independently; uniforms/IDs are not proof.
Outsiders attempt to clone access cards or collect RFID cards under the guise of updates.
Strangers asking to photograph or 'update' access cards.
Never hand over RFID cards; verify updates with society management.
Websites use pre-ticked boxes, hidden charges, and auto-added services to deceive buyers.
Pre-ticked checkboxes, price discrepancies at checkout.
Check cart carefully before paying; remove extra charges.
Sensational clickbait headlines in phone feeds lure users into phishing traps.
Too-good-to-be-true headlines ('Won 1 Lakh', 'Bank Blocked').
Check source and verify through official organization channels.
Victims are added to Telegram groups, paid small sums for liking YouTube videos, then lured into paying 'investments' to unlock higher-tier tasks.
Easy money for simple tasks, shifting to Telegram/WhatsApp groups, deposit requirements.
Remember real jobs never ask you to pay money to earn a salary.
No threats match that search.