Digital
arrests.
Fake
UPI
receipts.
Legal recourse.
The latest wave of cybercrime in India involves impersonators posing as CBI or Customs officials, keeping victims under “digital arrest” over video calls while extorting money. legalinfo.in breaks down the IT Act provisions, the BNSS 2023 implications, and how to recover stolen funds.
Read the field notesFour stages of the fraud.
One legal response.
Cybercriminals are using sophisticated psychological tactics. Hover any card to lift it out of the pile — the illustration, the statute, and the legal recourse follow underneath.
Digital arrest scams:
the statute, the forum, the fix.
There is no provision in Indian law that allows police to place a citizen under “digital arrest.” Impersonators exploit this ignorance. Here is how to dismantle the threat, freeze the funds, and invoke the IT Act.
I. The Legal Myth of “Digital Arrest”
The term “digital arrest” is a psychological weapon, not a legal reality. No police officer, judge, or customs official can arrest a citizen over a Skype, WhatsApp, or Zoom call. The Supreme Court of India and the Indian Cyber Crime Coordination Centre (I4C) have repeatedly clarified that any such demand is fraudulent. The scam relies on isolating the victim and creating a false aura of authority.
What to do immediately
- Disconnect the call. Do not engage or argue.
- Do not download any screen-sharing apps (AnyDesk, TeamViewer) they suggest.
- If money has been transferred, call the bank immediately to request a transaction freeze on the beneficiary account.
- Report the fraud on the National Cyber Crime Reporting Portal (1930.gov.in) or call the helpline 1930.
- File an FIR at the local police station, ensuring they register it under the IT Act and BNSS 2023.
The law does not recognise a virtual arrest. A scammer in a fake uniform is still just a scammer.
The applicable statutes
The primary charge is Section 66D of the Information Technology Act, 2000 (cheating by personation using a computer resource), which carries imprisonment up to three years and a fine up to ₹1 lakh. If identity theft is involved, Section 66C applies. Under the new Bharatiya Nyaya Sanhita, 2023, the acts constitute cheating (Section 318), extortion (Section 308), and impersonation (Section 319).
Field note: The psychological manipulation is so severe that victims often transfer funds willingly. The FIR must explicitly detail the psychological coercion to invoke extortion charges alongside cheating.
II. UPI Fraud & The Zero-Liability Rule
When a victim transfers money via UPI to a fraudster’s account, the transaction itself is technically “authorised” by the victim, making recovery complex. However, the Reserve Bank of India’s Circular on Limited Liability of Customers in Unauthorised Electronic Banking Transactions provides a lifeline. If the customer reports the fraud within three working days, the customer bears zero liability.
The recovery procedure
- Day 0: Call 1930 (Cyber Crime Helpline). Provide transaction details. The cyber cell can request the bank to freeze the beneficiary’s account.
- Day 1: File a formal complaint on cybercrime.gov.in. Download the PDF acknowledgment.
- Day 2: Submit a written complaint to your bank’s grievance officer, attaching the cyber portal acknowledgment. Demand reversal under RBI’s zero-liability framework.
- Day 7: If the bank refuses to reverse the amount, file a complaint with the Banking Ombudsman under the RBI Ombudsman Scheme, 2021.
- Day 15: If the funds have been withdrawn by the fraudster, file a civil suit for recovery under Order XXXVII CPC against the account holder.
The Section 65B certificate under the Evidence Act is critical here. Screenshots of the UPI app, WhatsApp chats with the scammers, and call records must be accompanied by a 65B certificate to be admissible in court.
Speed is the only currency that matters in cyber recovery. The first 24 hours dictate whether the money stays in the system or vanishes into mule accounts.
Statutes, forums,
and where they sit.
| Offence / Issue | Primary Statute | Forum | Indicative Timeline |
|---|---|---|---|
| Digital Arrest / Impersonation | IT Act § 66D · BNSS 2023 | Cyber Crime Cell / Magistrate | FIR within 24 hrs; Trial 2 – 4 years |
| UPI Fraud / Phishing | IT Act § 66C / 66D | Cyber Cell + Banking Ombudsman | Recovery attempt within 3 days |
| Identity Theft | IT Act § 66C | Magistrate Court | 1 – 3 years |
| Fund Recovery (Civil) | CPC Order XXXVII | Civil Court | 2 – 3 years to decree |
| Bank Negligence | RBI Ombudsman Scheme 2021 | RBI Ombudsman | 30 – 60 days |
| Data Breach by Platform | DPDP Act · 2023 | Data Protection Board | Emerging — rules being notified |
The questions
counsel hears most.
Short, sourced answers to the questions that arrive most often in our inbox regarding digital scams and UPI fraud.
What should I do if I am a victim of a digital arrest scam?
Can I get my money back after a UPI fraud?
Is digital arrest legal in India?
What are the penalties for cyber fraud under the IT Act 2000?
What is a Section 65B certificate and is it needed for UPI screenshots?
The scammer’s strongest weapon is the victim’s ignorance of the law. Knowledge is the first line of defence.
