01A Story You'll Recognise
The most dangerous phone call in India right now doesn't threaten you. It protects you — from a crime you never committed.
Prof. Sharma (name changed) is 61, a retired Delhi University lecturer — the kind of person who marks spelling errors in forwarded WhatsApp messages. At 11:04 a.m. her phone rang: “Mumbai Cyber Cell.” Her SIM, the voice said, had been used in a money-laundering operation. A case was being filed. She was transferred to a “CBI supervising officer” who video-called her — uniform, police-station backdrop, an e-FIR on screen with her own photograph. For six hours she stayed in her bedroom, camera on, curtains drawn, “under digital custody.” By evening she had transferred ₹42 lakh — “verification deposits”, she was told, fully refundable once her name was “cleared”. The line then went dead mid-sentence.
She is not an outlier. She is the target demographic: educated, savings-heavy, deferential to authority — and completely unprepared for a police impersonation because the real thing had never once come near her life.
02Key Takeaways
Digital arrest scams defrauded Indians of over ₹1,900 crore in a single year (2024, as cited before the Supreme Court). No real officer will ever arrest you on a video call. If money has moved, the first 60–90 minutes — the golden hour — decide whether it can be frozen and pulled back via the 1930 helpline.
- “Digital arrest” is a legal impossibility. Arrest in India is physical and requires production before a magistrate within 24 hours — never a video call, never a payment.
- If money has moved, the clock is everything: call 1930 and file on cybercrime.gov.in within minutes, not days.
- The 90-minute protocol (Section 07) — disconnect, document, report, freeze, FIR — is the difference between recovery and closure.
- Never pay to “unfreeze”, “verify” or “clear your name”. A second payment demand is the second dip of the same scam.
- The Supreme Court has armed victims (2025): golden-hour freezing, SIM KYC re-verification, mule-account crackdowns — but the machinery only starts when you report.
03What Is a Digital Arrest Scam — Exactly?
A digital arrest scam is a voice or video call in which fraudsters impersonating police, CBI, ED, TRAI or customs officials claim you are “digitally arrested” for a fabricated crime — then extort “verification” transfers. No such procedure exists anywhere in Indian law.
Strip the theatre away and it is a three-ingredient recipe: authority (an official-sounding caller), fear (a crime in your name), and isolation (“tell no one — investigation secrecy”). Every variant — the TRAI disconnection call, the “parcel with drugs held at customs”, the money-laundering SIM case — runs on the same engine. Only the uniform changes.
The legal truth is blunt, and worth memorising: arrest under Indian law is a physical, documented act. The arrested person must be produced before a magistrate within 24 hours. No statute, rule, or police practice permits “arrest” over a video call — and no genuine officer will ever ask you to transfer money. If someone does, the only crime in progress is the one being run on you.
04Anatomy of the Call — The Five Stages
Digital arrest calls follow a fixed five-stage script: the hook, the escalation, the “custody”, the extraction, and the vanishing. Knowing the script is the vaccine.
Call scripts recovered in investigations read like telemarketing playbooks — because that is what they are. Click through each stage; the italic lines are what you would actually hear:
Stage 1 · The Hook
A spoofed official-looking number. They know your name, often your date of birth and the last digits of your Aadhaar — data bought in bulk from leaks. The opener is administrative, not threatening: something ordinary is wrong with something you own.
Stage 2 · The Escalation
“Transfer” to a senior officer — CBI, ED, narcotics. The stakes rise: your Aadhaar is “linked” to a drug parcel or a laundering account. A fabricated e-FIR appears on the video call — with your photograph. The kicker: secrecy, which cuts you off from exactly the people who would smell the scam.
Stage 3 · The “Digital Arrest”
The video call begins. A man in uniform, a police-station backdrop, a badge. You are placed “under digital custody”: stay in a room alone, camera on, do not disconnect for hours — sometimes days, with victims kept on call through meals and sleep. Family members are threatened with “arrest” if you tell them.
Stage 4 · The Extraction
Now the account-side of the script: “verification deposits” into a “RBI safe account”, GST “on the amount”, “unfreezing charges”, refunds promised after “clearance”. Victims drain fixed deposits, break SIPs, take gold loans. The money lands in mule accounts and is split and re-split within minutes.
Stage 5 · The Vanishing
The line dies mid-sentence. Numbers are switched off or “not reachable”. The “officer” was a voice in a call centre reading a script hundreds of victims have heard before you. What remains: your panic, your shame — and a set of UTR numbers that are now your only trail home.
In my cyber-fraud practice, the first consultation is often the same day as the call — because timing is the case. I tell every client the same first thing: you were not foolish, you were targeted by a script engineered by professionals. Then we start the protocol in Section 07 — together, in writing, with the clock running.
05Scam-Spotter — Can You Tell?
Every impersonation scam leaks three tells: manufactured urgency, demanded secrecy, and a payment demand. Any one of them is disqualifying — no genuine official call contains any of the three.
Five real-world call patterns. Legit or scam? Answer honestly — the score is for your eyes:
“This is TRAI. Your mobile number will be deactivated in two hours for misuse. Press 1 to speak to the verification officer.”
“Your Aadhaar has been linked to a money-laundering account. A CBI officer will join this video call. Stay in a room alone and do not tell your family anything.”
“A courier parcel in your name has been held at Mumbai customs — it contains illegal medicines. Pay the customs fine of ₹48,000 today and we will close the file quietly.”
“Good afternoon, this is your relationship manager from the branch — your fixed deposit matures next week. Could you drop by tomorrow to discuss renewal options at your convenience?”
“A policeman on video shows you an e-FIR bearing your photograph, keeps you on camera for four hours, and asks for a ‘verification deposit’ that will be ‘refunded after clearance’.”
—
06The Numbers — and the Supreme Court's Counter-Attack
Indians lost over ₹1,900 crore to digital arrest fraud in 2024 (data cited before the Supreme Court), across roughly one lakh complaints. In November 2025, the Court in Sunita v. Union of India directed golden-hour freezing, helpline strengthening, SIM KYC re-verification and a mule-account crackdown.
— figures as reported to and cited before the Supreme Court and the MHA's I4C (2024–25); verify current numbers at cybercrime.gov.in.
07The 90-Minute Protocol — If Money Has Already Moved
The 90-minute protocol: disconnect and stop all payments; call 1930 and file on cybercrime.gov.in; notify your bank in writing and demand the beneficiary account be frozen; then lodge the FIR — all inside the first 60–90 minutes after a fraudulent transfer.
Print this. Tape it near the landline your parents still answer. The checkmarks below appear in the order that matters:
- 0–5 min Stop the bleeding. Disconnect the call. Do not send “one more rupee” to fix anything. Screenshot everything while it is fresh: numbers, UTR IDs, beneficiary account details, call logs, chats.
- 5–15 min Call 1930 — the national cybercrime helpline — and file a “Report Financial Fraud” complaint on cybercrime.gov.in. Save the complaint acknowledgment number; every bank and officer downstream will ask for it.
- 15–45 min Attack the money chain. Call your bank's fraud line, then email the branch with the complaint number and a written demand to flag and freeze the beneficiary account. If the receiving bank is identifiable, send it the same pack.
- 45–90 min Put it on the record. Lodge the FIR at the police station or cyber cell — insist on the copy. Hand over the full evidence pack. Never delete chats or call logs; they are your case.
- 90 min + Work the rhythm. Follow up with the bank and the investigating officer in writing, every week. Where the bank's response is negligent, the RBI Ombudsman is a real escalation route. Trace, freeze, restore — in that order.
The protocol is what you do in ninety minutes. What I do in the weeks after: draft the FIR that gets read rather than shelved, run written bank escalations, move applications for freezing through layered mule accounts, and petition courts for restoration of frozen funds to proven victims. And if you were a student whose account was used as a mule without your knowledge — I defend that too, before accusation becomes arrest.
08The Law That Fights Back
Digital arrest fraud is prosecuted chiefly under BNS 2023 §318(4) (cheating), §319 (cheating by personation) and IT Act §66D (cheating by personation using a computer resource) — with BNSS powers to freeze accounts and restore funds to victims.
The core offence — the successor to the old §420 IPC. The inducement, the transfer, the deception: this section carries the substance of the scam.
Pretending to be another person — a police officer, a CBI official — to cheat. The uniform is itself the crime.
Cheating by personation using a communication device or computer resource — the video call itself, the spoofed number, the fake e-FIR on screen.
Investigating powers to freeze suspicious accounts — now sharpened by the Supreme Court's 2025 directions for golden-hour freezing and victim restitution from recovered funds.
09Does the Money Actually Come Back?
Yes — increasingly, and almost only when reported within the golden hour. Once mule funds are frozen before withdrawal, courts can direct restoration to proven victims; after withdrawal, recovery becomes a slow, uncertain trace through layered accounts.
The honest mechanics: your money rarely sits still. It splits across multiple mule accounts, converts to wallets, sometimes to crypto, within minutes — which is why speed of reporting is the only variable you fully control. Frozen pools, however, are growing: courts now supervise the identification of victims entitled to share in them, and the Supreme Court's 2025 directions push banks to freeze faster and to answer for the mule accounts they onboarded.
Two more honest notes. First: where the transaction was unauthorized, the RBI's limited-liability framework protects you at the bank; where you were tricked into authorising it, the fight is harder — negligence and mule-onboarding scrutiny are the battlegrounds. Second: never buy “recovery services” from anyone who calls promising refunds for a fee. That is not the sequel. That is the same film.
10Five Myths About Digital Arrest Scams
Comfortably false. Professors, doctors, IAS officers and chartered accountants have all paid. The script targets deference to authority — education doesn't immunise against that; sometimes it sharpens it.
Shame is the scammer's exit strategy. You are a victim of an engineered deception, not a co-author. Reporting late because of embarrassment is precisely the outcome the script was written to produce.
Not anymore. Golden-hour freezing works, frozen pools are growing, and courts are directing restoration. The money is gone only after it is withdrawn — the race is against that, not against the transfer itself.
The report is the machinery. The 1930 call and the CFCFRS complaint are what trigger the bank-freeze chain; the Supreme Court has now put an hour's clock on it. Silence doesn't just hurt you — it protects the mule accounts.
Blocking saves you, not the next victim. The same script calls ten thousand numbers a week. A report freezes accounts and feeds investigations. Consider it civic hygiene.
11FAQ: Digital Arrest & Cyber Fraud in India
Primary sources referenced
- CFCFRS — cybercrime.gov.in · the 1930 helpline & complaint portal
- Supreme Court of India — Sunita v. Union of India (Nov 2025 directions on golden-hour freezing & victim restitution)
- India Code — BNS 2023 §§318, 319 · IT Act 2000 §66D
- MHA — I4C, Indian Cyber Crime Coordination Centre
- RBI — Ombudsman scheme & limited-liability framework
