The digital arrest scam, explained: how it works and how to end the call

A digital arrest scam is a phone call, usually escalated to a video call, in which someone pretending to be police, CBI, customs, a courier company or the telecom regulator tells you that something in your name is linked to a crime, and that you are "under digital arrest" until you pay to clear it. There is no such thing as a digital arrest. No Indian law enforcement agency arrests anyone over a video call, and no agency asks for money to clear your name. If you are on that call right now, hang up. Everything below is for the moment after.

How a digital arrest scam actually runs

The call starts small and official. A recorded message or a polite agent says a parcel in your name has been held at customs with drugs inside, or a SIM registered to your Aadhaar has been used for fraud, or your bank account has been flagged for money laundering. They know your name, and maybe one more detail. None of that is hard to get; that kind of data leaks constantly.

Then the handover. "This is serious, I am transferring you to the cyber cell." A new, firmer voice, now a senior officer. They ask you to move to a video call. On the other side is someone in a uniform, with a flag, a crest, a wall of files. Fake, all of it, but it reads as real at phone-screen size.

Now the trap closes. You are under digital arrest. You may not disconnect. You may not tell anyone, because your family could be implicated. The camera stays on. This can go on for hours; in some versions, days.

The money comes last, and it is always dressed as something other than theft. Transfer your savings to a "verification account" so they can be checked and returned once you are cleared. Pay a "settlement" amount. Read out gift card codes. The language changes; the direction of the money doesn't.

Why it works on intelligent people

I think the common assumption is that only naive people fall for this. That's wrong, and it stops the people most at risk from recognising themselves in the description.

The scam doesn't attack your intelligence. It attacks the gap between hearing a threat and thinking about it. Five things are stacked so that gap never opens.

• Authority. Uniforms, case numbers, legal phrases. Most of us have never been inside a police station and have no baseline for what a real one looks like.
• Fear. The accusation is a crime you could not possibly have committed, which is exactly why it is frightening. You cannot prove a negative on the spot.
• Isolation. "Do not tell anyone" is the most important line in the script. The moment you say the story out loud to someone who isn't on the call, it collapses.
• Time pressure. The warrant will be issued in ten minutes.
• No pause. The camera is on, the voice is constant, the questions keep coming. There is never a quiet minute to ask "wait, does any of this make sense?"

The trust boundary being crossed is simple: you are treating a stranger's claim about who they are as proof of who they are. A real investigation produces paper, a station address, and an officer you can walk in and meet. A video call produces only a costume.

Red flags that end the call on their own

Any one of these is enough.

• Anyone uses the words "digital arrest", "online arrest" or "virtual custody". These are not legal terms.
• You are told not to disconnect, or not to tell family, friends or a lawyer.
• The "investigation" moves to WhatsApp, Skype or any video app, instead of a station.
• Money is requested to verify, release, secure or clear anything. Police do not hold your savings for safekeeping.
• You are asked for an OTP, a banking password, a card CVV, or to install a screen-sharing or "verification" app.
• The caller treats knowing your name and one detail as proof they are legitimate. Knowing your name is not a credential.
• A courier company connects you to "police". Couriers don't transfer calls to law enforcement.

A cousin of this scam uses a cloned voice of a relative in trouble. Same rules apply; I covered how to spot a deepfake or voice-clone call separately.

What to do: during the call, and in the first hour after

If you are on the call, hang up. Not "one more question". Hang up. A real officer would not be harmed by you ending a call and walking into a station.

Then, in this order.

1. Tell someone. Call a family member or friend and say the whole thing out loud. This is the step the scammer worked hardest to prevent, which tells you how much it matters.
2. Block the number and do not answer call-backs. They will try, and they will be angrier. That anger is the script failing, nothing more.
3. If you shared a credential or OTP, or installed an app at their request, treat your accounts as compromised. Change your banking password from a different device, remove the app, and work through the hacked account triage list in order.
4. Report it. In India, file at cybercrime.gov.in and call the 1930 helpline, even if you lost nothing; reports are how the numbers and accounts get flagged. Readers outside India should use their national cybercrime reporting line.

If money was sent, the first hour matters more than anything else. Call 1930 first, then your bank's fraud line, and tell both exactly which account the money went to and when. Transfers move through a chain of accounts quickly, and the window in which a bank can freeze funds at the receiving end is short. Have the transaction reference and screenshots ready. Do not wait until morning, and do not feel embarrassed.

What this defence costs: a few minutes of awkwardness telling a relative, and the discomfort of hanging up on someone who sounds important. That's the entire price. The scam only works if that price feels too high in the moment.

Talk about it before it happens

The most effective defence is a conversation that happens before any call. Agree one rule with your parents, your grandparents, and yourself: nobody in this family will ever send money or share a code because of a phone call, whoever the caller claims to be. If the police want us, they can send a notice or come to the door.

Then say the words "digital arrest" out loud so they've heard them from you before they hear them from a stranger. Recognition fades if it isn't refreshed, which is why I argued that security awareness is a perishable skill. Repeat it every few months. It takes two minutes.

Frequently asked questions

Is digital arrest a real legal procedure in India?

No. There is no provision for arresting anyone over a video call or holding them in "virtual custody". Arrests happen in person, and an investigation that needs you would produce a written notice, not a WhatsApp video call. If someone uses the phrase, that alone tells you it's a scam.

What if the caller really knew my Aadhaar number or address?

That proves only that your data has leaked somewhere, which is unfortunately normal. It is not proof of authority. Real officers identify themselves with a station and a name you can verify by calling that station on its public number.

I already sent money. Is it gone?

Not necessarily, but speed decides it. Call 1930 and your bank immediately with the transaction details. The sooner the receiving account is flagged, the better the odds of a freeze before the money moves on. Then file the full complaint at cybercrime.gov.in.

Go and have that conversation with one person in your family today. That's the whole assignment.