Founder and editor
Vivek Kumar
Vivek Kumar is a full-stack developer in India and the founder and editor of CyberShitty.com. He edits the site's reports on scams, data breaches and exploited vulnerabilities, working from primary sources: regulator notices, police statements, court records and company filings.
Severity: MediumRead report
Read report
Read reportSeverity: MediumRead reportSeverity: HighRead reportSeverity: MediumRead report
Read reportSeverity: HighRead report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
Read report
In this section
Clicked a scam link? What to do depends on what you did next
I4C warns of deepfake PM and CM 'welfare scheme' ads; Telangana flags fake ₹8,000 Diwali offer
Life certificate season: the fake 'pension office' call that asks for your PPO number and OTP
Sent money to the wrong UPI ID or number? How to ask for it back, and where to complain
Fake village health camps took Aadhaar data and biometrics to get 3,000 SIMs, police say
WhatsApp 'boss' scam: Mumbai police arrest six; accounts linked to 255 complaints, ₹72 crore
Supreme Court: RBI's new rules must make banks compensate digital arrest victims when they fail
'MR ROBOT' kit rents out fake bank, bill and challan apps that steal OTPs and divert calls
ED arrests advocate it says bribed officials to unfreeze about 100 fraud-linked bank accounts
Browsers distrust an eMudhra root after weak CA keys; MeitY probes, DSC and eSign unaffected
SBI discloses 'data loss': 3,897 customer records with personal details found on the dark web
UPI charge delayed to after Diwali: who pays the 0.4% fee, and fake 'UPI fee' messages to spot
Another NetScaler flaw exploited: CVE-2026-88779 hits SAML setups; CISA and CERT-In say patch
Telangana cyber bureau arrests 101 in six-state sweep on mule accounts linked to ₹17 crore
Mumbai police arrest developer accused of 2,805 fake APKs: 'senior citizen card' to challans
Fake cracker websites before Diwali: big discounts, pay-first links, crackers that never come
FASTag annual pass scam: fake sites selling the ₹3,075 pass, and the official way to buy it
LIC and insurance 'bonus' calls and a fake Bima Bharosa complaint site: what IRDAI says
Private video or deepfake of you going viral? How to stop copies and get it removed fast
The 'Boss Scam': a hijacked WhatsApp orders an urgent payment. A call-back checklist for firms
Fake government job letter? How to check a recruitment notice before paying a 'joining fee'
Instagram or Facebook hacked, or a fake profile of you? How to recover, and the 2-hour rule
Loan taken in your name? How to check loans on your PAN, dispute them and claim ₹100 a day
Money withdrawn with your fingerprint, no OTP? AePS fraud explained, and how to stop it
ED arrests man it calls the 'principal handler' in S.P. Oswal ₹7 crore digital-arrest case
Festival scam calendar: October–November 2026 dates and the scams that ride on them
Installed an app from a link or ad? How Accessibility malware takes over phones, and what to do
Police won't register your cyber-fraud FIR? e-Zero FIR, the SP and the Magistrate route
WhatsApp hacked? GhostPairing, fake ZIP files, a friend's code request, and how to get it back
Update now: iPhone fix for a targeted zero-day (iOS 26.7.1) and Chrome 154
LPG e-KYC from 1 October: what really changes, and the fake 'gas connection blocked' calls
Navratri garba: fake passes, 'rent a garba partner' ads police flagged, and pay-first links
Phone lost or stolen? The first-hour checklist for SIM, UPI and bank apps, then the CEIR block
Fake UP/DOWN trading games: the early win, the losses and the blocked withdrawal
Bitget loses $387.5 million in 2026's biggest crypto theft yet: what Indian users should know
Crypto airdrop scams: how a 'free token' claim empties a wallet, and what to check first
Crypto scams in India: how they work, how to check an exchange and what to do if you lose money
Digital arrest scam comes home: Delhi woman, 75, says she was made to hand over her house deeds
Fake SIP and mutual fund scams: how to check your money is really invested
Fake IPO allotment scams: WhatsApp 'VIP quotas', institutional accounts and payment traps
Aadhaar or PAN leaked in a data breach? How to lock it down and check for misuse
Bank account frozen by cyber police? What to do if you received tainted money without knowing
How to get money back after cyber fraud: the real routes, the odds and 'recovery' scams
Deepfake investment ads in India: what they are, who has been faked, and how to spot one
Digital arrest scam: how to recognise the call, what to do on it, and what to do if you paid
Electricity disconnection SMS scam: how to spot the fake 'power cut tonight' message
Phone suddenly shows no service? What to do about SIM-swap and eSIM fraud in India
Fake e-challan scam: how to check a traffic fine before you pay or tap a link
Festive sale scams: how to spot fake shopping sites, gift links and delivery tricks
Income tax refund scam SMS: how to spot fake messages and check your real status
Data breach reporting in India: CERT-In's six-hour rule and the DPDP timeline explained
Infostealer infection: what to do, in the right order
Is this a scam? How to check a phone number, link, app, adviser or UPI ID in India
Harassed by a loan app? How to check a lender first, and where to complain in India
Money on hold after a 1930 complaint? How frozen funds are released back to victims
Mule accounts: why renting out your bank account can end in arrest
Cyber crime complaint status 'pending'? How to track an NCRP complaint and what to do next
Ransomware in August 2026: trackers log a record month as Qilin leads
Lost money to online fraud? RBI's new refund rules from 1 January 2027, explained
Fake job offers, real compounds: how Indians end up trafficked into Southeast Asian scam hubs
Blackmailed after a video call? What to do about sextortion, and how to get the clip taken down
ShinyHunters emailed me: what to do about an extortion or sextortion threat
Invited to a stock tips WhatsApp group? How to check it before you send a rupee
Train ticket scams: fake IRCTC apps, 'confirmed Tatkal' agents and refund calls
Lost money in a UPI fraud? What to do in the first hour, and how to complain on 1930
What to do after a data breach notice, and how to check if your data was exposed
CBI's Operation Chakra-VI targets the money trail behind India's digital arrest scams
Citrix patches two NetScaler zero-days already exploited; CISA sets 30 September deadline
Digital arrest scams in India: complaints fall, but the Supreme Court and CBI keep up pressure
CBI arrests key accused behind Ahmedabad call centres that took $7.21 million from Americans
Critical WordPress flaw exploited within hours of its patch; update to 7.1.2 now
SIM binding, IMEI crackdown and Sanchar Saathi: where India's telecom anti-fraud rules stand
AdaptHealth reports 4.1 million patients affected by June data theft
Boston Scientific says cyberattack will hit 2026 results as systems are restored
ATF confirms breach of standalone CALEA system after Qilin claim; leaked files unverified
CEVA Logistics intrusion halts eight European warehouses and exposes client customer data
Indian cybercrime by the numbers: what NCRP, 1930 and the RBI's 2025-26 report actually show
Tata Electronics confirms cyber incident after group leaks alleged Apple and Tesla files
Bank of Baroda discloses cyber incident as data-leak claims circulate
Bajaj Auto says ransomware attack led it to pause operations for a few days
German police dismantle Kratos phishing kit used to hijack Microsoft 365 sessions
Reliance confirms partial breach as Kudankulam project files leak; NPCIL says no safety data
Nineteen agencies warn FSB Center 16 is exploiting poorly configured routers worldwide