India desk

Cyber threats hitting India

Breaches at Indian companies, fraud and scam waves, CERT-In advisories and the policy that shapes them — sourced from filings, regulators and police.

Severity: Medium · India · Threats

In this section

I4C warns of deepfake PM and CM 'welfare scheme' ads; Telangana flags fake ₹8,000 Diwali offer

Read report
Severity: High
· India · Law enforcement

Fake village health camps took Aadhaar data and biometrics to get 3,000 SIMs, police say

Read report
Severity: Medium
· India · Law enforcement

WhatsApp 'boss' scam: Mumbai police arrest six; accounts linked to 255 complaints, ₹72 crore

Read report
Severity: High · India · Policy

Supreme Court: RBI's new rules must make banks compensate digital arrest victims when they fail

Read report
Severity: High
· India · Threats

'MR ROBOT' kit rents out fake bank, bill and challan apps that steal OTPs and divert calls

Read report
Severity: Medium · India · Law enforcement

ED arrests advocate it says bribed officials to unfreeze about 100 fraud-linked bank accounts

Read report
Severity: Medium · India · Incident

Browsers distrust an eMudhra root after weak CA keys; MeitY probes, DSC and eSign unaffected

Read report
Severity: High · India · Data theft

SBI discloses 'data loss': 3,897 customer records with personal details found on the dark web

Read report
Severity: Medium · India · Law enforcement

Telangana cyber bureau arrests 101 in six-state sweep on mule accounts linked to ₹17 crore

Read report
Severity: High · India · Law enforcement

Mumbai police arrest developer accused of 2,805 fake APKs: 'senior citizen card' to challans

Read report
Severity: Medium · India · Law enforcement

ED arrests man it calls the 'principal handler' in S.P. Oswal ₹7 crore digital-arrest case

Read report
Severity: Medium · India · Threats

Digital arrest scam comes home: Delhi woman, 75, says she was made to hand over her house deeds

Read report
Severity: High · India · Threats

Deepfake investment ads in India: what they are, who has been faked, and how to spot one

Read report
Severity: Medium · India · Policy

Data breach reporting in India: CERT-In's six-hour rule and the DPDP timeline explained

Read report
Severity: High · India · Threats

Mule accounts: why renting out your bank account can end in arrest

Read report
Severity: High · India · Threats

Fake job offers, real compounds: how Indians end up trafficked into Southeast Asian scam hubs

Read report
Severity: High · India · Law enforcement

CBI's Operation Chakra-VI targets the money trail behind India's digital arrest scams

Read report
Severity: High · India · Threats

Digital arrest scams in India: complaints fall, but the Supreme Court and CBI keep up pressure

Read report
Severity: Medium · India · Law enforcement

CBI arrests key accused behind Ahmedabad call centres that took $7.21 million from Americans

Read report
Severity: Medium · India · Policy

SIM binding, IMEI crackdown and Sanchar Saathi: where India's telecom anti-fraud rules stand

Read report
Severity: Medium · India · Policy

Indian cybercrime by the numbers: what NCRP, 1930 and the RBI's 2025-26 report actually show

Read report
Severity: High · India · Data theft

Tata Electronics confirms cyber incident after group leaks alleged Apple and Tesla files

Read report
Severity: High · India · Incident

Bank of Baroda discloses cyber incident as data-leak claims circulate

Read report
Severity: High · India · Incident

Bajaj Auto says ransomware attack led it to pause operations for a few days

Read report
Severity: High · India · Data theft

Reliance confirms partial breach as Kudankulam project files leak; NPCIL says no safety data

Read report

India / by the numbers

India's cybercrime, in numbers

22,495 cr

lost to cyber fraud reported on NCRP (₹ crore, 2025)

ThePrint — MHA data: Indians lost Rs 22,495 crore to cyber fraud in 2025 (21 Feb 2026)

11,158 cr

saved via I4C's CFCFRMS across 32.80 lakh complaints (₹ crore, 2021 to 30 Jun 2026)

MHA — Lok Sabha Unstarred Question No. 251, National Cyber Crime Data (21 Jul 2026)

29.44 lakh

cyber security incidents handled by CERT-In (2025)

PIB — CERT-In: India's Frontline Defender against Cyber Threats (23 Jan 2026)

10,114

bank and FI fraud cases of ₹1 lakh+ reported, involving ₹48,021 crore (RBI, FY2025-26)

Outlook Business (PTI) — RBI Annual Report 2025-26 fraud data (29 May 2026)

Tracker

Recent Indian data breaches

Full India tracker
DisclosedOrganisationSectorCountryRecordsCause / actorStatus
State Bank of IndiaSBI told exchanges 3,897 customer records with names, mobiles, dates of birth and addresses were found in ~3.75 lakh records on the dark web; source unknown.Read our reportFinanceIndia3.9K (bank's filing)UnknownConfirmed
RapiPay FintechNoida fintech told police ₹1.56 crore left its Yes Bank account in 43 transfers in 23 minutes on 3 Oct via a field agent's app; FIR filed.Read our reportFinanceIndiaUnknownUnknownConfirmed
West Bengal State Data CentreMedia reports citing unnamed sources say malware hit the state data centre on 9–13 Sep, taking portals offline; the state has not confirmed it.Read our reportGovernmentIndiaUnknownUnknownClaimed
Gujarat Mineral Development Corporation (GMDC)Gujarat state miner told exchanges CERT-In flagged a probable data breach linked to its website; it is investigating and says core systems are unaffected.Read our reportOtherIndiaUnknownUnknownConfirmed
Cars24Used-car platform told police about 3,100 customer records were taken between March and August and sold to a rival; an FIR names five people.Read our reportRetailIndia3.1K (company's complaint)Data theftConfirmed
Vimta LabsHyderabad testing and research lab told exchanges it detected a cyber incident in part of its IT systems; operations unaffected, root cause under review.Read our reportHealthcareIndiaUnknownUnknownConfirmed
Dodo PaymentsBengaluru payments firm said attackers used a Metabase flaw to reach an internal analytics system holding some merchant data; a dark-web listing claims more.Read our reportFinanceIndiaUnknownVulnerabilityConfirmed
Bank of BarodaBank disclosed a cyber incident linked to a possible business email compromise after an anonymous claim of data access; ~1TB leak claims are unverified.Read our reportFinanceIndiaUnknownSocial engineeringConfirmed

Guides

What to do if it happens to you

All guides

2026 / Guide

Clicked a scam link? What to do depends on what you did next

Open report

2026 / Guide

Life certificate season: the fake 'pension office' call that asks for your PPO number and OTP

Open report

2026 / Guide

Sent money to the wrong UPI ID or number? How to ask for it back, and where to complain

Open report

2026 / Guide

UPI charge delayed to after Diwali: who pays the 0.4% fee, and fake 'UPI fee' messages to spot

Open report

2026 / Guide

Fake cracker websites before Diwali: big discounts, pay-first links, crackers that never come

Open report

2026 / Guide

FASTag annual pass scam: fake sites selling the ₹3,075 pass, and the official way to buy it

Open report

2026 / Guide

LIC and insurance 'bonus' calls and a fake Bima Bharosa complaint site: what IRDAI says

Open report

2026 / Guide

Private video or deepfake of you going viral? How to stop copies and get it removed fast

Open report

2026 / Guide

The 'Boss Scam': a hijacked WhatsApp orders an urgent payment. A call-back checklist for firms

Open report

2026 / Guide

Fake government job letter? How to check a recruitment notice before paying a 'joining fee'

Open report

2026 / Guide

Instagram or Facebook hacked, or a fake profile of you? How to recover, and the 2-hour rule

Open report

2026 / Guide

Loan taken in your name? How to check loans on your PAN, dispute them and claim ₹100 a day

Open report

2026 / Guide

Money withdrawn with your fingerprint, no OTP? AePS fraud explained, and how to stop it

Open report

2026 / Guide

Festival scam calendar: October–November 2026 dates and the scams that ride on them

Open report

2026 / Guide

Installed an app from a link or ad? How Accessibility malware takes over phones, and what to do

Open report

2026 / Guide

Police won't register your cyber-fraud FIR? e-Zero FIR, the SP and the Magistrate route

Open report

2026 / Guide

WhatsApp hacked? GhostPairing, fake ZIP files, a friend's code request, and how to get it back

Open report

2026 / Guide

LPG e-KYC from 1 October: what really changes, and the fake 'gas connection blocked' calls

Open report

2026 / Guide

Navratri garba: fake passes, 'rent a garba partner' ads police flagged, and pay-first links

Open report

2026 / Guide

Phone lost or stolen? The first-hour checklist for SIM, UPI and bank apps, then the CEIR block

Open report

2026 / Guide

Fake UP/DOWN trading games: the early win, the losses and the blocked withdrawal

Open report

2026 / Guide

Crypto scams in India: how they work, how to check an exchange and what to do if you lose money

Open report

2026 / Guide

Fake SIP and mutual fund scams: how to check your money is really invested

Open report

2026 / Guide

Fake IPO allotment scams: WhatsApp 'VIP quotas', institutional accounts and payment traps

Open report

2026 / Guide

Aadhaar or PAN leaked in a data breach? How to lock it down and check for misuse

Open report

2026 / Guide

Bank account frozen by cyber police? What to do if you received tainted money without knowing

Open report

2026 / Guide

How to get money back after cyber fraud: the real routes, the odds and 'recovery' scams

Open report

2026 / Guide

Digital arrest scam: how to recognise the call, what to do on it, and what to do if you paid

Open report

2026 / Guide

Electricity disconnection SMS scam: how to spot the fake 'power cut tonight' message

Open report

2026 / Guide

Phone suddenly shows no service? What to do about SIM-swap and eSIM fraud in India

Open report

2026 / Guide

Fake e-challan scam: how to check a traffic fine before you pay or tap a link

Open report

2026 / Guide

Festive sale scams: how to spot fake shopping sites, gift links and delivery tricks

Open report

2026 / Guide

Income tax refund scam SMS: how to spot fake messages and check your real status

Open report

2026 / Guide

Is this a scam? How to check a phone number, link, app, adviser or UPI ID in India

Open report

2026 / Guide

Harassed by a loan app? How to check a lender first, and where to complain in India

Open report

2026 / Guide

Money on hold after a 1930 complaint? How frozen funds are released back to victims

Open report

2026 / Guide

Cyber crime complaint status 'pending'? How to track an NCRP complaint and what to do next

Open report

2026 / Guide

Lost money to online fraud? RBI's new refund rules from 1 January 2027, explained

Open report

2026 / Guide

Blackmailed after a video call? What to do about sextortion, and how to get the clip taken down

Open report

2026 / Guide

Invited to a stock tips WhatsApp group? How to check it before you send a rupee

Open report

2026 / Guide

Train ticket scams: fake IRCTC apps, 'confirmed Tatkal' agents and refund calls

Open report

2026 / Guide

Lost money in a UPI fraud? What to do in the first hour, and how to complain on 1930

Open report

Lost money

Call 1930 or file at cybercrime.gov.in — the faster, the better the odds of freezing it.

Suspicious call or SMS

Report it on Sanchar Saathi – Chakshu.

Organisations

Report incidents to CERT-In within six hours. How it works.

Advisories

Read CERT-In advisories and exploited vulnerabilities.