A digital arrest is a cyber fraud in which callers pose as police, CBI, customs, ED, or court officials, claim the victim is linked to a crime, and keep them on a video call under threat of arrest until they transfer money. No law enforcement agency in India arrests or detains anyone over a video call.
The script borrows the authority of real institutions and isolates the victim for hours, which is why it catches retirees and professionals alike.
The money lands in bank accounts opened or rented for the purpose, known as mule accounts. That is why the Supreme Court and RBI have turned their attention from awareness campaigns to the accounts receiving the proceeds. This guide covers how the scam runs, how to respond, and what regulated entities must now do.
What a Digital Arrest Is (and Is Not)
“Digital arrest” has no legal meaning in India. Neither the Bharatiya Nagarik Suraksha Sanhita nor any other statute allows an officer to arrest a person through a phone or video call, confine them to a room by camera, or demand a payment to “verify” their funds.
The Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs said so in its October 2024 public advisory: CBI, police, customs, ED and judges do not arrest people on video calls. The advisory directed citizens to report such calls on the 1930 helpline or at cybercrime.gov.in.
According to I4C figures cited by Drishti IAS, such complaints stood at 1,23,672 in 2024, fell to 58,249 in 2025, and were 16,377 by June 2026. Each remaining case can still drain a lifetime of savings.
How a Digital Arrest Scam Unfolds
Most cases follow a recognisable sequence:
The hook: A call or WhatsApp message claims a parcel in your name contains drugs or fake passports, or that your Aadhaar or mobile number is linked to money laundering.
The escalation: The call is "transferred" to a fake police officer or CBI official, often on a video call with uniforms, badges, and a set resembling a police station.
The isolation: The victim is told they are under digital arrest, must keep the camera on, and must not speak to family because the case is "confidential".
The extraction: The victim is asked to move money to a "secure government account" for verification, or to pay a fine or bail, with a promise of a refund once cleared.
-
The dispersal: The money is split across several mule accounts within minutes, then moved onward through more accounts, wallets or cash withdrawals.
Messaging platforms are a core channel. As reported by MoneyLife, the Attorney General told the Supreme Court that WhatsApp had banned over 9,400 accounts linked to digital arrest scams over 12 weeks from January 2026.Red Flags That Give the Scam Away
The table below contrasts what fraudsters say with how real investigations work.
| What the caller says | What actually happens in a real case |
|---|---|
| "You are under digital arrest; stay on camera" | Arrests are physical, with written grounds; no camera custody exists. |
| "Transfer your funds to an RBI or court account for verification" | No agency asks citizens to move money for verification. |
| "Do not tell your family; the case is secret" | You have the right to consult family and a lawyer. |
| "We will refund once you are cleared" | Seized funds are handled through courts, not refunds by phone. |
| Video call from a "police station" with uniforms | Notices are served in person or in writing from verifiable offices. |
Other warning signs: official-sounding caller IDs, threats that escalate when you hesitate, and pressure to install remote-access apps.
What to Do If You Receive a Digital Arrest Call
Speed matters most, because funds move through mule accounts quickly.
End the call: A genuine officer will not object to you verifying through official channels.
Do not transfer money: Never share OTPs or install any app requested by the caller.
Call 1930: Contact the national cyber fraud helpline or file a complaint at https://cybercrime.gov.in. Report even if you have not lost money.
Provide transaction details: If you have paid, give the helpline your bank transaction reference, time, and beneficiary account details immediately.
Inform your bank: Notify your bank so it can attempt to stop or trace the funds.
-
Report the number: Use the Chakshu facility on the Sanchar Saathi portal.
Talk to someone you trust; the scam depends on isolation.The Supreme Court and RBI Response on Mule Accounts
In early August 2026 (order dated 4 August 2026, as reported by IANS), a bench led by Chief Justice Surya Kant issued fresh directions on these scams. Among them:
RBI's responsibility: Prepare and circulate a standard operating procedure for dealing with mule accounts within four weeks, including temporary debit holds on accounts linked to cyber fraud (Drishti IAS summary).
States and Union Territories: Operationalise cyber crime coordination centres and grievance and money-restoration mechanisms.
e-Zero FIR mechanism: States to adopt the e-Zero FIR mechanism in consultation with I4C.
RBI’s draft temporary debit hold framework
On 11 September 2026, RBI released the draft Reserve Bank of India (Know Your Customer) Amendment Directions, 2026, with comments due by 2 October 2026. Key proposals, as summarised by Corplaw Updates and Outlook Money:
Temporary debit hold: Banks may place a temporary debit hold when their monitoring flags transactions of Rs 1,000 or more as possibly linked to cyber fraud or mule activity.
Hold duration: A hold would generally last no more than 60 days unless a law enforcement agency or competent authority directs otherwise.
Customer notification and response: Customers must be told the reason. They get 20 days to explain, and the bank decides within 10 days of a reply (or 30 days without one).
KYC non-compliance: Failure to file suspicious transaction reports on confirmed mule accounts would count as KYC non-compliance.
-
Applicability: Commercial banks (including small finance, payments, regional rural and local area banks) and urban cooperative banks, with a proposed effective date of 1 April 2027.
The draft may change before it is final. For a deeper view of detection signals, see our guide.Enforcement is reaching the suppliers.
On 6 October 2026, Telangana Today reported that the Telangana Cyber Security Bureau had arrested over 100 people across Telangana, Andhra Pradesh, Karnataka, Tamil Nadu and Kerala for allegedly arranging bank accounts and KYC documents for cybercriminals. Debit cards and passbooks were seized. Mule networks are supply chains, and many start with an account that passed onboarding.
Stopping Mule Accounts at Onboarding
Debit holds act after money arrives. Catches behaviour once the account is live. The cheapest control sits earlier: refusing to open accounts for impersonators or for people renting out their identity.
Mule account types and the onboarding control that helps
| Mule pattern | What onboarding can check |
|---|---|
| Account opened with stolen identity documents | Face match between selfie and ID photo, with liveness to block photos and replays. |
| Same face behind many accounts with different documents | Face match plus internal deduplication of selfies. |
| Rented account: real person, paid to open it | Name match between ID and linked bank account; tighter review for high-risk profiles. |
| Wallet or merchant account receiving pooled funds | Confirm that the payout account belongs to the onboarded person. |
Rented accounts are hardest because the identity is real. Onboarding checks reduce the problem but cannot remove it; post-onboarding monitoring remains essential.
Illustrative scenario
A digital wallet (illustrative) sees a cluster of new users whose selfies come from one face but whose PAN cards differ. Within the flow, the duplicates are flagged before any wallet is activated, rather than discovered after a police notice.
Where BeFiSc fits: IDProof lets banks, NBFCs and fintechs run face match with liveness, name match and bank account verification at account or wallet opening, so impersonated identities and mismatched payout accounts are stopped before they can receive fraud proceeds. IDProof does not monitor transactions or place debit holds. Book a demo of a mule-resistant onboarding flow.
Key Takeaways
Digital arrest is a scam: No Indian agency arrests or confines anyone over a video call. Learn more about digital arrest.
Report immediately: Victims should end the call and report to 1930 or https://cybercrime.gov.in, with transaction details if money has been transferred.
Mule accounts: Fraud proceeds flow through mule accounts, which is why the Supreme Court directed RBI to frame a mule account SOP in August 2026.
RBI's proposed framework: RBI's September 2026 draft proposes temporary debit holds of up to 60 days, with customer notification and response timelines.
-
Stronger onboarding controls: Face matching, liveness detection, name matching, and bank account verification can help reduce impersonated mule accounts, although they cannot eliminate rented accounts.
Conclusion
The scam succeeds on fear and isolation and fails the moment a victim hangs up and calls 1930. Awareness has helped, as I4C’s declining complaint figures suggest.
For regulated entities, the focus has shifted to the accounts that receive the money. RBI’s temporary debit hold framework will standardise what happens after funds arrive. The institutions that verify faces, names, and bank accounts properly at onboarding will face fewer of those holds in the first place.
