The 'Digital Arrest': First Two Hours After a UPI Fraud Complaint
At 21:10 a man brings his mother's phone to a rural police station in Kollam district. His mother, a 63-year-old retired schoolteacher, says she was called at 09:40 by a man claiming to be a courier supervisor, who said a parcel booked in her name to Cambodia had been intercepted with narcotics and passports. The call was transferred to a 'Mumbai cyber cell officer' on video, who displayed a letterhead and a warrant, told her she was under 'digital arrest' and must tell nobody, and kept her on camera for six hours. Between 10:14 and 12:40 she made three UPI transfers from her savings account - ₹2,00,000, ₹1,80,000 and ₹1,00,000 - to three different account numbers. She has the UPI reference numbers and screenshots, but the last transfer was 8.5 hours before the complaint. The family asks whether the money can be recovered and whether she has committed an offence by reporting late.
1. List what the station should do in the first two hours, in priority order, and justify the order.
Read the worked answer
Order is everything, because money leaves the first-layer account within minutes.
- Written complaint and acknowledgement. The delay does not create any offence for her; she is the complainant and victim.
- Report immediately on the cybercrime portal and the 1930 helpline, quoting the three UPI reference numbers and beneficiary account numbers. Nodal officers act on a portal/helpline reference faster than on a fresh FIR, so this runs in parallel with the FIR, never after it.
- Written request to the bank's nodal officer for a lien/debit freeze on the three beneficiary accounts and for the full transaction trail (UTR, IMPS/NEFT chain, mule-account details).
- Register the FIR - cheating and personation by using a computer resource (BNS cheating provisions; IT Act 66C and 66D) - and seek the caller's call detail records and the video-call platform details.
- Preserve her phone: do not reset it; photograph call logs and chats; if it must be retained, seize it under a mahazar with hash values.
- Flag the pattern to the district cyber cell - 'digital arrest' is run by organised groups using rented mule accounts.
2. The family wants a straight answer: can the money come back, and is the mother in trouble for reporting 8.5 hours late? Draft what you would tell them and explain the reasoning behind each point.
Read the worked answer
'No agency arrests anyone over a video call, and no court or police officer asks you to transfer money to a verification account. You were cheated; you have done nothing wrong.'
Recovery: fraud money is split and pushed through layers of mule accounts, often within 10–20 minutes. Reporting at 8.5 hours is late for a hold on the first layer, but not hopeless - a lien succeeds only if a balance is still sitting in an account that can be traced. The honest answer is: we will try, the outcome depends on the trail, and no one can promise a refund.
Delay: not reporting promptly is not an offence under any law; it only reduces the chance of freezing funds and of catching the caller's number while it is still active.
Tone: do not blame her. Shame keeps the next victim silent for days, which is exactly what the racket relies on. Also record her statement in her own words while the sequence is fresh, and give the family the portal acknowledgement number so they can follow up.