Common Scams in India Right Now (2026): A Field Guide
TL;DR: This is a map of the scams actually active in India right now — not the well-worn digital arrest and matrimonial fraud categories alone, but the ones showing up in 2026 data: KYC calls, loan app harassment, fake government schemes, QR code fraud, parcel scams, and more. Each links to a full breakdown.
👉 See if your data's already leaked — free 30-second check →
India's fraud losses hit roughly ₹19,813 crore in 2025 across 2.1 million complaints, and the scripts keep shifting. This page is a working map of what's actually circulating right now, each with a link to the full breakdown.
Call and message scams
- KYC update calls — a caller claims your bank account or SIM will be blocked unless you "update KYC" immediately. See KYC Update Scam Calls Explained.
- Government scheme impersonation — fake PM-Kisan, EPFO, or income tax refund calls asking for your UAN, PAN, or Aadhaar. See Government Scheme Impersonation Scams.
- The "guess who" WhatsApp scam — a message from an unknown number claiming to be a relative or old friend. See The "Guess Who" WhatsApp Scam.
- Fake parcel/customs scam — a call or message claiming your parcel is stuck at customs. See The Fake Parcel/Customs Scam, Explained.
Payment and app-based scams
- UPI QR code scams — scanning a QR code to "receive" money actually authorizes a payment out. See UPI QR Code Scams Explained.
- Investment and deepfake pitch scams — fake trading groups using AI-generated videos of familiar faces, now 77% of India's total fraud losses. See The Investment Scam Playbook.
- Loan app harassment — unregulated lending apps threatening borrowers and their contacts. See Loan App Harassment: What to Do.
The one rule underneath all of them
Nearly every scam on this list depends on the same thing: never share an OTP, no matter who's asking or how urgent it sounds. See Why You Should Never Share an OTP for exactly why this one habit matters more than almost anything else.
If it's already happened to you
If money has already moved or you've already shared something you shouldn't have, this page isn't the one you need — go straight to I Just Got Scammed — What Do I Do Right Now? or the fuller complete India recovery guide.
Why these scripts work
Almost all of them lean on a detail that sounds real — your bank's name, a relative's number, a scheme you've actually heard of. That detail is often pulled from data that's already public or leaked, covered in more depth in How Scammers Build a Convincing Profile of You. A Scan My Shadow report shows what's actually tied to your own phone number and email.
Frequently Asked Questions
What's the most common scam in India right now?
Investment and trading scams currently account for the largest share of financial losses in India — around 77% of the roughly ₹19,813 crore lost in 2025 — though impersonation calls (KYC, government schemes, digital arrest) remain the most frequently reported by volume.
Is there one habit that protects against most of these?
Never sharing an OTP with anyone, regardless of who they claim to be, blocks the mechanism behind a large share of these scams — see the dedicated OTP guide for why.
What should I do if I've already lost money to one of these?
Call 1930 or file at cybercrime.gov.in immediately, then use the complete India recovery guide to find the steps specific to your situation.
How often do these scam scripts change?
Frequently — new variations (QR codes, deepfake pitches, fake government schemes) appear regularly as older scripts become widely known, which is why this page is treated as a living reference rather than a fixed list.
Are these scams targeting a specific age group?
Most target broadly across ages 25–75, though tactics vary — investment scams often target working professionals, while government scheme and KYC scams frequently target older adults less familiar with digital banking norms.
Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.
- Results within about 5 minutes
- Clear, plain-English report
- Delivered straight to your inbox
- No login or passwords required
- Scan data deleted after report is generated