The Police Team That Calls You Before You Know You're Being Scammed

Most cybercrime response starts after the money is already gone. This one started while it was still moving.

What the Noida Cyber Crime Unit found

Working under Police Commissioner Laxmi Singh, Noida's cyber crime team identified seven "live victims" spread across Tamil Nadu, Gujarat, Telangana, Odisha, and Rajasthan — people who were, at that moment, being drawn into elaborate fake online investment scams. None of them had filed a complaint. The fraud was still unfolding.

The operation, spearheaded by cyber commando Sachin Dhama and his team, worked in partnership with the Indian Cyber Crime Coordination Centre (I4C) and the National Payments Corporation of India (NPCI) to analyze financial transaction patterns. Using interlinked transaction data, the unit flagged accounts tied to social-media-based financial groups and fake trading platforms promising abnormally high returns — and traced those patterns back to individuals who matched the profile of an active victim.

Instead of waiting for those seven people to notice something was wrong on their own, the team reached out directly, intercepting the fraud before the fraudsters could fully siphon the funds.

Why this approach is different

Cybercrime investigations traditionally start with a complaint. By the time that happens, money has usually already moved through several accounts and largely become unrecoverable. What Noida's unit did instead was treat suspicious financial patterns as an early warning system — not proof of a completed crime, but a signal worth acting on before it becomes one.

That shift depends on access to shared financial intelligence and cooperation between multiple institutions — police, I4C, and NPCI — working from the same data rather than each waiting on the other. It's a genuinely different operating model, not just faster paperwork after the fact.

How fake investment scams like this one work

• Social-media recruitment. Victims are drawn in through investment-themed groups promising unusually high, fast returns.
• Fake trading platforms. A convincing-looking dashboard shows fabricated gains to build trust before larger transfers are requested.
• Escalating investment amounts. Early "successes" are used to justify pushing victims toward larger and larger transfers.
• Rapid fund movement. Money is typically split and routed through several accounts quickly, which is exactly why early intervention matters so much.

What this means if you're approached by one

• Treat "guaranteed" or unusually high returns as a red flag, regardless of how convincing the dashboard or group looks.
• Never invest based on social-media group pressure or unsolicited investment tips from strangers.
• Verify any platform independently before transferring money, rather than trusting screenshots or testimonials shared within the group.
• Report suspicious platforms early via 1930 or cybercrime.gov.in — the earlier a pattern is flagged, the more it can help protect others too.

Operations like this one work by spotting patterns in data most people never think about — which is a good reminder that a lot of what makes you a target is information already sitting out there, publicly or in old breaches. Knowing what of your own data is exposed is a useful first step before anyone else gets there first. That's what a Scan My Shadow report shows you.

For more on how personal information gets used to build convincing scams, see what OSINT is and how it's used to find information about you.

This is one of several documented cases where quick intervention interrupted a digital arrest scam in India before money moved — see also The Video Call That Gave Away a ₹1.12 Crore Digital Arrest Scam and How a Bank Manager Stopped an ₹84 Lakh Scam.

Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.