Cybercriminals Impersonating Banks, Law enforcement or Army

1

KYC Frauds:

Victims are contacted via SMS, e-mails or phone to inform them that their KYC has expired, and their services would be blocked if their personal information such as Aadhar number, bank account numbers etc. are not shared.

Once this information is shared, it is used to open new accounts or steal money from existing accounts of the victims.

2

Impersonating police:

Cybercriminals dupe their victims by posing as a Police officer and threaten the victims by saying an arrest warrant is issued against them and the victim needs to transfer money to a different officer to drop the case. 

3

Impersonating utility service companies:

Victims are sent SMS stating that they have not paid their electricity bills and that their service would be blocked if payment is not made immediately. They often send a short link which directs the victim to a malicious site from where his bank account details are stolen.

4

Impersonating Army:

Cybercriminals take advantage of respect and trust that people of have on armed forces and often impersonate army officers to conduct cybercrime on marketplaces for selling used goods.

Types of Impersonation

1

Fake Calls and Emails:

Criminals pose as police officers, tax officials, or other law enforcement personnel. They contact victims via phone calls or emails, claiming there’s an ongoing investigation or legal issue. They demand money or personal information, threatening dire consequences if the victim doesn’t comply.

2.

Phishing Scams:

Impersonators create fake websites or emails that appear to be from legitimate government agencies. They ask victims to verify their personal details, such as Aadhaar numbers, PAN cards, or bank account information. Unsuspecting individuals fall prey to these scams, compromising their sensitive data.

3

Social Engineering:

Cybercriminals manipulate victims into believing they’re assisting a genuine investigation. They may ask victims to transfer funds to a specific account or share confidential information. The pretext often involves catching criminals or preventing a security breach.

Impact and Consequences

1

Financial Loss:

Victims lose money due to fraudulent transactions or extortion. Impersonators exploit fear and urgency to coerce victims into paying up.

2

Identity Theft:

Personal information shared with fake law enforcement officials can lead to identity theft. Criminals use this data for further illegal activities.

3

Psychological Trauma:

Victims experience anxiety, fear, and stress when dealing with impersonators. The emotional toll can be severe.

1

Awareness:

Do not share personal information over the phone or email or do not send money without verifying the caller’s authenticity.

2

Reporting:

Report incidents promptly to the Indian Cybercrime Coordination Centre (I4C)¹. I4C acts as a nodal point for curbing cybercrime in the country.

3

Verify the identity:

Always verify the identity of the person you’re communicating with, especially if they’re requesting personal or sensitive information. If you receive an unexpected call, email, or message from someone claiming to be from a legitimate organization, ask for their contact details and verify them independently.

4

Use official channels:

When dealing with businesses or organizations, use official channels of communication such as verified phone numbers, email addresses, or websites. Avoid clicking on links or downloading attachments from unsolicited emails or messages.

5

Be cautious with personal information:

Avoid sharing personal or financial information with unknown individuals or organizations, especially if they contact you unexpectedly. Legitimate companies will not ask for sensitive information such as passwords, Social Security numbers, or banking details via email or phone.

6

Stay updated on common scams:

Stay informed about common impersonation scams by regularly checking news updates, official warnings from government agencies, and alerts from financial institutions. Awareness of the latest scams can help you recognize suspicious activity.

7

Secure your accounts:

Use strong, unique passwords for your online accounts and enable two-factor authentication whenever possible. This adds an extra layer of security by requiring a code sent to your phone or email in addition to your password for login.