Digital Arrest Scam Bengaluru — The 24-Hour Victim Playbook

A 74-year-old woman in Bengaluru transferred ₹24 crore across 23 mule accounts over 26 transactions. She believed she was under a federal investigation. No arrest warrant existed. No CBI officer ever called. A recent Bengaluru case widely reported in May 2026 ended with six suspects arrested by Karnataka Cyber Command — also linked to a ₹15 crore fraud in Belagavi. The money, by then, had moved far.

The fraud has a name: digital arrest. It is not a legal concept. No Indian statute creates a power called digital arrest. It is a script: a caller impersonates a CBI, ED or Narcotics Bureau officer on a video call, manufactures a criminal case against the victim, insists on complete silence and isolation, and instructs transfers to 'verification accounts' to prove innocence. By the time the victim realises what happened, the money has passed through several mule accounts.

Why this fraud works on educated, careful people

The impersonator uses official-looking video backgrounds, uniform graphics, and documents that appear to bear government letterheads. The 'stay on this call, do not speak to anyone' instruction is the key move — it cuts off the one intervention that would end the fraud immediately. A family member, a bank manager, anyone who would say this is not how law enforcement operates.

Elderly recipients of recent property sale proceeds are targeted specifically. A property registration is a public record. A recipient with a large new credit to a bank account is a profile the fraud networks search for. The same pattern targets recently-returned NRIs, retirees, and anyone who has received a court settlement or insurance payout.

Hours 0–2: Stop money movement

• Call 1930. The national cyber crime helpline connects to the bank nodal officer network and can flag the receiving account for a temporary hold. This is the single highest-value action in the first hour.
• Call your bank's fraud helpline directly. Request a freeze on outward transfers from your account.
• Do not delete anything — not the call recording, not the WhatsApp messages, not the fake notice, not the transaction reference. All of it is evidence.
• If the call is still in progress: end it. No CBI or ED officer has ever conducted an arrest or interrogation by video call.

Hours 2–6: File the formal complaints

• File an online complaint at cybercrime.gov.in (NCRP). Include the receiving account details, transaction reference numbers, and any phone numbers or email IDs used.
• Record the acknowledgement number. Every bank and police authority will ask for it.
• Visit the Cyber Crime Police Station, Madiwala, Bengaluru, or the CID Cyber Crime unit for large-value matters. Request FIR registration, not merely an NCR entry.
• Where the officer proposes to record it as a general complaint rather than an FIR, a written request under Section 173 BNSS for FIR registration strengthens your position.

Hours 6–24: Build the legal track

The 1930 call and the NCRP complaint create the banking recovery track. They do not create a legal strategy. A Section 156(3) BNSS application before a Magistrate — directing the police to investigate — is available where police decline to register an FIR or treat the complaint as low priority. The application is particularly relevant when the local Cyber CEN unit deprioritises a complaint because the receiving account is in another state.

Evidence preservation matters as much as speed. Screenshots are admissible but weak standing alone. The stronger chain is: bank-certified transaction records, call detail records obtained under a Section 94 BNSS notice to the telecom provider, WhatsApp media preserved with metadata intact, and a contemporaneous affidavit from the victim recording the sequence of events. A court-ready evidence bundle assembled in the first 24 hours is materially better than one assembled six weeks later.

Recovery realities

The 1930 helpline working within the first two hours, combined with a cooperative receiving bank, gives the best window for a lien or hold on the credited amount. Once money has moved to a second mule account, tracing requires multi-bank coordination and takes weeks. Once it exits the domestic banking system or is converted, recovery is very difficult — though not always impossible.

Courts can order interim attachment of identifiable mule accounts under Section 102 BNSS. This route is available where the first receiving account is identified and funds remain partially intact. The application must go before a Magistrate early — delays erode the practical value.

When to file under Section 156(3) BNSS

Section 156(3) BNSS (the provision formerly known under the same number in CrPC) allows a Magistrate to direct police investigation where police have refused or failed to act. The application needs: the NCRP acknowledgement number, the bank complaint reference, evidence of FIR refusal or inaction, and a factual affidavit. Where a cognisable offence is apparent on the face of the complaint — and digital arrest fraud under Section 318 BNS (formerly Section 420 IPC) and the IT Act plainly qualifies — Magistrates have generally held that refusal to register an FIR is improper.