Encrypted app scam Mumbai has taken a chilling turn as a senior citizen from the western suburbs of Mumbai was duped out of ₹16.5 lakh by con artists posing as National Investigation Agency (NIA) officials. The fraudsters lured the 68‑year‑old retired BMC contractor into downloading the encrypted messaging app Signal, promising an “online inquiry into the Delhi blasts case.” Within days, the victim was coerced into transferring a large sum of money, only to find the scammers had blocked him on the app and vanished.
Background/Context
Encrypted messaging platforms such as Signal, Telegram, and WhatsApp have become popular tools for secure communication. While they offer privacy for journalists, activists, and ordinary users, the very features that protect anonymity also provide a shield for fraudsters. In recent months, cyber‑criminals have increasingly turned to these platforms to orchestrate “digital arrest” scams, where victims are made to believe they are under investigation for alleged crimes. The Mumbai case is the latest example of a trend that has already claimed millions of rupees from unsuspecting citizens across India.
According to the National Cyber Crime Reporting (NCCR) portal, there were 1,237 reported cases of encrypted app scams in the first quarter of 2026, a 23% rise from the same period last year. The majority of victims were elderly or middle‑aged individuals who were convinced to share personal data or transfer money under the pretext of legal compliance.
Key Developments
On 11 December, the victim received a call from a person claiming to be a police officer from the “Delhi anti‑terrorist department (ATD).” The caller accused him of involvement in the Delhi blasts and instructed him to download Signal for an online inquiry. After installing the app, the victim received a video call from a username “ATD,” which the scammers claimed was former NIA chief Sadanand Date.
During the call, the con artists presented a fabricated arrest warrant and alleged that the victim had laundered ₹7 crore. They sent a “confidentiality agreement” via Signal and warned that terrorists had information on him and his family. The victim was told to send hourly text messages stating “I’m safe” and to submit his financial assets for “RBI verification.” He was assured that the money would be refunded after verification.
Between 16 December and 6 January, the victim transferred ₹16.5 lakh to the scammers’ bank accounts. When he inquired about a refund, the scammers blocked him on Signal. The victim later confided in his son, who realized he had been duped. He filed a complaint on the NCCR portal and approached the West Cyber Police. An FIR was registered on 19 January.
- Victim profile: 68‑year‑old retired BMC contractor, no prior criminal record.
- Scam method: Use of encrypted app, impersonation of law enforcement, fabricated legal documents.
- Financial loss: ₹16.5 lakh (≈$21,000).
- Timeline: 11 Dec – call received; 16 Dec – first transfer; 6 Jan – last transfer; 19 Jan – FIR filed.
Impact Analysis
For the general public, this case underscores the growing sophistication of cyber‑fraudsters. The use of encrypted apps removes the traceability that traditional phone calls or SMS scams leave behind, making it harder for law enforcement to track perpetrators. The emotional manipulation—threatening legal action and claiming that family members are at risk—exploits the victim’s fear and trust in official institutions.
Students and young professionals, who are increasingly using encrypted messaging for both personal and academic communication, should be aware that these platforms can also be exploited. The scam demonstrates that no platform is immune to abuse, and that vigilance is required regardless of the medium.
From a broader perspective, the incident highlights the need for stronger regulatory oversight of encrypted messaging services. While privacy is essential, there must also be mechanisms to detect and deter malicious use without compromising civil liberties.
Expert Insights/Tips
Cyber‑security analyst Dr. Ananya Rao advises:
“Encrypted apps are designed to protect privacy, but they can also be weaponized by fraudsters. Users should verify the identity of anyone requesting sensitive information or money transfers. A simple step is to cross‑check the caller’s credentials through official channels—call the police department’s official number or visit their website.” – Dr. Ananya Rao, Cyber‑Security Consultant
Key practical tips for users:
- Verify authenticity: Before downloading any app or sharing personal data, confirm the source through official websites or trusted contacts.
- Use two‑factor authentication: Enable 2FA on your bank accounts and email to add an extra layer of security.
- Report suspicious activity: File a complaint on the NCCR portal or contact your local cyber police immediately if you suspect a scam.
- Educate family members: Share information about common scam tactics, especially with elderly relatives who may be more vulnerable.
- Keep records: Save screenshots of any suspicious messages or calls; they can serve as evidence for law enforcement.
Financial institutions are also urged to implement stricter verification protocols for large transfers, especially when initiated through third‑party apps. Banks can flag transactions that exceed a certain threshold and require additional authentication.
Looking Ahead
Law enforcement agencies are reportedly collaborating with app developers to create detection algorithms that flag suspicious communication patterns. The Ministry of Electronics and Information Technology has announced a task force to investigate encrypted app scams and to develop guidelines for safe usage.
In the coming months, we can expect:
- Increased public awareness campaigns on digital safety.
- Enhanced reporting mechanisms on encrypted platforms, allowing users to flag potential scams directly within the app.
- Stricter regulatory frameworks that balance privacy with the need to curb cyber‑crime.
- More robust cooperation between banks, telecom operators, and law enforcement to trace illicit transactions.
For citizens, staying informed and skeptical remains the best defense. As the digital landscape evolves, so do the tactics of fraudsters. Vigilance, verification, and timely reporting can prevent many such scams from succeeding.
Reach out to us for personalized consultation based on your specific requirements.
