For anyone in India who got a suspicious call, message or link. Paste it for instant red flags, or follow the steps for what just happened. Free, and written by two named people in Bengaluru.
Your electricity will be disconnected tonight 9:30 PM. Update immediately http://bses-update.icu/pay
What the checker found 4 serious
Start here
Pick the one that sounds like your situation. Urgent means money may be moving right now.
Know the scam
Most scams in India are one of these. Each page lists the signs and the guides that say what to do.
5 guides
6 guides
4 guides
5 guides
4 guides
2 guides
2 guides
3 guides
3 guides
Remember these
Short enough to repeat to a parent over the phone. Each one links to where it is explained.
How we check
The work is called OSINT, short for open-source intelligence. Everything a fraud needs in order to look real leaves a record somewhere public. The scam is built to survive a glance. It rarely survives a check.
A bank portal registered nine days ago is not a bank portal. Registration dates are public and take seconds to read.
Real government and bank apps name a real publisher. A lookalike names a person, a shell, or nobody at all.
Company registries are searchable. A recruiter from a firm with no registration anywhere is the whole answer.
Profile pictures get stolen. One that has been online for fourteen years under a different name settles it.
Worked example
A Bengaluru engineer was sent malware by a fake recruiter from a company called Trifleck, recognised the pattern and did not run it. Public records tied Trifleck to three other fronts: the live websites share one registrar and one Icelandic privacy proxy, two were registered three hours and ten minutes apart on the same day, and two list the same street address. The recruiter's photo came from a fourteen-year-old profile.
Scroll sideways for the whole map, or open the list below.
Latest alerts
Dated and sourced. Each one says the single thing to do about it.
I4C has warned about fraudsters impersonating senior officials, including RBI officers and company CEOs, to order urgent transfers by email and WhatsApp. It works on trust and rank, not on technical tricks.
Verify any payment instruction by calling the person on the number you already had, never the one that messaged you.
Reporting describes a shift towards many low-value thefts rather than a few large ones, helped by AI. Amounts small enough to be missed on a statement, taken often enough to add up.
Read your statement line by line each month. A debit too small to notice is the point of it.
Fraud detection firm BioCatch reports SMS-based scams in India rising 146% in its Digital Banking Fraud Trends 2026 study, a shift away from technical attacks towards persuading people directly.
Treat every unexpected SMS link as hostile. Open the app or type the address yourself instead.
By the numbers
Every figure below is sourced in the guide it links to. We do not publish a number we cannot point at.
Featured
Chosen by us, not ranked by clicks. This site runs no analytics, so we will not pretend to know what is trending. These are the scams that arrive most often and cost the most when they land.
Still not sure?
A call, a message, a link or an app. We check it against the public record and tell you plainly whether it is real. Free, with nothing sold to you afterwards.
We are slower than a bank freeze. If money has already moved, call 1930 first.
Reporting a cyber fraud