Experts sound alarm as cyber fraud surges in India

Bengaluru

There is a vast amount of data floating around the internet, easily accessible to anyone,” said Saif Khan, a cybersecurity engineer, emphasising how the personal information of ordinary citizens can be exploited by scammers and fraudsters. Cyber fraud in India has risen at an alarming rate, with cases soaring from 9,622 in 2014 to 77,858 by August 2024. Arrests have also spiked sharply, increasing from 5,752 to 36,235 over the same period, according to a comprehensive decade-long survey of cybercrime in India by researcher Sudhanshu Sekhar Tripathy.

Karnataka reported losses amounting to nearly ?2,600 crore in 2024, while Bengaluru alone registered 12,356 cybercrime cases till August 31, averaging 1,544 cases per month. “The government lacks adequate infrastructure to deal with such online crimes. They need to focus on solutions,” Saif stressed, questioning how authorities can efficiently track citizens for tax defaults but struggle to trace online fraudsters. He further warned that even billion-dollar companies are vulnerable if basic precautions are ignored. Many attacks, he explained, are successful because of insider involvement or social engineering tactics. “Scammers befriend and gain the trust of employees, making it easier to access sensitive data or funds,” he said.

Cybersecurity expert Santhosh (name changed for anonymity) echoed these concerns. “These crimes are extremely serious, yet they receive very little attention,” he said. While such cases may seem minor at first, Santhosh noted, they can eventually lead to massive losses. He highlighted that personal identities are openly traded on the dark web, making individuals highly susceptible to financial and identity theft. According to him, many cyber frauds remain untraceable because scamsters move stolen money abroad within minutes, convert it into cryptocurrency, and then reroute it back into the country. He cited call centre scams in Punjab as examples of highly organised criminal operations involving huge sums of money.

“At the end of the day, scammers are motivated by money, but some do it purely for the thrill,” he added, lamenting that cyber police often lack passion for their work, treating it as “just a 9-to-5 job”. With threats such as phishing, smishing (SMS scams), vishing (fraudulent calls), quishing (malicious QR codes), and juice jacking (data theft via public charging stations) on the rise, Santhosh urged citizens to adopt stricter digital safety practices. He advised people to avoid connecting to free Wi-Fi networks or using public charging ports, as these could expose devices to malicious software.

“People need to be cautious when clicking on links or downloading documents,” he warned, adding that Aadhaar IDs should be electronically locked to prevent misuse, even if the number is leaked. Santhosh also highlighted the risk posed by compromised phone and laptop cameras, warning that hackers could gain remote access. He recommended maintaining separate bank accounts – one for daily transactions and another for savings or major transfers – to minimise losses in case of fraud.
He further cautioned against browsing unsecured websites. “People might think something is free, but they must understand that hackers could be taking something valuable from them without their knowledge,” he said.

Dos

• Lock your Aadhaar ID electronically to prevent misuse if leaked.
• Use secure Wi-Fi connections; only connect to trusted, password-protected networks.
• Keep separate bank accounts – one for daily use and another for savings or major transactions.
• Be cautious before clicking links or downloading attachments from unknown sources. 
• Check website security (look for “https://” and a padlock symbol) before browsing or making transactions.
• Update devices regularly to patch vulnerabilities and install security updates.
• Cover your phone and laptop cameras when not in use to prevent remote spying.

Don’ts

• Avoid free public Wi-Fi for sensitive activities like banking or online payments.
• Do not use public charging stations, as they may be exploited for data theft (juice jacking).
• Never share sensitive information like passwords, OTPs or PINs over calls, SMS or emails.
• Don’t trust unsolicited messages or links, especially those offering rewards or urgent alerts.
• Avoid unsecured websites that lack proper encryption or security certificates.
• Update devices regularly to patch vulnerabilities and install security updates.
• Do not delay reporting suspicious activity or fraud to the cybercrime helpline or local police.