Karnataka Safety Guide: Fake Police, Deepfake Scams

Check four things before installing. One: publisher name must be Karnataka State Police or Government of Karnataka, not a random developer name. Two: the linked website should end with .gov.in or .nic.in, never .com or .in alone. Three: the permissions list should NOT include microphone, contacts, SMS, file access, or payments for a citizen-services app; legitimate police apps need minimal permissions. Four: scroll past the Google Ads section at the top of search results, because fake apps frequently rank as paid ads above the genuine app. If anything looks off, do not install. WhatsApp the listing to +91 99644 43350 for a free verification before installing. Scammers depend on you skipping the 30-second check.

The digital arrest scam is a video-call fraud where someone in police, CBI, customs, or judicial uniform claims you are under investigation for a serious crime (drug trafficking via a courier in your name, money laundering, child pornography on your bank account). The caller demands you stay on video for hours, isolates you from family and friends, and pressures you to transfer money to a specific account to clear your name. The Indian legal system does NOT operate this way. No real police officer, CBI agent, customs officer, or judge will arrest you over a video call or demand money to drop a case. Hang up immediately. Call 1930 to report. Real arrests involve physical presence, FIR copies, and arrest warrants you can verify at a local police station.

Hang up. Karnataka State Police does not conduct interrogations, arrests, or investigations over WhatsApp, Zoom, Skype, or any video call. If a real officer needs to contact you, they will visit your residence with a warrant or summon you to the police station in writing. After hanging up: call 1930 (National Cybercrime Helpline, 24x7) to report the attempt. If you have a Karnataka State Police station number for your area, call to confirm no notice is genuinely pending. Block the number on WhatsApp and on your phone. Screenshot any messages received and keep them for the FIR. Inform family members and elderly relatives in your network about the call pattern.

Yes. AI voice cloning tools (ElevenLabs, Resemble.ai, open-source alternatives) need only 30 seconds of audio from a YouTube video, Instagram reel, or WhatsApp voice note to produce a convincing clone of any person's voice. The two common scam patterns: child-in-trouble (cloned voice of your son or daughter calling crying, asking for emergency money for an accident, kidnapping, hospital admission), and CEO impersonation (cloned voice of your boss instructing an urgent bank transfer). Detection requires a safe-word system within the family or at the company, established in advance. If you receive an emergency voice call asking for money, hang up, call the person back on their known number, verify in person. Do not transfer money during the first call.

Three parallel channels, all free. National channel: call 1930 (24x7) or file online at cybercrime.gov.in. Use this for any cyber fraud, especially within 24 hours of the incident, because the National Cybercrime Reporting Portal can flag suspect bank accounts for freeze if reported in the golden hour. Karnataka-specific: visit your nearest police station and request to file an FIR under relevant IT Act sections and BNS provisions; the FIR is your legal record and required for any insurance claim or bank recovery. Bengaluru-specific: the Cyber Crime Police Station at City Civil Court complex, Mayo Hall, handles cybercrime cases for Bengaluru jurisdiction. For online fraud above INR 50,000, escalate to the Bengaluru Cyber Crime Division. Save all evidence (screenshots, transaction reference numbers, communication records) before reporting.

KSP refers to Karnataka State Police citizen services apps. The genuine apps are published by Karnataka State Police or Government of Karnataka on the Google Play Store and Apple App Store. They provide services like FIR registration, complaint filing, lost-and-found reporting, women's safety SOS, missing person reports. Verify before installing: publisher name (Karnataka State Police), linked website (.gov.in or .nic.in domain only), permission scope (minimal, no contacts or SMS access for citizen services). Fake KSP-lookalike apps appear regularly on Play Store, sometimes as Google paid ads above the genuine app. If unsure, ask at your local police station or WhatsApp the Play Store listing URL to +91 99644 43350 for free verification.

Five steps. One: do not blame or shame; scam targeting is sophisticated and embarrassment delays disclosure. Two: install Truecaller or a similar caller ID app on their phone and review the call log together weekly. Three: enable WhatsApp safety features (block unknown numbers in privacy settings, disable photo auto-download from unknown chats). Four: agree on a family safe-word that any real emergency call must use, especially for child-in-trouble or CEO-impersonation patterns. Five: save 1930 (National Cybercrime Helpline) and your local police station number as speed-dial. If a scam is in progress (video call, payment demand, threats), call 1930 immediately. For verification of a suspicious app, link, document, or call: WhatsApp +91 99644 43350 for a free check.

Three forms of the same social-engineering attack family. Phishing is fraud delivered via email, typically a fake login page mimicking a bank, courier service, or government department asking you to enter credentials, OTP, or payment details. Smishing is the SMS version (fake delivery notifications, fake KYC update SMS, fake tax refund SMS) with a malicious link. Vishing is voice phishing over phone calls (fake bank fraud-prevention team asking for OTP, fake police asking for investigation cooperation, fake delivery agent asking for COD payment confirmation). All three rely on time pressure (act now or your account closes), authority impersonation (RBI, police, courier, government), and a request for credentials, OTP, payment, or screen-sharing app install. Defence: never share OTP, never click links in unexpected messages, verify by calling back on a known number you looked up independently.

Sometimes, but speed matters more than anything else. Report to 1930 within the first hour (the golden hour) and provide the recipient bank account and transaction reference number. If reported fast enough, the National Cybercrime Reporting Portal can request the recipient bank to freeze the account before the scammer withdraws or layers the money. After freeze, the bank's grievance mechanism and the RBI Banking Ombudsman handle the formal reversal claim. File an FIR at the local police station; the FIR is required for insurance claims and for any civil recovery process. Cyber insurance policies (some banks now offer this as a low-cost add-on) may cover a portion of the loss if you report within the policy's notification window. Recovery rates drop sharply after 24 hours and approach zero after 7 days.

Three parallel paths. One: report directly to Google via the Flag as inappropriate link on the Play Store listing page (mobile app: three-dot menu then Flag as inappropriate; desktop: same option on play.google.com listing). Two: file at cybercrime.gov.in or call 1930 with the Play Store URL of the fake app and any evidence (screenshots of the fake app, transaction screenshots if you paid through it, communication logs). Three: report to Karnataka State Police if you are a Karnataka resident and the fake app caused you financial loss. MeitY has blocked many fake apps under IT Act Section 69A based on CERT-In or police referrals. The faster you report, the faster Google can remove the app, preventing further victims. Save the Play Store listing URL, developer name, and any in-app payment details before reporting.