Digital-Arrest Calls & Online Harassment — Kerala Response Note

A “digital arrest” call is fraud: Indian law has no such procedure, and no agency arrests or interrogates over video call while demanding secrecy or money. Disconnect without paying, preserve the numbers, UPI IDs and chats, report on cybercrime.gov.in or helpline 1930, notify the bank’s fraud desk in writing, and file a police complaint. Online harassment runs on platform-grievance and police tracks in parallel.

Is a “digital arrest” call real?

Short answer: No. Indian law contains no procedure called digital arrest, and no agency arrests or interrogates over video call while demanding secrecy or money transfer. Every such call is impersonation and extortion, punishable under provisions including Section 66D of the IT Act and Sections 318, 308, and 351 of the BNS. Disconnect and report. Genuine summons or notices arrive in writing through verifiable channels with document references, not through threats on WhatsApp or Skype demanding gift cards, crypto, or immediate transfer. Any caller who forbids contacting family or police, or who stages a fake “courtroom” on video, confirms the fraud.

What should I do in the first hour after the call or message?

Short answer: Disconnect without paying, preserve the numbers, UPI IDs, and chat or call records with screenshots, note amounts and UTRs if money moved, warn family against secrecy instructions, and report on cybercrime.gov.in or helpline 1930. Then inform the bank’s fraud desk in writing and file a police complaint with the preserved evidence. Speed matters for fund trails, but accuracy matters more: one consistent written version across portal, bank, and police filings. Do not delete chats, reinstall apps to “clean” the phone, or confront the caller. Preserve device logs for later Section 63 BSA certification if proceedings follow.

How is sextortion and image-based blackmail handled?

Short answer: Sextortion and intimate-image blackmail are addressed under IT Act Sections 66E, 67, and 67A with BNS provisions on extortion, criminal intimidation, and related offences. The response is preservation of chats and payment demands, no further payment or imagery, confidential reporting on NCRP, and takedown requests to the platform’s grievance mechanism. Victims often fear exposure more than loss; that fear is what the offender monetises. Reporting channels accept confidential complaints, and platforms operating in India must maintain grievance redressal under the IT Rules. Evidence discipline — original files, URLs, timestamps — decides later remedies more than any negotiation with the offender.

What about loan-app harassment and abusive recovery?

Short answer: Abusive recovery — contact-list shaming, morphed images, threats, or persistent calls — may attract IT Act and BNS provisions alongside RBI digital-lending and recovery norms. Preserve call logs, messages, and app permissions, complain to the lender’s grievance redressal and the RBI Sachet portal, and report criminal threats to NCRP and police. Borrowing status does not licence harassment. The response separates the civil repayment question from the criminal harassment question: legitimate dues are addressed through documented channels, while threats and defamation are reported as offences with evidence.

How do takedown, evidence, and platform grievance fit together?

Short answer: Takedown runs through the platform’s grievance officer under the IT Rules 2021 (as amended in 2026 for synthetically generated information), with NCRP and police complaints in parallel for investigation. Evidence runs through Section 63 BSA certification of chats, images, logs, and call records for later proceedings. File the platform complaint with exact URLs, timestamps, and ID proof; retain acknowledgement numbers; and keep originals with hash or device details where possible. Re-uploads need fresh complaints with new URLs. No takedown timeline for every category can be promised; procedure and follow-up decide outcomes.

How should families and workplaces respond to contact-list threats?

Short answer: Where offenders threaten to message family, employers, or contacts, warn those circles briefly that a fraud attempt is underway, ask them to block and preserve any messages, and avoid paying for silence. A short factual warning deprives the offender of surprise, which is the primary leverage in contact-list extortion. Do not share additional images, IDs, or money to “verify” bona fides during the panic. Preserve the threat messages with timestamps, note which contacts were approached, and include that list in the NCRP and police filings. Counselling support for minors and distressed victims should precede any detailed statement-taking.

What longer-term protection reduces repeat targeting?

Short answer: Longer-term protection includes tightening app permissions, enabling two-factor authentication, reviewing privacy settings on social and professional profiles, separating payment identities from public contact details, and practising verification callbacks for any authority claim through independently sourced numbers. Victim details circulate on offender lists, so a quiet period of heightened hygiene follows every incident. Periodically check bank statements and credit or CIBIL alerts for misuse of leaked KYC, and retain the complaint acknowledgement numbers for future linkage. Awareness within the household — especially for elderly members and students — prevents the second attempt that often follows the first within weeks.

First-hour checklist

What should witnesses, screenshots, and device preservation cover?

Short answer: Witnesses cover who saw the call or messages and when; screenshots cover numbers, profiles, demands, and payment details with visible timestamps; device preservation covers original chats, call logs, and app data without deletion or factory reset. Together they form the evidentiary spine if investigation or trial follows. Ask witnesses for a short dated note while memory is fresh, capture full-screen screenshots rather than cropped fragments, and back up the device before any repair or OS update. Where Section 63 BSA certification is later needed, the custodian’s statement links each exhibit to its source device or account; after-the-fact reconstructions without originals carry little weight. One organised evidence folder with an index outperforms scattered forwards across family WhatsApp groups.

Primary sources

• IT Act ss.66C/66D/66E/67/67A/79; IT Rules 2021 as amended 10.02.2026 (SGI labelling, takedown).
• BNS ss.318/308/351/356/77; Shreya Singhal v. UoI (2015) 5 SCC 1 (s.66A invalid).
• NCRP cybercrime.gov.in; helpline 1930; RBI digital-lending and recovery norms.