--- title: "Investment, task, crypto, ransomware and BEC fraud" description: "Investment, task, crypto, ransomware and BEC fraud: 24 matters, each with the law, forum, procedure, documents and limitation. Telegram investment scam…" url: "https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/" image: "https://advaslam.com/og.png" --- Cyber fraud, freeze & takedown # Investment, task, crypto, ransomware and BEC fraud 24 matters from the Cyber fraud, freeze & takedown index. Each entry sets out the problem, the law, the forum, the procedure, the documents usually needed and the limitation clock. General information only — verify the current position on your facts before acting. **Contents** 1. Telegram investment scam Kerala – fake SEBI / analyst group, small-profit trap 2. Fake trading dashboard / app fraud – F&O / forex / crypto screen shows profit 3. Prepaid-task / like-and-earn scam Kerala – recharge → commission → big deposit freeze 4. Online job / work-from-home scam – registration fee + data-entry deposit 5. Instant loan-app harassment Kerala – morphed contacts, Sachet/RBI check 6. P2P crypto fraud Kerala – UPI paid, USDT never released / account frozen as mule 7. Wallet-drain / seed-phrase scam – fake airdrop / support took seed or signed malicious approval 8. Ransomware / data-encryption extortion – clinic / shop / startup system locked 9. Business email compromise (BEC) Kerala – fake vendor / boss mail, invoice account changed 10. Fake IPO / pre-IPO allotment scam – WhatsApp + UPI + "allotment fee 11. Pig-butchering / romance-cum-investment scam Kerala – long grooming, then trading portal 12. Accused-side defence in investment-case – mule / introducer / "profit sharer" arrayed 13. Lien-mark on investment trail – victim request + bank response drafting 14. Quash / discharge in failed-venture vs fraud allegation – genuine loss distinguished 15. PMLA note in cyber-investment cases – when ED angle arises (general information) 16. Fake advisory / "SEBI-registered" tip-seller verification path 17. Crypto-exchange grievance + off-ramp freeze drafting (victim) 18. Loan-app data-deletion / morphed-photo removal request 19. Ransomware backup + business-continuity record for claim/insurance 20. BEC vendor-verification control note (preventive information) 21. Task-scam minor / student victim path – consent, custody of device, counselling record 22. Cross-state investment FIR linkage – Kerala victim, outside-India handler 23. Settlement / restitution in investment fraud – court-recorded payment 24. Tax / bank-statement handling after fraud – explaining credits to bank/IT dept ## Telegram investment scam Kerala – fake SEBI / analyst group, small-profit trap Added to Telegram group, small withdrawals worked, large top-up blocked. What it involvesFake admins, cloned profit cards, mule UPI/bank chain. Relevant lawBNS 318(4), 319(2); IT 66D. ForumCyber PS / CID Cyber; NCRP; bank nodal. Procedure & stagePreserve group link, admin IDs/usernames, invite link, UTR chain; 1930/NCRP same day; BNSS 173 FIR. RemedyMulti-hop lien; investigation; compensation. High Court connectionHC writ for status where multi-bank lien stalls; bail/quash for wrongly arrayed mules. Documents normally requiredChat export (dates), URLs, UTRs, statements, NCRP/1930 ack. LimitationBank/CDR logs overwrite – act in days. **Related:** Fake-dashboard; prepaid-task; pig-butchering. **Paid GST/tax to release?** That is the second trap – stop and report. ## Fake trading dashboard / app fraud – F&O / forex / crypto screen shows profit App/website shows growing balance but withdrawal needs "fee". What it involvesNon-market backend; deposit to mule; no demat/ledger. Relevant lawBNS 318, 61 conspiracy where invoked; IT 66D, 43. ForumCyber PS; NCRP; intermediary takedown. Procedure & stageAPK/URL preservation; domain/IP request via IO; bank chain freeze; BSA 63 for screen records. RemedyTakedown + freeze + prosecution; compensation. High Court connectionSec 69A blocking via statutory route; writ only for inaction after Rule 3(2) complaints. Documents normally requiredAPK, URL, wallet/VPA/UTR list, dashboard video, NCRP set. LimitationReport immediately – domain/APK logs and first-hop funds perish; no separate statutory period. **Related:** P2P; wallet-drain. **App on Play Store – genuine?** Clones exist – verify SEBI registration separately. ## Prepaid-task / like-and-earn scam Kerala – recharge → commission → big deposit freeze Small tasks paid, then prepaid "merchant tasks" demanded; balance frozen. What it involvesClassic task-fraud ladder; Telegram + fake portal. Relevant lawBNS 318(4); IT 66D. ForumCyber PS; NCRP. Procedure & stageStop further top-up; preserve task portal login + wallet screens; FIR with full ladder table. RemedyFreeze on recipient chain; investigation. High Court connectionHC status-report direction where amounts spread across states. Documents normally requiredTask screenshots, recharge UTRs, portal URL, chat export. Limitation1930 golden hour – report immediately; RBI zero liability (third-party breach) needs notice to the bank within 3 working days of its alert (RBI Commercial Banks – Responsible Business Conduct Directions 2025, paras 67–70). **Related:** Job scam; loan-app. **First profit credited – still fraud?** Yes – early Payout builds trust. ## Online job / work-from-home scam – registration fee + data-entry deposit Offer letter + fee for kit/training; salary never comes. What it involvesFake HR, forged offer, fee extraction. Relevant lawBNS 318, 319; IT 66D. ForumCyber PS; NCRP; job-portal grievance. Procedure & stagePreserve offer PDF headers, sender domain, fee UTRs; portal abuse report; BNSS 173. RemedyFreeze + takedown + prosecution. High Court connectionWrit for takedown inaction after platform notice. Documents normally requiredOffer letter, domain headers, fee receipts, chats. LimitationNo fixed statutory period – report immediately; portal/domain preservation is time-sensitive. **Related:** Prepaid-task; BEC. **Agreement signed – bound?** Fraud vitiates consent – preserve and complain. ## Instant loan-app harassment Kerala – morphed contacts, Sachet/RBI check Small loan disbursed, then abusive recovery + contact-list threats. What it involvesUnregistered lending app; excessive permissions; extortionary recovery. Relevant lawBNS 308(2) extortion, 351 intimidation, 356 defamation where made; IT 66E, 67/67A where images misused; RBI digital-lending norms. ForumCyber PS; RBI Sachet complaint; app-store grievance. Procedure & stageRevoke permissions; preserve APK/lender details/recovery chats; NCRP; Sachet filing; BNSS 173. RemedyLending-app inquiry; harassment prosecution; takedown. High Court connectionHC writ where recovery threats continue after complaints; AB/bail on accused side. Documents normally requiredAPK, lender name/account, chats, call logs, Sachet ref, statement. LimitationApp-store/platform grievance – ack 24 hrs, resolve 7 days (IT Rules 2021 r.3(2)(a)(i), as amended w.e.f. 20.02.2026); morphed/intimate-image complaints – 2 hrs (r.3(2)(b)). **Related:** Sextortion; defamation. **Repay to stop abuse?** Record first – repayment does not guarantee deletion. ## P2P crypto fraud Kerala – UPI paid, USDT never released / account frozen as mule P2P order paid by UPI; seller never released coin; or buyer's own bank frozen. What it involvesOn-exchange P2P + off-exchange UPI leg; tainted-coin pass-through. Relevant lawBNS 318/316 per role; IT 66D/43; PMLA angle where laundering alleged (separate note below). ForumExchange grievance + Cyber PS + NCRP; bank for lien. Procedure & stagePreserve P2P order ID, escrow screens, UTR, wallet addresses; exchange ticket + NCRP parallel. RemedyEscrow hold / chain freeze; investigation; compensation. High Court connectionDe-freeze writ where only tainted portion should remain under BNSS 106. Documents normally requiredOrder ID, wallet addresses, UTRs, exchange tickets, NCRP. LimitationExchange ticket + NCRP immediately; no fixed statutory period; ticket timelines per platform terms. **Related:** Wallet-drain; lien; PMLA note. **Exchange says completed?** Escrow + UPI timing decides – preserve both. ## Wallet-drain / seed-phrase scam – fake airdrop / support took seed or signed malicious approval Shared seed / clicked "claim" and approved token allowance; wallet emptied. What it involvesPrivate-key compromise; token-approval drain; on-chain tracing. Relevant lawBNS 318; IT 66, 43, 66D; IT 66C where identity misused. ForumCyber PS (chain-analysis capable wing); exchange where off-ramp. Procedure & stageRevoke approvals; move residual; preserve TX hashes, phishing URL, approver contract; IO chain request. RemedyOff-ramp freeze where identified; prosecution; compensation. High Court connectionDirection for time-bound forensic/chain report where case stalls. Documents normally requiredTX hashes, wallet addresses, phishing URL, approval screens. LimitationOn-chain trace is time-sensitive – preserve TX hashes and move at once; no fixed statutory period. **Related:** Phishing-header; ransomware. **Seed shared – recoverable?** On-chain reversal is not available – off-ramp freeze is the practical path. ## Ransomware / data-encryption extortion – clinic / shop / startup system locked Systems encrypted; demand in crypto for key; business halted. What it involvesMalware ingress; backup + log preservation; no-payment assessment. Relevant lawBNS 308 extortion, 324 mischief per loss; IT 66, 43, 66F where cyber-terrorism ingredients (rare, facts only). CERT-In Directions 28.04.2022 (IT 70B(6)) – covered entities must report listed incidents incl. ransomware within 6 hours of noticing. ForumCyber PS; CERT-In incident report (Rule 3(1)(l) intermediary reporting duty; CERT-In Directions 2022). Procedure & stageIsolate (not wipe); preserve logs/ransom note/wallet; CERT-In + FIR; FSL imaging under BNSS 106/105. RemedyForensic + investigation; compensation; backup restoration. High Court connectionHC writ for forensic direction; accused-side bail/quash where insider allegation. Documents normally requiredRansom note, wallet, logs, backup status, asset list. LimitationLogs rotate fast – image immediately. **Related:** BEC; seizure-memo. **Pay ransom?** Generally avoid without IO/CERT guidance – payment rarely guarantees key and may repeat. ## Business email compromise (BEC) Kerala – fake vendor / boss mail, invoice account changed Accounts paid to new bank on mailed "revised" instructions; real vendor denies. What it involvesSpoofed/look-alike domain; header forgery; mule account. Relevant lawBNS 318, 319; IT 66D, 66C; IT 43. ForumCyber PS; beneficiary bank (immediate lien); NCRP. Procedure & stagePreserve.eml + headers; beneficiary-bank hold within hours; BNSS 173 FIR; domain takedown. RemedyBeneficiary freeze; recovery per trail; prosecution. High Court connectionHC commercial/writ overlap where PSU-bank freeze stalls – plead alternate remedy first. Documents normally requiredOriginal.eml, headers, invoice versions, UTR, beneficiary details, NCRP. LimitationBeneficiary-bank hold fastest within hours (1930 golden hour); no fixed statutory period. **Related:** Phishing-header; domain-69A. **Employee fault – bank liable?** Depends on verification failure vs deception – record decides. ## Fake IPO / pre-IPO allotment scam – WhatsApp + UPI + "allotment fee Pre-IPO shares promised via WhatsApp; fee after fee; no allotment. What it involvesUnregistered offering + UPI chain; fake allotment letters. Relevant lawBNS 318; IT 66D; SEBI norms on unregistered solicitation (facts only). ForumCyber PS; NCRP; SEBI SCORES where securities angle. Procedure & stagePreserve letters, registrar claim verification, UTRs; parallel SEBI + police tracks. RemedyFreeze + prosecution; compensation. High Court connectionMulti-FIR consolidation/bail before HC where accused arrayed in several states. Documents normally requiredAllotment PDFs, registrar reply, UTRs, chats. Limitation1930 golden hour – report immediately; RBI zero liability (third-party breach) needs notice to the bank within 3 working days of its alert (RBI Commercial Banks – Responsible Business Conduct Directions 2025, paras 67–70). **Related:** Investment-task; pig-butchering. **Allotment letter looks real?** Verify with registrar/RTA directly. ## Pig-butchering / romance-cum-investment scam Kerala – long grooming, then trading portal Friendly contact → trading tips → portal profits → large lock + tax demand. What it involvesLong-con grooming + fake exchange; cross-border handlers. Relevant lawBNS 318(4), 61 where conspiracy; IT 66D; BNS 308 extortion where threats extract money; BNS 78 (stalking)/79 (insult to modesty) only where their ingredients fit. ForumCyber PS; NCRP; platform grievance for profile/number. Procedure & stageFull chat export; portal/Wallet/UTR mapping; early multi-hop lien. RemedyFreeze; investigation; victim-support record. High Court connectionHC victim-writ for coordinated status across banks; accused extradition/MLAT is executive domain. Documents normally requiredComplete chat, numbers/IDs, portal URL, TX/UTR list. LimitationNo fixed statutory period – preserve full chat and report immediately; multi-hop lien fastest early. **Related:** Sextortion; P2P. **Relationship genuine?** Grooming pattern matters – preserve full history, do not delete. ## Accused-side defence in investment-case – mule / introducer / "profit sharer" arrayed Person who only lent account or introduced friends is now accused. What it involvesKnowledge vs use distinction; cooperation vs self-incrimination balance. Relevant lawBNS 61/318/319 ingredients; BNSS 106, 183, 185 (statements/search); Art 20(3) Constitution. ForumIO; Sessions/HC for bail; Magistrate/HC for quash. Procedure & stageNo destruction; counsel-led statement; bail with cooperation; discharge/quash per record. RemedyBail; discharge; Sec 528 BNSS quash where no prima-facie case. High Court connectionCore HC-primary – AB/bail/quash drafting. Documents normally requiredSource/purpose proof, chats, KYC, transaction purpose, lien notice. LimitationNo fixed statutory period – file promptly; where custody continues, default bail if charge-sheet not filed within 60 days (90 days where offence punishable with death, life or 10+ years) – BNSS 187(3). **Related:** Innocent-recipient; quash; PMLA. **Return money to close FIR?** Restitution does not auto-close crime – take advice before paying anyone except through court/IO. ## Lien-mark on investment trail – victim request + bank response drafting Bank says "police notice needed" while money moves on. What it involvesVictim lien request + IO notice under BNSS; multi-hop follow-up. Relevant lawBNSS 106 (seizure/report to Magistrate); RBI grievance channel. ForumBank nodal; IO; Magistrate. Procedure & stageWritten hold request with UTR/hop table; daily follow-up; insist on Sec 106 report filing. RemedyDebit-freeze on trail; Magistrate oversight. High Court connectionHC direction where lien amount lies without Magistrate report. Documents normally requiredHop table, UTRs, bank/IO letters. LimitationNo fixed statutory period – hold request + IO notice immediately; follow up daily. **Related:** 14-day lien; de-freeze. **Phone request enough?** No – written trail with ack. ## Quash / discharge in failed-venture vs fraud allegation – genuine loss distinguished Business loss / delayed payout labelled cheating. What it involvesBreach of promise vs dishonest intent at inception test. Relevant lawBNS 318 ingredients; Sec 528 BNSS inherent powers; discharge under BNSS S. 262 (warrant-case discharge before the Magistrate). ForumMagistrate (discharge); HC (quash). Procedure & stagePaper-book – agreement, ledger, repayment attempts, contemporaneous record. RemedyDischarge/quash where no dishonest inducement shown. High Court connectionHC-primary quash – precise, not omnibus. Documents normally requiredContracts, ledgers, bank entries, communications before dispute. LimitationDischarge application – within 60 days of supply of copies (BNSS 262(1)); quash – no fixed period, move promptly. **Related:** Settlement; PMLA. **Civil or criminal?** Both can coexist but criminal needs dishonest intent – fact record decides. ## PMLA note in cyber-investment cases – when ED angle arises (general information) Client fears/confused by ED summons after cyber FIR. What it involvesPredicate-offence + proceeds-of-crime allegation; summons/compliance. Relevant lawPrevention of Money-laundering Act 2002; BNS predicate; BNSS procedure. ForumAdjudicating Authority (PMLA) / Special Court; HC writ/bail per maintainability. Procedure & stageDo not ignore summons; counsel-led documents; separate cyber and PMLA files. RemedyCompliance + bail/attachment challenge per statute. High Court connectionHC for bail/quash-scope as permitted by PMLA jurisprudence on filing date. Documents normally requiredFIR, bank trail, source proof, summons, prior replies. LimitationSummons dates are strict – diary them. **Related:** Lien; accused defence. **Cyber refund solves ED?** Separate tracks – coordinate but do not mix. ## Fake advisory / "SEBI-registered" tip-seller verification path Fee for tips/calls; losses; registration claim doubtful. What it involvesSEBI IA/RA verification; unregistered advice. Relevant lawSEBI registration norms for investment advisers/research analysts; BNS 318 where deception; IT 66D where online. ForumSEBI SCORES; Cyber PS/NCRP where fraud. Procedure & stageRegistration-number check; fee/UTR preservation; parallel complaints. RemedyFee reversal claim + prosecution per facts. High Court connectionWrit where regulator/bank silent after representation (alternate remedy first). Documents normally requiredRegistration claim screenshot, fee UTRs, tip records, SCORES ref. LimitationNo fixed statutory period – SEBI SCORES + police in parallel, immediately. **Related:** Fake-IPO; investment-task. **Small fee – complain?** Yes – pattern builds multi-victim case. ## Crypto-exchange grievance + off-ramp freeze drafting (victim) Fraud coin moved to exchange; support slow. What it involvesTX-hash + KYC-off-ramp request via IO + victim ticket. Relevant lawIT 79 due-diligence + Rule 3 grievance; BNS/IT as applicable; BNSS 106. ForumExchange grievance; IO; NCRP. Procedure & stageTicket with TX hashes + FIR/NCRP; IO law-enforcement request to exchange. RemedyOff-ramp hold; disclosure for trial. High Court connectionHC direction for expeditious IO request where exchange awaits police channel. Documents normally requiredTX hashes, exchange ticket, FIR/NCRP, BSA 63 for records. LimitationExchange response windows are short – ticket immediately; no fixed statutory period. **Related:** Wallet-drain; MLAT/cloud (where foreign exchange). **Exchange outside India?** IO/MLAT channel needed – timeline longer. ## Loan-app data-deletion / morphed-photo removal request Photos/contacts with lender after uninstall. What it involvesRule 3 grievance + app-store + Cyber PS track. Relevant lawIT Rules 2021 Rule 3 clocks (as amended by G.S.R. 120(E) dated 10.02.2026, w.e.f. 20.02.2026): ack 24 hrs; disposal 7 days (r.3(2)(a)(i)); 36-hr removal (proviso r.3(2)(a)(i)); 3-hr removal on court/government order (r.3(1)(d)); 2-hr intimate-image/impersonation (r.3(2)(b)); 72-hr assistance on written order (r.3(1)(j)); IT 66E/67/67A per misuse; DPDP direction evolving. ForumLender grievance; Google/Apple grievance; Cyber PS. Procedure & stageDeletion request + tickets; NCRP with APK proof; preserve abuse. RemedyDeletion + takedown + prosecution. High Court connectionInjunction/writ where intimate images persist. Documents normally requiredAPK, account ID, deletion tickets, abuse screenshots, NCRP. LimitationReport immediately – Rule 3 clocks above (as amended by G.S.R. 120(E) dated 10.02.2026, w.e.f. 20.02.2026); deletion/takedown target where listed content involved. **Related:** Sextortion; injunction. **Paid – data deleted?** Not assured – pursue deletion in writing. ## Ransomware backup + business-continuity record for claim/insurance Insurer/bank asks proof of loss and steps. What it involvesLoss ledger + forensic report + FIR + CERT reference. Relevant lawPolicy terms + IT 43/66; BNS mischief/extortion. CERT-In Directions 28.04.2022 – covered entities must report listed incidents incl. ransomware within 6 hours of noticing. ForumInsurer; IO; civil court if repudiation. Procedure & stageLoss quantification; no-wipe imaging; claim with chain. RemedyInsurance/contractual recovery; criminal track parallel. High Court connectionHC writ only against public insurer arbitrariness; private insurer – civil/consumer. Documents normally requiredLogs, forensic note, FIR, loss bills, policy. LimitationCERT-In 6-hour reporting for covered entities (Directions 28.04.2022); insurance/civil claim periods per policy terms and the Limitation Act. **Related:** Evidence; FSL. **Wiped and restored?** Note it – wiping weakens forensics/claim. ## BEC vendor-verification control note (preventive information) Business wants to avoid second BEC. What it involvesCallback + maker-checker + domain-allowlist note for internal use. Relevant lawContract + IT 43/66D context (preventive). ForumInternal compliance; bank positive-pay where available. Procedure & stageWritten SOP; no verbal account change. RemedyPrevention; cleaner record if incident recurs. High Court connectionNone directly – reduces litigation. Documents normally requiredSOP, vendor master, change-log. LimitationNo fixed statutory period – preventive note; review controls after any incident. **Related:** Domain-69A; evidence. **One control?** Callback to known number + second approver. ## Task-scam minor / student victim path – consent, custody of device, counselling record Student hid loss; parents discover late. What it involvesMinor-sensitive recording; device custody; school/support. Relevant lawBNS/IT as applicable; BNSS child-sensitive procedure; POCSO only where sexual element (facts only). ForumCyber PS; NCRP. Procedure & stageCalm chronology; counsellor note; device preserved; FIR via guardian. RemedyFreeze + investigation + support. High Court connectionIn-camera / privacy prayers where applicable. Documents normally requiredChats, UTRs, device, guardian ID. LimitationNo fixed statutory period – report promptly with guardian. **Related:** Student-mule; bullying. **Hide from record?** No – clean record helps school/bank leniency requests. ## Cross-state investment FIR linkage – Kerala victim, outside-India handler Money hopped to other states; local PS says "go there". What it involvesZero-FIR + NCRP linkage + nodal coordination. Relevant lawBNSS 173; IT 75 (extra-territorial); MLAT where foreign. ForumHome Cyber PS + NCRP; coordination via higher cells. Procedure & stageInsist on FIR + transfer memo, not refusal; share hop table. RemedyUnified trail; status reports. High Court connectionHC direction for coordination report where trail stalls. Documents normally requiredHop table, NCRP numbers, transfer memos. LimitationNo fixed statutory period – file FIR promptly where informed; linkage memos time-sensitive. **Related:** Cloud-MLAT; writ. **File everywhere?** One FIR + linked NCRPs is cleaner than many FIRs. ## Settlement / restitution in investment fraud – court-recorded payment Accused offers refund for leniency; victim fears losing criminal leverage. What it involvesCourt/IO-recorded restitution; compounding scope per offence. Relevant lawBNSS 359 compounding tables – BNS 318(2)/319(2) by person cheated; 318(4) only with court permission; others per table. ForumIO/Magistrate/trial court. Procedure & stageWritten terms; court receipt; no private "settlement deed" alone for non-compoundable heads. RemedyRecorded restitution; bail/conduct weight. High Court connectionHC records compromise in quash where law permits. Documents normally requiredTerms, IDs, payment proof, crime number. LimitationNo fixed statutory period – terms per court/IO; compoundability per BNSS 359 tables. **Related:** Quash; accused defence. **Cash settlement?** Avoid – bank channel + court record only. ## Tax / bank-statement handling after fraud – explaining credits to bank/IT dept Fraud credits + refunds confuse statements; notice arrives. What it involvesSeparate fraud-ledger; CA note; reply with FIR/NCRP. Relevant lawIncome-tax / bank KYC context (facts only); BNS/IT fraud record. ForumBank/Dept reply; AO as applicable. Procedure & stageFraud-ledger + FIR annexed; no mixing with business income. RemedyClean explanation; avoids adverse inference. High Court connectionWrit only on jurisdictional illegality after replies. Documents normally requiredFraud-ledger, FIR/NCRP, bank letters, return notes. LimitationReply within the period stated in the notice; keep the fraud-ledger current. **Related:** CIBIL-next; lien. **Refund taxable?** Show as restitution with record – CA to certify. More in this area ## Cyber crime & IT Act matters: other matters - [UPI, QR-code and OTP phishing](https://advaslam.com/practice/cyber-crime/matters/upi-qr-otp-phishing/) - Investment, task, crypto, ransomware and BEC fraud - [Bank account freeze, lien and mule-account allegations](https://advaslam.com/practice/cyber-crime/matters/freeze-lien-mule-ncrp/) - [Harassment, sextortion and defamation](https://advaslam.com/practice/cyber-crime/matters/harassment-sextortion-defamation/) - [Intermediaries, evidence and search](https://advaslam.com/practice/cyber-crime/matters/intermediary-evidence-search/) [Every matter in this area, on one page →](https://advaslam.com/practice/cyber-crime/matters/) [Cyber crime & IT Act matters: the practice area →](https://advaslam.com/practice/cyber-crime/) Procedure guides - [Bank Account Frozen by Kerala Cyber Cell](https://advaslam.com/guides/bank-account-frozen-kerala-cyber-cell-guide/) - [Digital Arrest & Online Harassment, Kerala](https://advaslam.com/guides/digital-arrest-online-harassment-response-note/) Contact [WhatsApp](https://wa.me/919497240215?text=Hello%2C%20I%20found%20advaslam.com%20and%20would%20like%20to%20discuss%20a%20matter.) [contact@advaslam.com](mailto:contact@advaslam.com) [+91 94972 40215](tel:+919497240215) 3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction, Ernakulam, Kerala 682031 · Monday – Saturday, 10:00 – 18:30 (by appointment) ```json {"@context":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://advaslam.com/#website","url":"https://advaslam.com","name":"Adv. K J Muhammed Aslam","alternateName":"advaslam.com","publisher":{"@id":"https://advaslam.com/#person"},"inLanguage":"en-IN"},{"@type":"Person","@id":"https://advaslam.com/#person","name":"K J Muhammed Aslam","alternateName":["Adv. K J Muhammed Aslam","Advocate K J Muhammed Aslam","Muhammed Aslam K J","Adv. Aslam"],"honorificPrefix":"Adv.","jobTitle":"Advocate","description":"Advocate enrolled with the Bar Council of Kerala, practising from High Court Junction, Ernakulam: cyber and technology law, data protection (DPDP), business, banking and IPR, and litigation before the High Court of Kerala and the courts at Ernakulam.","url":"https://advaslam.com/profile/","image":"https://advaslam.com/og.png","telephone":"+919497240215","email":"contact@advaslam.com","address":{"@type":"PostalAddress","streetAddress":"3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction","addressLocality":"Ernakulam","addressRegion":"Kerala","postalCode":"682031","addressCountry":"IN"},"alumniOf":{"@type":"CollegeOrUniversity","name":"Bharata Mata School of Legal Studies"},"memberOf":[{"@type":"Organization","name":"Bar Council of Kerala","url":"https://barcouncilkerala.org/lawyer-registry-list"},{"@type":"Organization","name":"Kerala High Court Advocates' Association","url":"https://khcaa.com/"}],"identifier":[{"@type":"PropertyValue","propertyID":"Bar Council of Kerala Enrolment No.","value":"K/001823/2026"},{"@type":"PropertyValue","propertyID":"KHCAA Membership No.","value":"OAJ 358"}],"knowsAbout":["Information Technology Act 2000","Cyber crime law","Technology law and technology contracts","Digital Personal Data Protection Act 2023","DPDP compliance","Data protection and privacy law","Business and commercial law","Contract drafting and negotiation","Banking and finance law","Negotiable Instruments Act cheque dishonour","SARFAESI Act","Intellectual property law","Copyright and trademark law","Patent infringement","GST and income-tax law","Blockchain and cryptocurrency technology","Web3 wallets and NFTs","Drone regulation and DigitalSky framework","Writ petitions under Article 226","Criminal law","Civil and consumer litigation","Family and succession law","Service and labour law","Legal drafting","Mediation and dispute resolution"],"knowsLanguage":["en","ml"],"workLocation":{"@id":"https://advaslam.com/#practice"},"hasCredential":[{"@type":"EducationalOccupationalCredential","credentialCategory":"Enrolment as an advocate","identifier":"K/001823/2026","recognizedBy":{"@type":"Organization","name":"Bar Council of Kerala"},"description":"Enrolled as an advocate with the Bar Council of Kerala (K/001823/2026), 2026"},{"@type":"EducationalOccupationalCredential","credentialCategory":"degree","educationalLevel":"Bachelor","recognizedBy":{"@type":"CollegeOrUniversity","name":"Bharata Mata School of Legal Studies"},"description":"BBA LLB (Hons.), Bharata Mata School of Legal Studies (2025)"},{"@type":"EducationalOccupationalCredential","credentialCategory":"Remote Pilot Certificate","recognizedBy":{"@type":"Organization","name":"Directorate General of Civil Aviation, India"},"description":"DGCA Remote Pilot Certificate, issued 2022"}],"subjectOf":[{"@type":"CreativeWork","name":"Govind Babu v. State of Kerala (Crl.M.C. No. 5640 of 2026, 2026:KER:69496)","url":"https://indiankanoon.org/doc/151180872/","datePublished":"2026-09-10","publisher":{"@type":"Organization","name":"High Court of Kerala"}},{"@type":"CreativeWork","name":"Viji Sagar v. State of Kerala (Crl.M.C. No. 1603 of 2026, 2026:KER:20803)","url":"https://indiankanoon.org/doc/193042273/","datePublished":"2026-03-09","publisher":{"@type":"Organization","name":"High Court of Kerala"}},{"@type":"CreativeWork","name":"Anjana v. Manoharan A.P. (C.R.P. No. 442 of 2025, 2026:KER:10054)","url":"https://indiankanoon.org/doc/68585852/","datePublished":"2026-02-05","publisher":{"@type":"Organization","name":"High Court of Kerala"}}],"sameAs":["https://www.linkedin.com/in/azlubro","https://portal.khcaa.com/advocate?id=10480","https://lexosys.com"]},{"@type":"LegalService","@id":"https://advaslam.com/#practice","name":"Adv. K J Muhammed Aslam — Advocate, Ernakulam","url":"https://advaslam.com","image":"https://advaslam.com/og.png","telephone":"+919497240215","email":"contact@advaslam.com","address":{"@type":"PostalAddress","streetAddress":"3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction","addressLocality":"Ernakulam","addressRegion":"Kerala","postalCode":"682031","addressCountry":"IN"},"geo":{"@type":"GeoCoordinates","latitude":9.9889,"longitude":76.2748},"hasMap":"https://www.google.com/maps/search/?api=1&query=Lalan+Towers+High+Court+Junction+Ernakulam","areaServed":[{"@type":"City","name":"Ernakulam"},{"@type":"City","name":"Kochi"},{"@type":"State","name":"Kerala"},{"@type":"Country","name":"India"}],"openingHoursSpecification":{"@type":"OpeningHoursSpecification","dayOfWeek":["Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"opens":"10:00","closes":"18:30"},"founder":{"@id":"https://advaslam.com/#person"},"knowsAbout":["Cyber crime and IT Act matters","Data protection and DPDP Act compliance","Business, banking, intellectual property and tax","Legal drafting","Criminal law: bail, quash and appeals","Writ petitions before the High Court of Kerala","Civil, property and consumer matters","Family and succession matters","Service and labour matters"]},{"@type":"CollectionPage","name":"Investment, task, crypto, ransomware and BEC fraud","description":"Investment, task, crypto, ransomware and BEC fraud: 24 matters, each with the law, forum, procedure, documents and limitation. Telegram investment scam…","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/","inLanguage":"en-IN","dateModified":"2026-09-28T00:00:00.000Z","isPartOf":{"@id":"https://advaslam.com/#website"},"author":{"@id":"https://advaslam.com/#person"},"mainEntity":{"@type":"ItemList","numberOfItems":24,"itemListElement":[{"@type":"ListItem","position":1,"name":"Telegram investment scam Kerala – fake SEBI / analyst group, small-profit trap","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#telegram-investment-scam-kerala-fake-sebi-analyst-group-small-profit-trap"},{"@type":"ListItem","position":2,"name":"Fake trading dashboard / app fraud – F&O / forex / crypto screen shows profit","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#fake-trading-dashboard-app-fraud-fo-forex-crypto-screen-shows-profit"},{"@type":"ListItem","position":3,"name":"Prepaid-task / like-and-earn scam Kerala – recharge → commission → big deposit freeze","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#prepaid-task-like-and-earn-scam-kerala-recharge-commission-big-deposit-freeze"},{"@type":"ListItem","position":4,"name":"Online job / work-from-home scam – registration fee + data-entry deposit","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#online-job-work-from-home-scam-registration-fee-data-entry-deposit"},{"@type":"ListItem","position":5,"name":"Instant loan-app harassment Kerala – morphed contacts, Sachet/RBI check","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#instant-loan-app-harassment-kerala-morphed-contacts-sachetrbi-check"},{"@type":"ListItem","position":6,"name":"P2P crypto fraud Kerala – UPI paid, USDT never released / account frozen as mule","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#p2p-crypto-fraud-kerala-upi-paid-usdt-never-released-account-frozen-as-mule"},{"@type":"ListItem","position":7,"name":"Wallet-drain / seed-phrase scam – fake airdrop / support took seed or signed malicious approval","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#wallet-drain-seed-phrase-scam-fake-airdrop-support-took-seed-or-signed-malicious-approval"},{"@type":"ListItem","position":8,"name":"Ransomware / data-encryption extortion – clinic / shop / startup system locked","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#ransomware-data-encryption-extortion-clinic-shop-startup-system-locked"},{"@type":"ListItem","position":9,"name":"Business email compromise (BEC) Kerala – fake vendor / boss mail, invoice account changed","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#business-email-compromise-bec-kerala-fake-vendor-boss-mail-invoice-account-changed"},{"@type":"ListItem","position":10,"name":"Fake IPO / pre-IPO allotment scam – WhatsApp + UPI + \"allotment fee","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#fake-ipo-pre-ipo-allotment-scam-whatsapp-upi-allotment-fee"},{"@type":"ListItem","position":11,"name":"Pig-butchering / romance-cum-investment scam Kerala – long grooming, then trading portal","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#pig-butchering-romance-cum-investment-scam-kerala-long-grooming-then-trading-portal"},{"@type":"ListItem","position":12,"name":"Accused-side defence in investment-case – mule / introducer / \"profit sharer\" arrayed","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#accused-side-defence-in-investment-case-mule-introducer-profit-sharer-arrayed"},{"@type":"ListItem","position":13,"name":"Lien-mark on investment trail – victim request + bank response drafting","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#lien-mark-on-investment-trail-victim-request-bank-response-drafting"},{"@type":"ListItem","position":14,"name":"Quash / discharge in failed-venture vs fraud allegation – genuine loss distinguished","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#quash-discharge-in-failed-venture-vs-fraud-allegation-genuine-loss-distinguished"},{"@type":"ListItem","position":15,"name":"PMLA note in cyber-investment cases – when ED angle arises (general information)","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#pmla-note-in-cyber-investment-cases-when-ed-angle-arises-information-only"},{"@type":"ListItem","position":16,"name":"Fake advisory / \"SEBI-registered\" tip-seller verification path","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#fake-advisory-sebi-registered-tip-seller-verification-path"},{"@type":"ListItem","position":17,"name":"Crypto-exchange grievance + off-ramp freeze drafting (victim)","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#crypto-exchange-grievance-off-ramp-freeze-drafting-victim"},{"@type":"ListItem","position":18,"name":"Loan-app data-deletion / morphed-photo removal request","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#loan-app-data-deletion-morphed-photo-removal-request"},{"@type":"ListItem","position":19,"name":"Ransomware backup + business-continuity record for claim/insurance","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#ransomware-backup-business-continuity-record-for-claiminsurance"},{"@type":"ListItem","position":20,"name":"BEC vendor-verification control note (preventive information)","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#bec-vendor-verification-control-note-preventive-bci-safe-information"},{"@type":"ListItem","position":21,"name":"Task-scam minor / student victim path – consent, custody of device, counselling record","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#task-scam-minor-student-victim-path-consent-custody-of-device-counselling-record"},{"@type":"ListItem","position":22,"name":"Cross-state investment FIR linkage – Kerala victim, outside-India handler","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#cross-state-investment-fir-linkage-kerala-victim-outside-india-handler"},{"@type":"ListItem","position":23,"name":"Settlement / restitution in investment fraud – court-recorded payment","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#settlement-restitution-in-investment-fraud-court-recorded-payment"},{"@type":"ListItem","position":24,"name":"Tax / bank-statement handling after fraud – explaining credits to bank/IT dept","url":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#tax-bank-statement-handling-after-fraud-explaining-credits-to-bankit-dept"}]}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://advaslam.com/"},{"@type":"ListItem","position":2,"name":"Practice","item":"https://advaslam.com/practice/"},{"@type":"ListItem","position":3,"name":"Cyber crime & IT Act matters","item":"https://advaslam.com/practice/cyber-crime/"},{"@type":"ListItem","position":4,"name":"Matters","item":"https://advaslam.com/practice/cyber-crime/matters/"},{"@type":"ListItem","position":5,"name":"Investment, task, crypto, ransomware and BEC fraud","item":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/"}]},{"@type":"FAQPage","@id":"https://advaslam.com/practice/cyber-crime/matters/investment-task-crypto-ransomware-bec/#faq","isPartOf":{"@id":"https://advaslam.com/#website"},"mainEntity":[{"@type":"Question","name":"Paid GST/tax to release?","acceptedAnswer":{"@type":"Answer","text":"That is the second trap – stop and report."}},{"@type":"Question","name":"App on Play Store – genuine?","acceptedAnswer":{"@type":"Answer","text":"Clones exist – verify SEBI registration separately."}},{"@type":"Question","name":"First profit credited – still fraud?","acceptedAnswer":{"@type":"Answer","text":"Yes – early Payout builds trust."}},{"@type":"Question","name":"Agreement signed – bound?","acceptedAnswer":{"@type":"Answer","text":"Fraud vitiates consent – preserve and complain."}},{"@type":"Question","name":"Repay to stop abuse?","acceptedAnswer":{"@type":"Answer","text":"Record first – repayment does not guarantee deletion."}},{"@type":"Question","name":"Exchange says completed?","acceptedAnswer":{"@type":"Answer","text":"Escrow + UPI timing decides – preserve both."}},{"@type":"Question","name":"Seed shared – recoverable?","acceptedAnswer":{"@type":"Answer","text":"On-chain reversal is not available – off-ramp freeze is the practical path."}},{"@type":"Question","name":"Pay ransom?","acceptedAnswer":{"@type":"Answer","text":"Generally avoid without IO/CERT guidance – payment rarely guarantees key and may repeat."}},{"@type":"Question","name":"Employee fault – bank liable?","acceptedAnswer":{"@type":"Answer","text":"Depends on verification failure vs deception – record decides."}},{"@type":"Question","name":"Allotment letter looks real?","acceptedAnswer":{"@type":"Answer","text":"Verify with registrar/RTA directly."}},{"@type":"Question","name":"Relationship genuine?","acceptedAnswer":{"@type":"Answer","text":"Grooming pattern matters – preserve full history, do not delete."}},{"@type":"Question","name":"Return money to close FIR?","acceptedAnswer":{"@type":"Answer","text":"Restitution does not auto-close crime – take advice before paying anyone except through court/IO."}},{"@type":"Question","name":"Phone request enough?","acceptedAnswer":{"@type":"Answer","text":"No – written trail with ack."}},{"@type":"Question","name":"Civil or criminal?","acceptedAnswer":{"@type":"Answer","text":"Both can coexist but criminal needs dishonest intent – fact record decides."}},{"@type":"Question","name":"Cyber refund solves ED?","acceptedAnswer":{"@type":"Answer","text":"Separate tracks – coordinate but do not mix."}},{"@type":"Question","name":"Small fee – complain?","acceptedAnswer":{"@type":"Answer","text":"Yes – pattern builds multi-victim case."}},{"@type":"Question","name":"Exchange outside India?","acceptedAnswer":{"@type":"Answer","text":"IO/MLAT channel needed – timeline longer."}},{"@type":"Question","name":"Paid – data deleted?","acceptedAnswer":{"@type":"Answer","text":"Not assured – pursue deletion in writing."}},{"@type":"Question","name":"Wiped and restored?","acceptedAnswer":{"@type":"Answer","text":"Note it – wiping weakens forensics/claim."}},{"@type":"Question","name":"One control?","acceptedAnswer":{"@type":"Answer","text":"Callback to known number + second approver."}},{"@type":"Question","name":"Hide from record?","acceptedAnswer":{"@type":"Answer","text":"No – clean record helps school/bank leniency requests."}},{"@type":"Question","name":"File everywhere?","acceptedAnswer":{"@type":"Answer","text":"One FIR + linked NCRPs is cleaner than many FIRs."}},{"@type":"Question","name":"Cash settlement?","acceptedAnswer":{"@type":"Answer","text":"Avoid – bank channel + court record only."}},{"@type":"Question","name":"Refund taxable?","acceptedAnswer":{"@type":"Answer","text":"Show as restitution with record – CA to certify."}}]}]} ```