---
title: "Telegram Task Scam and Online Job Fraud: Recovery in Kerala"
description: "Lost money to a Telegram task or job scam? Why Section 66D IT Act and Section 318(4) BNS apply, why chasing deeper levels hurts, and 1930 and bank steps."
url: "https://advaslam.com/writing/telegram-job-task-scam-recovery/"
image: "https://advaslam.com/og/writing/telegram-job-task-scam-recovery.png"
---

[Cyber crime & IT Act matters](https://advaslam.com/practice/cyber-crime/)

# Telegram Task Scam and Online Job Fraud: How It Works and How to Recover Money in Kerala

By [**Adv. K J Muhammed Aslam**](https://advaslam.com/profile/) · Advocate, Ernakulam (Bar Council of Kerala)

Published 6 September 2026

A Telegram or WhatsApp message offering daily income for simple tasks — rate products, like YouTube videos, “prepay to unlock higher commission” — pays small amounts at first, then asks for larger deposits to “complete the set” or “release the balance,” and finally blocks your wallet. This is the **prepaid / rating / online job task scam**, one of the most frequently reported cyber fraud patterns in Kerala in 2024-25, and legally it is not a failed business — it is **cheating by personation using a computer resource** under **[Section 66D IT Act](https://indiacode.gov.in/handle/123456789/496511)** and **[Section 318(4) BNS](https://indiacode.gov.in/handle/123456789/496548)**, with the same **1930/CFCFRMS** hold, **bank-lien** and **Magistrate refund (Sections 497-505 BNSS)** logic as any other UPI fraud. The task narrative is the social engineering; the legal response is the same money-trail response.

## How does the task scam actually operate?

| Stage | What you see | What is legally happening |
| --- | --- | --- |
| **Hook** | Message on Telegram/WhatsApp/Instagram: “Part-time job, earn ₹2,000/day, no investment, train from home” — asks you to join a group with a “receptionist” and a “mentor” | Personation — the “receptionist” is not an HR officer; the brand logos and trade marks are misused — **66D/319** |
| **Trust building** | You complete 2-3 simple tasks (rate a hotel, like a video) and a small commission is **credited** to a wallet or UPI — you withdraw once | Inducement — the small credit is the consideration that induces the later delivery under **Sec 318(4) BNS** |
| **Escalation** | “Prepay ₹10,000 to unlock Level 2; pay ₹47,000 more to complete the set and withdraw — your balance will then double” | Dishonest inducement to deliver property — the core cheating charge; each UPI you send is a separate delivery |
| **Trap** | Balance shows growing in the fake dashboard, but withdrawal is blocked — “pay GST / verification / withdrawal fee / risk fund” | Further cheating under the same sections; later demands under **Sec 308 BNS (extortion)** where threats or reputational harm are added |
| **Silence** | Mentor stops responding; group is cleared; Telegram handle disappears | Layering — your UPI has already been layered through mules; **CFCFRMS** may show the amount split and moved within hours |

A Kerala variant adds **crypto P2P**: “withdraw in USDT to avoid TDS” — the tainted INR is routed to a [crypto P2P](https://advaslam.com/writing/crypto-p2p-account-frozen-fiu-pmla/) hop, making the trail harder but not impossible.

## Why does paying “one more level” make your case weaker, not stronger?

Two reasons:

1.  **Each payment is a new delivery procured by cheating.** It does not buy release of the earlier delivery — the earlier delivery is already the offence. The scammer’s wallet balance screen is not a bank balance and has no legal significance; it is an image generated to induce the next delivery.
2.  **It can be used to argue you were a witting participant in layering.** A person who sends successive amounts despite a growing withdrawal block is harder to distinguish, on paper, from a **money mule** who is knowingly passing funds for commission. Stopping payments and preserving the record is therefore legally protective.

## Which sections apply — and do you need an FIR or is NCRP enough?

NCRP/1930 is **not** an FIR — it is the hold/routing step. An **FIR under Section 173 BNSS** (old 154 CrPC) is what commences investigation and grounds later holds and refund orders:

| Provision | When it is common in task scams | Cognizable? |
| --- | --- | --- |
| **BNS Sec 318(4)** (cheating inducing delivery) | Every prepaid task deposit you sent | Yes (up to 7 years) |
| **BNS Sec 319** (cheating by personation) | Fake HR / brand impersonation | Yes |
| **IT Act Sec 66D** (personation using computer resource) | Fake job/brand via Telegram/website | Yes (Inspector+) |
| **IT Act Sec 66C** (identity theft) | OTP / credential misuse where account taken over | Yes |
| **BNS Sec 308 / 351** | Threats to release data or demand further payment | Yes for s. 308; s. 351 is non-cognizable |

File a **written, signed complaint at the district Cyber Police Station** citing these sections, with the full payment list below. Request **FIR under Sec 173 BNSS**; ask for **Section 94 BNSS** production to the receiving banks and platforms, and — where your own account is now frozen as a mule layer by an earlier victim’s 1930 — shift to the [bank-freeze guide](https://advaslam.com/writing/bank-account-frozen-cyber-cell-kerala/) and the [35-vs-94 guide](https://advaslam.com/writing/cyber-cell-notice-section-35-vs-94-bnss/) simultaneously.

## How does recovery actually work — the same money trail as UPI fraud?

Recovery follows the same **UPI fraud recovery escalator** already detailed step-by-step in the [UPI fraud guide](https://advaslam.com/writing/upi-fraud-complaint-recovery/):

1.  **1930/NCRP immediately** — 1930 call + [cybercrime.gov.in](https://cybercrime.gov.in) filing with every UTR/RRN, beneficiary UPI ID, wallet screenshot and amount; CFCFRMS attempts hop-by-hop holds while the money is still inside the banking system.
2.  **Write to your bank the same day** — for any leg that was genuinely unauthorised, cite the RBI circular on limiting customer liability in unauthorised electronic banking transactions (06 Jul 2017); for the payments you were induced to authorise (the usual task-scam pattern), the operative remedy is a recall request and the CFCFRMS hold, not a liability reversal. Request recall and preservation of the remittance trail. For task scams the victim’s bank is the *remitting* side; the lien is sought on the **receiving mules**, not your own account.
3.  **FIR + investigation** — the cyber cell traces the INR hops; Section 94 BNSS to banks/payment intermediaries, Section 106 BNSS lien on amounts found, Section 193 BNSS progress intimation to you.
4.  **Magistrate refund** — victim application for release of **lien-marked amounts** traceable to your UTRs under **Sections 497-505 BNSS** before the jurisdictional Magistrate of the receiving account’s bank / the FIR — not the bank-freeze writ track, which fits the opposite posture (your account frozen as recipient).

**Why timing dominates:** In task-scam matters, the INR is often split across **several mule accounts within hours** and then withdrawn as cash or routed via [P2P USDT](https://advaslam.com/writing/crypto-p2p-account-frozen-fiu-pmla/). A 1930 call in minute 30 seeks holds on real balances; a complaint on day 10 seeks recovery of what is left.

## What bundle should you prepare — the file that moves first?

Bring one PDF that every forum asks for:

-   Every **UPI transaction with UTR/RRN**, beneficiary UPI ID / account, amount and timestamp — highlight the UTRs in your bank statement.
-   The **task-group screenshots** with **URLs** and timestamps (preserve original device for [Section 63 BSA hash](https://advaslam.com/writing/electronic-evidence-bsa-section-63-certificate-guide/)).
-   The **wallet / dashboard balance screen** showing blocked withdrawal — label it as a platform-side image, not a bank balance.
-   Your **1930 / NCRP numbers** and your bank’s written acknowledgement of the recall request.
-   A one-page **chronology** — first message date, each payment date, the date withdrawal was blocked, and the date of complaint.

## Primary sources

-   [IT Act, 2000 — Sections 66C, 66D, 66, 78](https://indiacode.gov.in/handle/123456789/496511); [BNS, 2023 — Sections 308, 318, 319, 351, 78](https://indiacode.gov.in/handle/123456789/496548)
-   [BNSS, 2023 — Sections 35, 94, 106, 173, 497-505](https://indiacode.gov.in/handle/123456789/496550); [BSA — Section 63](https://indiacode.gov.in/handle/123456789/496549)
-   I4C / NCRP at [cybercrime.gov.in](https://cybercrime.gov.in) and 1930; [RBI circular 06 Jul 2017 on limited liability for unauthorised electronic banking transactions](https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11040)
-   Kerala State Police Cyberdom / district Cyber Cells (2024-25 task-scam advisories)

FAQ

## Common questions

**Is a Telegram task scam a cyber crime and which sections apply?**

Yes. Prepaid tasks, rating tasks and online job offers that induce payment for commission are typically Section 66D IT Act (cheating by personation using computer resource) and Section 318(4) BNS (cheating inducing delivery of property) — both cognizable — together with Section 66C IT Act where OTP or account access is abused, and Section 319 BNS (cheating by personation). The same sections that govern UPI fraud apply, and the 1930/CFCFRMS hold route is the same first step.

**Will I get my money back if I paid into a Telegram task scheme?**

Recovery depends on whether amounts are still in the banking chain. An immediate 1930 call or NCRP filing at cybercrime.gov.in can place holds/liens on amounts that have not yet been withdrawn or layered beyond reach — the same CFCFRMS mechanism as UPI fraud. Once funds are layered through multiple mule accounts and withdrawn as cash or crypto, recovery shifts to the criminal investigation and a Magistrate application under Sections 497-505 BNSS for lien-marked amounts — the UPI fraud recovery escalator.

**The scammer says paying one more level will release all previous money. Should I pay?**

No. The 'pay to release' demand is the defining escalation mechanic of the fraud and paying deeper levels increases loss and can create a separate evidentiary issue. Preserve the task-app screenshots, wallet balances, transaction UTRs and UPI IDs, stop payments, and report immediately via 1930/NCRP and a signed written complaint at the district Cyber Police Station.

**Can the scammers be traced if the Telegram account has no real number?**

Tracing runs via the money trail and device trail, not the Telegram handle alone. CFCFRMS follows the INR hops even from the second or third layer, and the investigation can issue Section 94 BNSS production orders to banks, payment intermediaries and, where legally available, to the platform under the IT Rules 2021. Success is not guaranteed — especially where funds move to offshore VDA wallets — but the money trail is better evidence than the handle.

**Should I approach the High Court writ route as with a bank freeze?**

Generally no at the start. The writ/lien track fits where your own account was frozen as a suspected recipient (Section 106 BNSS). Where you are the victim whose money was siphoned into task-scam mules, the route is: 1930/NCRP immediate hold, FIR under 173 BNSS, and victim refund application under 497-505 BNSS before the jurisdictional Magistrate where the holds sit — the UPI fraud recovery guide maps that sequence.

**A note on this article.** It is general legal information, not legal advice. The law may have changed since the date shown; before acting on anything here, take advice on your specific situation from an advocate of your choice.

Keep reading

Cyber crime & IT Act matters

### Cyber Fraud Defence in Kerala: Freeze to Recovery Hub

Answer cyber fraud in Kerala step by step: freeze unfreezing, UPI and task-scam recovery, P2P taint, notices, escalation, evidence, ED and CIBIL sequels.

5 Oct 2026

[Cyber Fraud Defence in Kerala: Freeze to Recovery Hub](https://advaslam.com/writing/cyber-fraud-defence-kerala/)

Cyber crime & IT Act matters

### Cyber Complaint Filed on 1930 or NCRP but No Action? How to Escalate in Kerala

1930 or cybercrime.gov.in complaint, no FIR or update? Escalate via SP/CP written complaint, CPGRAMS and Magistrate direction under Section 175(3) BNSS.

5 Sept 2026

[Cyber Complaint Filed on 1930 or NCRP but No Action? How to Escalate in Kerala](https://advaslam.com/writing/cyber-complaint-filed-no-action-escalation/)

Contact

[WhatsApp](https://wa.me/919497240215?text=Hello%2C%20I%20found%20advaslam.com%20and%20would%20like%20to%20discuss%20a%20matter.) [contact@advaslam.com](mailto:contact@advaslam.com) [+91 94972 40215](tel:+919497240215)

3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction, Ernakulam, Kerala 682031 · Monday – Saturday, 10:00 – 18:30 (by appointment)

```json
{"@context":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://advaslam.com/#website","url":"https://advaslam.com","name":"Adv. K J Muhammed Aslam","alternateName":"advaslam.com","publisher":{"@id":"https://advaslam.com/#person"},"inLanguage":"en-IN"},{"@type":"Person","@id":"https://advaslam.com/#person","name":"K J Muhammed Aslam","alternateName":["Adv. K J Muhammed Aslam","Advocate K J Muhammed Aslam","Muhammed Aslam K J","Adv. Aslam"],"honorificPrefix":"Adv.","jobTitle":"Advocate","description":"Advocate enrolled with the Bar Council of Kerala, practising from High Court Junction, Ernakulam: cyber and technology law, data protection (DPDP), business, banking and IPR, and litigation before the High Court of Kerala and the courts at Ernakulam.","url":"https://advaslam.com/profile/","image":"https://advaslam.com/og.png","telephone":"+919497240215","email":"contact@advaslam.com","address":{"@type":"PostalAddress","streetAddress":"3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction","addressLocality":"Ernakulam","addressRegion":"Kerala","postalCode":"682031","addressCountry":"IN"},"alumniOf":{"@type":"CollegeOrUniversity","name":"Bharata Mata School of Legal Studies"},"memberOf":[{"@type":"Organization","name":"Bar Council of Kerala","url":"https://barcouncilkerala.org/lawyer-registry-list"},{"@type":"Organization","name":"Kerala High Court Advocates' Association","url":"https://khcaa.com/"}],"identifier":[{"@type":"PropertyValue","propertyID":"Bar Council of Kerala Enrolment No.","value":"K/001823/2026"},{"@type":"PropertyValue","propertyID":"KHCAA Membership No.","value":"OAJ 358"}],"knowsAbout":["Information Technology Act 2000","Cyber crime law","Technology law and technology contracts","Digital Personal Data Protection Act 2023","DPDP compliance","Data protection and privacy law","Business and commercial law","Contract drafting and negotiation","Banking and finance law","Negotiable Instruments Act cheque dishonour","SARFAESI Act","Intellectual property law","Copyright and trademark law","Patent infringement","GST and income-tax law","Blockchain and cryptocurrency technology","Web3 wallets and NFTs","Drone regulation and DigitalSky framework","Writ petitions under Article 226","Criminal law","Civil and consumer litigation","Family and succession law","Service and labour law","Legal drafting","Mediation and dispute resolution"],"knowsLanguage":["en","ml"],"workLocation":{"@id":"https://advaslam.com/#practice"},"hasCredential":[{"@type":"EducationalOccupationalCredential","credentialCategory":"Enrolment as an advocate","identifier":"K/001823/2026","recognizedBy":{"@type":"Organization","name":"Bar Council of Kerala"},"description":"Enrolled as an advocate with the Bar Council of Kerala (K/001823/2026), 2026"},{"@type":"EducationalOccupationalCredential","credentialCategory":"degree","educationalLevel":"Bachelor","recognizedBy":{"@type":"CollegeOrUniversity","name":"Bharata Mata School of Legal Studies"},"description":"BBA LLB (Hons.), Bharata Mata School of Legal Studies (2025)"},{"@type":"EducationalOccupationalCredential","credentialCategory":"Remote Pilot Certificate","recognizedBy":{"@type":"Organization","name":"Directorate General of Civil Aviation, India"},"description":"DGCA Remote Pilot Certificate, issued 2022"}],"subjectOf":[{"@type":"CreativeWork","name":"Govind Babu v. State of Kerala (Crl.M.C. No. 5640 of 2026, 2026:KER:69496)","url":"https://indiankanoon.org/doc/151180872/","datePublished":"2026-09-10","publisher":{"@type":"Organization","name":"High Court of Kerala"}},{"@type":"CreativeWork","name":"Viji Sagar v. State of Kerala (Crl.M.C. No. 1603 of 2026, 2026:KER:20803)","url":"https://indiankanoon.org/doc/193042273/","datePublished":"2026-03-09","publisher":{"@type":"Organization","name":"High Court of Kerala"}},{"@type":"CreativeWork","name":"Anjana v. Manoharan A.P. (C.R.P. No. 442 of 2025, 2026:KER:10054)","url":"https://indiankanoon.org/doc/68585852/","datePublished":"2026-02-05","publisher":{"@type":"Organization","name":"High Court of Kerala"}}],"sameAs":["https://www.linkedin.com/in/azlubro","https://portal.khcaa.com/advocate?id=10480","https://lexosys.com"]},{"@type":"LegalService","@id":"https://advaslam.com/#practice","name":"Adv. K J Muhammed Aslam — Advocate, Ernakulam","url":"https://advaslam.com","image":"https://advaslam.com/og.png","telephone":"+919497240215","email":"contact@advaslam.com","address":{"@type":"PostalAddress","streetAddress":"3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction","addressLocality":"Ernakulam","addressRegion":"Kerala","postalCode":"682031","addressCountry":"IN"},"geo":{"@type":"GeoCoordinates","latitude":9.9889,"longitude":76.2748},"hasMap":"https://www.google.com/maps/search/?api=1&query=Lalan+Towers+High+Court+Junction+Ernakulam","areaServed":[{"@type":"City","name":"Ernakulam"},{"@type":"City","name":"Kochi"},{"@type":"State","name":"Kerala"},{"@type":"Country","name":"India"}],"openingHoursSpecification":{"@type":"OpeningHoursSpecification","dayOfWeek":["Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"opens":"10:00","closes":"18:30"},"founder":{"@id":"https://advaslam.com/#person"},"knowsAbout":["Cyber crime and IT Act matters","Data protection and DPDP Act compliance","Business, banking, intellectual property and tax","Legal drafting","Criminal law: bail, quash and appeals","Writ petitions before the High Court of Kerala","Civil, property and consumer matters","Family and succession matters","Service and labour matters"]},{"@type":"BlogPosting","@id":"https://advaslam.com/writing/telegram-job-task-scam-recovery/#article","isPartOf":{"@id":"https://advaslam.com/#website"},"headline":"Telegram Task Scam and Online Job Fraud: How It Works and How to Recover Money in Kerala","description":"Lost money to a Telegram task or job scam? Why Section 66D IT Act and Section 318(4) BNS apply, why chasing deeper levels hurts, and 1930 and bank steps.","url":"https://advaslam.com/writing/telegram-job-task-scam-recovery/","mainEntityOfPage":"https://advaslam.com/writing/telegram-job-task-scam-recovery/","datePublished":"2026-09-06T00:00:00.000Z","dateModified":"2026-09-06T00:00:00.000Z","keywords":"Telegram task scam recovery Kerala, online job fraud money lost India, prepaid task scam legal remedy, YouTube rating task scam India, Telegram scam Section 66D 318 BNS","inLanguage":"en-IN","author":{"@id":"https://advaslam.com/#person"},"publisher":{"@id":"https://advaslam.com/#person"},"image":"https://advaslam.com/og/writing/telegram-job-task-scam-recovery.png","about":{"@type":"Service","@id":"https://advaslam.com/practice/cyber-crime/#service","name":"Cyber crime & IT Act matters","url":"https://advaslam.com/practice/cyber-crime/","provider":{"@id":"https://advaslam.com/#practice"}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://advaslam.com/"},{"@type":"ListItem","position":2,"name":"Articles","item":"https://advaslam.com/writing/"},{"@type":"ListItem","position":3,"name":"Telegram Task Scam and Online Job Fraud: How It Works and How to Recover Money in Kerala","item":"https://advaslam.com/writing/telegram-job-task-scam-recovery/"}]},{"@type":"FAQPage","mainEntity":[{"@type":"Question","name":"Is a Telegram task scam a cyber crime and which sections apply?","acceptedAnswer":{"@type":"Answer","text":"Yes. Prepaid tasks, rating tasks and online job offers that induce payment for commission are typically Section 66D IT Act (cheating by personation using computer resource) and Section 318(4) BNS (cheating inducing delivery of property) — both cognizable — together with Section 66C IT Act where OTP or account access is abused, and Section 319 BNS (cheating by personation). The same sections that govern UPI fraud apply, and the 1930/CFCFRMS hold route is the same first step."}},{"@type":"Question","name":"Will I get my money back if I paid into a Telegram task scheme?","acceptedAnswer":{"@type":"Answer","text":"Recovery depends on whether amounts are still in the banking chain. An immediate 1930 call or NCRP filing at cybercrime.gov.in can place holds/liens on amounts that have not yet been withdrawn or layered beyond reach — the same CFCFRMS mechanism as UPI fraud. Once funds are layered through multiple mule accounts and withdrawn as cash or crypto, recovery shifts to the criminal investigation and a Magistrate application under Sections 497-505 BNSS for lien-marked amounts — the UPI fraud recovery escalator."}},{"@type":"Question","name":"The scammer says paying one more level will release all previous money. Should I pay?","acceptedAnswer":{"@type":"Answer","text":"No. The 'pay to release' demand is the defining escalation mechanic of the fraud and paying deeper levels increases loss and can create a separate evidentiary issue. Preserve the task-app screenshots, wallet balances, transaction UTRs and UPI IDs, stop payments, and report immediately via 1930/NCRP and a signed written complaint at the district Cyber Police Station."}},{"@type":"Question","name":"Can the scammers be traced if the Telegram account has no real number?","acceptedAnswer":{"@type":"Answer","text":"Tracing runs via the money trail and device trail, not the Telegram handle alone. CFCFRMS follows the INR hops even from the second or third layer, and the investigation can issue Section 94 BNSS production orders to banks, payment intermediaries and, where legally available, to the platform under the IT Rules 2021. Success is not guaranteed — especially where funds move to offshore VDA wallets — but the money trail is better evidence than the handle."}},{"@type":"Question","name":"Should I approach the High Court writ route as with a bank freeze?","acceptedAnswer":{"@type":"Answer","text":"Generally no at the start. The writ/lien track fits where your own account was frozen as a suspected recipient (Section 106 BNSS). Where you are the victim whose money was siphoned into task-scam mules, the route is: 1930/NCRP immediate hold, FIR under 173 BNSS, and victim refund application under 497-505 BNSS before the jurisdictional Magistrate where the holds sit — the UPI fraud recovery guide maps that sequence."}}]}]}
```