Supreme Court of India building in New Delhi

India’s Supreme Court Tells WhatsApp to Stop ‘Digital Arrest’ Scams — and Orders Banks to Pay Victims Back

November 11, 2026 Faizan Altaf

India’s Supreme Court has told WhatsApp to explain how it will stop “digital arrest” scams — the online fraud in which criminals pretend to be police officers and frighten people into sending them money. In the same order, the court told banks they must pay victims back in full when their own carelessness allowed the fraud to happen.

It is the first time the court has asked the messaging platforms directly for a plan. Until now, it had given its directions to the government, which then passed them on. This time, WhatsApp and other apps must answer the court themselves — and send their proposals to India’s cybercrime agency, the Indian Cyber Crime Coordination Centre (I4C), at the same time.

The Chief Justice of India, Surya Kant, called these scams “the biggest financial fraud on the economy of the country.” The case will be heard again on November 23, 2026.

What is a digital arrest scam?

A digital arrest scam starts with a call or a message, usually on WhatsApp. The caller claims to be a police officer, a customs official, or an officer from another government agency. Often they appear on a video call, wearing what looks like a uniform, sitting in what looks like an office.

The victim is told that their name has come up in a serious crime — money laundering, drug smuggling, or a fake parcel containing illegal goods. The caller says the victim is now under “digital arrest,” which means they must stay on the call, must not contact anyone, and must transfer money to “prove” their innocence or pay a fine.

There is no such thing as a digital arrest. No real police force arrests people over a video call, and no real officer asks for money to be transferred to a personal account. But the scam works because it creates panic. Victims are often older people, or people living alone, and the fraudsters keep them on the phone for hours until the money is sent.

What the court ordered

The order was passed on October 29, 2026, by a bench headed by Chief Justice Surya Kant, along with Justices Joymalya Bagchi and V Mohana. The court uploaded the order on its website on November 7, and it was widely reported on November 10 and 11. The case is a suo motu case — one the court started on its own — called In Re: Victims of Digital Arrest Related to Forged Documents.

The order has three main parts: one for the messaging apps, one for the banks, and one for the police.

1. WhatsApp and other apps must submit a plan

The court directed WhatsApp and other intermediaries to tell it what steps they propose to take to prevent digital arrest scams and related cybercrimes. The exact words of the order were:

“WhatsApp LLC (A Meta Company) and other concerned intermediaries are also directed to apprise this Court of the measures they propose to undertake to prevent the digital arrest scams and related cybercrimes. They shall also simultaneously submit their proposals to the I4C.”

In plain words: WhatsApp must write down its anti-scam plan, give it to the court, and give a copy to the I4C at the same time.

This matters because, until now, the burden of stopping these scams has mostly fallen on banks and the police. The scams start on messaging apps, but the apps themselves have faced little direct pressure from the court. That has now changed. The big questions are what WhatsApp will propose, whether its plan goes further than simply banning accounts, and how the court or the I4C will check whether the plan actually works.

2. Banks must compensate victims

The court repeated an instruction it first gave in late October: the Reserve Bank of India (RBI), India’s central bank, must make rules that force banks to pay victims back when a fraud happened because the bank failed to do its job properly.

The court’s words were clear.

The RBI’s rules “must mandate and incorporate suitable provisions that require financial institutions to indemnify victims of digital arrest scams and other cyber frauds and pay suitable compensation not less than the amount lost by the customer, where it is established that the fraud or crime occurred due to the failure on the part of the financial institution to exercise due diligence in preventing or reporting the act/incident.”

In simple terms: if a bank could have stopped the fraud but did not — for example, by ignoring a clearly suspicious transaction — the bank must pay the victim back at least the full amount lost. During the hearing, Justice Bagchi said: “We will put up a strict liability on the financial institutions.”

The court also listed safeguards every bank should follow:

Hold suspicious transactions: Temporarily stop any transaction that does not match the account holder’s normal pattern.
Alert the police: Automatically report such transactions to the nearest police station.
Verify: Physically check the reported transactions to confirm they are genuine.

The RBI has also been told to give the court a list of all authorised financial institutions at the next hearing, so the court can make sure its directions reach every bank.

3. Police must report on every case

The court directed law enforcement agencies in all states and union territories to report the current status of every FIR registered in digital arrest cases, and how the investigations are going. They must also suggest better ways to prevent, detect and prosecute these crimes. The police chiefs of every state — the Directors General of Police — must make sure this happens and share the information with the I4C.

The numbers behind the scam

The scale of the problem is large, even though the official figures show some progress.

9,400 accounts banned: WhatsApp banned about 9,400 accounts linked to digital arrest scams and impersonation of law enforcement agencies over 12 weeks from January 2026, according to a status report filed by the Ministry of Home Affairs in April. The government had flagged around 3,800 accounts for WhatsApp to review under Section 79(3)(b) of the IT Act — but only 17 of those were actually linked to digital arrests. WhatsApp said it used each government flag as a starting point to find related accounts, using tools including logo detection and a system based on a large language model.
59,000 accounts blocked in 2024: In 2024, the government blocked more than 59,000 WhatsApp accounts and 1,700 Skype IDs linked to digital arrest scams.
Cybercrime down, losses still huge: The court noted that cybercrime cases have fallen by about 50 per cent. Even so, victims have still lost around Rs 800 crore so far this year, according to reports of the hearing.
Rs 1,000 and above: The RBI’s draft rules propose temporary holds of up to 60 days on suspected “mule accounts” — accounts used to receive and move stolen money — and on flagged transactions of Rs 1,000 or more.

New banking rules are coming by December 31

One of the most important dates in the order is December 31, 2026. The RBI plans to notify its Know Your Customer (KYC) Amendment Directions, 2026 by November 30, and bring them into force by December 31. The court will examine these rules before issuing its own directions.

The RBI’s September draft had proposed April 1, 2027 as the start date — so the new timeline is much faster. The rules would require banks to place temporary holds on suspected mule accounts and on flagged transactions, giving investigators time to act before the stolen money disappears.

The court is also looking at who should pay when a victim loses money. In August, it asked an inter-departmental committee to examine a “shared liability” framework — a system in which the cost of compensating victims could be shared between banks, platforms and others, rather than falling on one party alone. Whether that framework will cover the messaging platforms as well as the banks is still an open question.

WhatsApp must also link accounts to SIM cards

There is another change coming that affects every WhatsApp user in India. The Department of Telecommunications (DoT) has told WhatsApp, Telegram, Signal and other messaging apps that each account must be linked to the SIM card used to register it. The deadline is December 2026, after the DoT extended it, and the rules are reportedly set to take effect on January 1, 2027. WhatsApp has said it is developing the feature.

The apps must also log out web users at least every six hours. The DoT first issued this direction in November 2025. The idea is simple: if a scammer is using a stolen or fake account, linking the account to a real SIM card makes it harder to hide.

In August, the court also asked the Ministry of Electronics and Information Technology, the DoT and the I4C to study time limits on audio and video calls — another way to break the long, hours-long calls that scammers use to keep victims under pressure. The government has told the court it is developing software to flag accounts that pretend to be government agencies.

The court will also consider suggestions from two senior advisers: amicus curiae N S Nappinai, who filed a note on October 14, and Attorney General R Venkataramani, who filed one on October 28.

Why this ruling matters beyond India

This case is about India, but its lessons apply everywhere — including Pakistan, where WhatsApp is just as widely used and where similar impersonation scams target ordinary people every day.

First, it shifts the responsibility. For years, the main advice to victims has been “be careful.” This ruling says the companies whose platforms the scammers use, and the banks whose accounts move the stolen money, must also take responsibility — and pay up when they fail.

Second, it puts a price on inaction. If banks must compensate victims when their checks fail, they have a direct financial reason to improve those checks — to flag unusual transactions faster, and to act before the money is gone.

How to protect yourself from a digital arrest scam

The court can order new rules, but the best protection is still knowing the warning signs. Here is what to remember:

No police officer will ever arrest you on a video call. Real arrests happen in person, with a warrant. “Digital arrest” is not a real legal process.
Never transfer money because a caller tells you to. No government agency asks for fines, bail or “verification payments” through a bank transfer or a payment app.
Hang up and call the real number. If someone claims to be from the police, a bank or a government office, end the call and phone the official number yourself. Do not use a number the caller gives you.
Do not stay on the call. Scammers keep victims on the phone for hours so they cannot think or ask for help. If a caller says you must not hang up or contact anyone, that is itself proof it is a scam.
Tell someone immediately. Call a family member or a friend and describe what happened. Scammers rely on secrecy and shame.
Report it. In India, cybercrime can be reported on the National Cyber Crime Reporting Portal or by calling 1930. In Pakistan, the FIA’s Cybercrime Wing takes such complaints. Reporting quickly increases the chance of freezing the stolen money.

What happens next

The next hearing is on November 23, 2026. By then, the court expects several things: the RBI’s list of authorised financial institutions, the police reports from every state, and — most importantly — WhatsApp’s own plan for stopping these scams.

The RBI’s new KYC rules are due to be notified by November 30 and in force by December 31. The SIM-binding rules for messaging apps are expected to take effect on January 1, 2027.

The real test will come after that. A plan on paper is not the same as fewer victims. The court’s order is strong, and the compensation rule gives banks a reason to act. But whether WhatsApp’s proposals go beyond account bans, and whether the shared liability framework spreads the cost to the platforms where the scams begin, will only become clear in the months ahead.

Frequently asked questions

What is a digital arrest scam?

It is a fraud in which criminals pose as police officers or government officials, usually on a video call, and tell the victim they are under “digital arrest” for a fake crime. They pressure the victim into transferring money. There is no such thing as a digital arrest in real law.

What did India’s Supreme Court order WhatsApp to do?

WhatsApp and other messaging apps must tell the court what measures they propose to take to prevent digital arrest scams, and submit the same proposals to the Indian Cyber Crime Coordination Centre (I4C). It is the first time the court has asked the platforms directly.

Will banks have to pay victims back?

Yes — when the fraud happened because the bank failed to exercise due diligence. The court directed that the RBI’s rules must require banks to indemnify victims and pay compensation of not less than the amount lost in such cases.

When do the new rules take effect?

The RBI plans to notify its KYC Amendment Directions, 2026 by November 30, 2026 and bring them into force by December 31, 2026. The SIM-binding rules for messaging apps are reportedly set to take effect on January 1, 2027. The case will next be heard on November 23, 2026.

How many WhatsApp accounts have been banned over these scams?

WhatsApp banned about 9,400 accounts linked to digital arrest scams over 12 weeks from January 2026. In 2024, the government blocked more than 59,000 WhatsApp accounts and 1,700 Skype IDs linked to the same scams.

What should I do if I get a digital arrest call?

Hang up immediately, do not transfer any money, and tell a family member. Then report it to your country’s cybercrime authority — in India, the National Cyber Crime Reporting Portal or helpline 1930; in Pakistan, the FIA Cybercrime Wing.

Conclusion

India’s Supreme Court has drawn a clear line in the fight against digital arrest scams. WhatsApp must now answer the court directly with a plan to stop the fraud on its own platform. Banks must pay victims back when their own failures let the crime happen. And the police must report on every case, in every state.

The numbers show why the court acted: even with cybercrime cases down by half, victims have still lost around Rs 800 crore this year alone. New banking rules arrive by December 31, SIM-binding for messaging apps follows on January 1, and the next hearing is on November 23. The orders are strong — now the test is whether they turn into fewer victims and faster refunds.

Sources

This article is for general information and education only. It is not legal or financial advice.

Findivoza