Pahalgam one year later: How cyber fraudsters ‘weaponised’ public fear to target victims in digital arrest scams
In an attack on tourists by armed terrorists near Pahalgam in Jammu and Kashmir, 26 people were killed on April 22, 2025. In a measured response, India launched Operation Sindoor on May 7, striking as many as nine targets in Pakistan and Pakistan-Occupied Kashmir.
In October last year, a 70-year-old Pune businessman lost Rs 1.44 crore in a digital arrest scam. Fraudsters posing as the ‘NIA chief’ threatened to arrest him for links to ‘Pahalgam terrorists’.
In November last year, a 68-year-old lawyer from Bhopal allegedly died by suicide after cyber fraudsters threatened him with action, claiming his accounts had been found to be linked to ‘Pahalgam terrorists’. In a handwritten note, he wrote that he could not tolerate being labelled a traitor.
These were not isolated incidents. In the months following the Pahalgam terror attack, investigators noticed that cyber fraudsters were ‘weaponising’ the public fear in the attack aftermath as they told those they targeted in digital arrest scams that they have been found to be linked to the ‘Pahalgam terrorists’. Dozens of such cases have been reported across India, including Pune.
In an attack on tourists by armed terrorists near Pahalgam in Jammu and Kashmir, 26 people were killed on April 22, 2025. In a measured response, India launched Operation Sindoor on May 7, striking as many as nine targets in Pakistan and Pakistan-Occupied Kashmir.
“Cyber fraudsters always exploit fear and the effects of certain developments on the minds of people. Even today, fraudsters continue to use pretexts of drugs found in parcels, bank accounts linked to well-known money laundering cases. Even prior to the Pahalgam attack, cyber fraudsters have used the pretext of ‘the victim’s links to terror outfits’. But after the Pahalgam attack, cyber fraudsters exploited the public trauma as a psychological tool to manipulate victims. By invoking threats of arrest, national security violations and alleged links to terror outfits, they create an atmosphere of panic and urgency, leaving little room for victims to pause or verify the claims. The overall script of the digital arrest scam remains the same,” said a cyber investigator from Pune city police.
In the case of the 70-year-old businessman defrauded of Rs 1.44 crore, a fraudster wearing a police uniform told the victim he was linked to the Pahalgam terrorists. Then, a fraudster posing as the ‘NIA chief’ spoke to the complainant over video call and assured that he would remove the complainant’s name from their list of suspects by giving him a ‘Non Involvement Certificate (NIC)’. The fraudster asked the complainant to transfer all his savings and deposits to ‘government accounts’, which were in fact mule accounts.
“Across these scams, fraudsters construct convincing and credible-sounding allegations to trap victims. They claim that a bank account or phone number registered in the victim’s name has been flagged in serious criminal activity — in this case terror attack. Having caused panic, the callers then position themselves as the only people who can save the victims, offering them a chance to clear their name. It is at this point that they demand money under the pretext of verification or legal processing, effectively turning fear into a tool for extortion. Fraudsters do not just impersonate authority, they also manufacture an emotional environment,” said another officer.
In a case registered in November last year, posing as the then NIA chief Sadanand Date and threatening arrest for ‘sharing photos of weapons used in Pahalgam terror attack’, a 57-year-old woman from Pune was defrauded of Rs 51 lakh by cyber fraudsters in a digital arrest scam. The victim initially received a video call from a fraudster posing as the ‘ATS chief’. As the complainant denied having shared any such photos, the caller told her that a phone number registered in her name was used to do so. This caller then sent the complainant fake documents titled ‘confidentiality agreement, arrest warrant, asset seizure order, magistrate order’. He then told her that the ‘NIA chief’ will interrogate her. The fraudster posing as the ‘NIA chief’ extorted money from her on the pretext of clearing her name by way of ‘fund legalisation’.
Fraudsters used the ‘Pahalgam terror link’ pretext to defraud a 74-year-old retired government employee of Rs 17 lakh in July last year and an 85-year-old of Rs 97 lakh earlier this year.
Sushant Kulkarni is a Special Correspondent with The Indian Express in Pune with 12+ years of experience covering issues related to Crime, Defence, Internal Security and Courts. He has been associated with the Indian Express since July 2010.
Sushant has extensively reported on law and order issues of Pune and surrounding area, Cyber crime, narcotics trade and terrorism. His coverage in the Defence beat includes operational aspects of the three services, the defence research and development and issues related to key defence establishments. He has covered several sensitive cases in the courts at Pune.
Sushant is an avid photographer, plays harmonica and loves cooking. ... Read More