Report a scam, fraud or malicious activity

Seen a fake refund request, a phishing link, a threatening call or a server attacking yours? Tell us the UPI ID, phone number, link, IP address or email behind it. We review every report, and the next person who checks the same thing in our free tools sees a warning.

— reports received— verified— in the last 30 days

Check before you report

Already in our records? Look it up first. It takes a second and you will see what others reported.

Your report

Copy it exactly as you received it.
At least 20 characters. Do not include your own passwords, PINs or card numbers.
Rate-limited to a few reports per network per 10 minutes.

How reports are used

Every report is read by a person on the Arventiq Labs security team. We do not publish names of reporters, and we do not publish the text of a report until we have confirmed it matches a known fraud pattern. Even then, our tools say “N people reported this”, not “this person is a criminal”: a UPI ID can be a mule account opened in a victim’s name, and a phone number can be spoofed.

What we do with confirmed reports: warn the next person who checks the same UPI ID, number, link, IP or email in our tools; share clusters with the banks and platforms involved; and, where there is a clear institutional target, include them in our advisories.

Frequently asked

Is this the same as filing a police complaint?
No. For money lost, call 1930 or use cybercrime.gov.in; that is the channel that can freeze a transfer. This page helps warn others and gives us patterns to investigate.
Can I report something that happened to a relative?
Yes. Describe it as best you can and mention that you are reporting on their behalf.
What if the number or ID belongs to an innocent person?
That is exactly why reports are reviewed before they show as verified, and why unverified reports are labelled as such. If you believe your own ID or number has been reported wrongly, contact us with proof of ownership and we will look.
Do you store my IP address?
We store a one-way hash of it for 24 hours to stop duplicate and automated submissions, then it is gone.

Built and maintained by the Arventiq Labs team in Bengaluru. Reports are indications gathered from the public, not verdicts. Something wrong? Tell us.