Impersonation scams occur when fraudsters pose as trusted institutions — banks, government agencies, police officers, or known contacts — to trick victims into transferring money or revealing personal data. These scams arrive via phone calls, SMS, email, or social media. Knowing how they work and recognising the warning signs can prevent serious financial and identity harm.
What Is an Impersonation Scam?
An impersonation scam is a form of social engineering fraud where criminals assume false identities to deceive their targets. The fraudster may claim to be a bank representative reporting suspicious activity, a government official demanding unpaid dues, a police officer investigating fraud, a friend or family member in distress, or a company like Amazon, Google, or a utility provider.
The scam typically creates urgency — “your account is at risk”, “you owe tax penalties”, “your friend is in hospital” — to override your critical thinking and push you to act immediately without verifying the source.
What Are the Main Types of Impersonation Scams?
Bank Impersonation Scam
The victim receives a call from someone claiming to be a bank representative about “suspicious transactions” on their account. If the victim says they didn’t make the transaction, the call is “transferred to a police officer” — actually another fraudster — who pressures the victim into sharing account details or OTPs to “resolve the issue.” This is one of the most common impersonation fraud methods in India. See how it connects to OTP fraud.
Government Official Impersonation
Fraudsters impersonate officials from the Income Tax Department, Customs, ED (Enforcement Directorate), TRAI, or police. They threaten arrest, account freezing, or legal action unless the victim pays a “penalty” or “clearance fee” immediately. Legitimate government agencies never demand payment over the phone. This tactic overlaps with fake government website scams.
Social Media Impersonation
Scammers clone or hack real social media profiles on Facebook or Instagram and contact the victim’s friends. They pose as the account owner, request OTPs, claim they’re locked out, or ask for money urgently. Understanding safe social media practices reduces this risk significantly.
Fake Friend or Family Scam
The fraudster calls from an unknown number and asks the victim to “guess who’s calling.” When the victim suggests a name, the scammer adopts that identity, claims their phone was lost or changed, then requests urgent financial help — often asking for a bank transfer to “pay back later.”
Tech Support Impersonation
A caller claims to be from Microsoft, Google, or a telecom company and says your device has a virus or your internet is compromised. They request remote access to your device, then install malware or access your financial apps.
How Do You Identify an Impersonation Scam?
These warning signs indicate you are likely dealing with a scam rather than a legitimate contact.
- Unexpected urgency — You are told you must act right now or face serious consequences such as account freezing, arrest, or loss of funds.
- Requests for sensitive data — Any caller asking for OTP, CVV, Aadhaar number, or bank account credentials is a fraudster. No legitimate bank or government agency asks for these.
- Number spoofing — The caller ID shows a familiar number (bank, government, or friend) but the voice or tone seems wrong. Caller IDs can be easily faked using spoofing tools.
- Request to transfer money to a “safe account” — No bank ever asks you to move money to a different account for safekeeping. This is a definitive scam indicator.
- Grammatical errors in messages — Official communications from banks and government bodies are professionally written. Typos and awkward phrasing suggest fraud.
- Request for remote access — Asking you to install AnyDesk, TeamViewer, or similar apps gives fraudsters complete control of your device.
How Can You Protect Yourself from Impersonation Fraud?
- Hang up and call back independently — If you receive a suspicious call, end it and call the organisation directly using the number from their official website, not the number the caller gave you.
- Never share OTP, CVV, or passwords — Not even with someone claiming to be from your bank’s fraud team. Banks explicitly state they never ask for these details.
- Enable two-factor authentication on all accounts. Even if your password is stolen, 2FA prevents unauthorised access.
- Use caller ID apps like Truecaller to flag suspicious numbers and verify incoming calls before engaging.
- Do not grant remote access to anyone who contacts you unexpectedly — regardless of what problem they claim to solve.
- Verify unusual social media requests — If a “friend” asks for money or an OTP via DM, call them on their known number to verify before responding.
- Report suspicious contacts — Block and report fake accounts to the platform and file a complaint at cybercrime.gov.in.
What Should You Do If You Fall Victim to an Impersonation Scam?
If you have already been deceived, take these steps immediately to minimise harm:
- Call your bank’s 24-hour helpline immediately to report the unauthorised transaction and request a freeze on the beneficiary account.
- Dial 1930 — The National Cyber Crime Helpline can initiate rapid response to freeze fraudulent transfers if contacted quickly.
- File a complaint at cybercrime.gov.in — Document all call logs, screenshots, transaction IDs, and communication records as evidence.
- File an FIR at your nearest cyber crime police station within 48 hours to maximise the chance of recovering funds.
- Change passwords on all accounts that may have been compromised, starting with email and banking.
For professional advice after an impersonation scam incident, contact cyber expert Anuraag Singh for confidential support.
