Delhi Police’s Indian Cyber Crime Coordination Centre-linked Intelligence Fusion and Strategic Operations unit has issued a cyber-safety advisory ahead of Diwali, warning residents about fraudulent gift messages, fake shopping websites, malicious APK files and delivery-related scams targeting online shoppers and digital payment users.
The advisory comes as festive purchases, online payments and home deliveries increase. According to the police, fraudsters are circulating WhatsApp messages promising Diwali gifts worth Rs 8,000. Recipients are directed to click on links that may be used to steal personal and banking information.
Police have also warned residents about APK files sent as Diwali greeting cards. Downloading such files can install malware on a phone, potentially allowing fraudsters to access stored data. In another common tactic, criminals create fake e-commerce websites offering mobile phones, electronics and other products at discounts of up to 90 per cent.
The warning extends to delivery and courier-related calls. Fraudsters may pose as employees of Blue Dart, India Post or other delivery companies and claim that an order is being held or that the recipient’s address must be updated. They then send links designed to capture personal or financial information.
The police have separately cautioned people about fake customer-care numbers. In refund-related frauds, criminals may persuade victims to download remote-access applications such as AnyDesk or UltraViewer. These applications can allow an outsider to control a mobile phone or computer and attempt unauthorised transactions from linked bank accounts.
Delhi Police said people should contact their bank immediately if they become victims of cyber fraud and ask for cards and net banking services to be blocked. They should then call the cybercrime helpline at 1930 without delay. Complaints can also be filed through the government’s cybercrime portal, cybercrime.gov.in. Police said prompt reporting can improve the possibility of having the defrauded amount frozen in the bank account.
The advisory also addresses a widespread misunderstanding about QR codes. Police clarified that a person does not need to scan a QR code to receive money. QR codes are generally used to make payments, and residents should never share their UPI PIN or banking one-time password with anyone.
For online shopping, residents have been advised to check a website’s URL carefully and use official applications instead of unfamiliar portals. Anyone receiving a courier-related call should verify the information through the company’s official website and obtain the customer-care number from there rather than relying on a number provided during the call.
The advisory places festive cyber fraud within the wider dependence on digital commerce and app-based services in cities. It asks residents to remain alert while shopping, receiving deliveries and responding to promotional messages during the Diwali period.
