It usually starts with a small win. Someone added you to a Telegram group called something like "Premium Stock Tips — Verified Mentor" or "VIP Task Group — Daily Earning." Maybe a young woman who said her name was Riya messaged you on Instagram first, then moved you to Telegram. The group looked busy. Strangers were posting screenshots of profits. You followed two tips and made a few hundred rupees. The "mentor" replied to you personally. Then the group started talking about a "big round" — IPO allotment, a private fund, a one-day arbitrage. You sent a small amount first, and it came back. You sent more. By the third or fourth round, the numbers on the dashboard showed lakhs in profit. When you tried to withdraw, they asked for a "tax fee," then a "VIP unfreeze fee," then nothing. The mentor stopped replying. The group disappeared. You were blocked.
That sinking feeling in your stomach is shared by thousands of Indians every month. This guide tells you, in plain words, what to do in the next 24 hours and the next 24 weeks.
How The Telegram Trap Actually Works
Once you understand the structure, the legal angle becomes clear. The fraudster builds three layers — a recruiter who finds you on social media, a "mentor" who runs the Telegram group, and a money mule whose bank account or UPI handle receives the payments. Sometimes the same person plays all three roles using different photos. The group is full of fake members posting fake profit screenshots. The "trading platform" or "task app" is usually a private website or a shady app that only the group is told about — its dashboard shows whatever number the mentor wants to show.
The pattern is engineered to bypass your common sense. Small wins create trust, peer pressure inside the group makes you feel left out, and the urgency of "last seat" or "round closing" makes you skip your usual checks. By the time you realise something is wrong, you have transferred money to several different accounts because the mentor told you "the IPO bank changed" — that is a deliberate move to scatter the trail across banks and states.
This is not bad luck. It is a designed fraud. And designed fraud is exactly what Indian criminal law calls cheating.
Why the Block Feels Personal — But Isn't
The block hurts because the conversation felt real. The mentor remembered your daughter's name, sympathised when you said your father was unwell, sent you voice notes. None of that was personal. It was a script. Many of these gangs operate from compounds in South-East Asia where humans are themselves trafficked and forced to run these chats on rotation. The script tells the operator what to say. The "mentor" you trusted was probably a different person every shift.
This matters legally. The deception was not a one-off mistake by some honest broker — it was a planned, organised inducement to make you part with money. Section 415 of the Indian Penal Code defines cheating exactly this way: deceiving a person and dishonestly inducing them to deliver property. The Code's own illustrations to Section 415 — a man pretending to be in the Civil Service, a man putting a counterfeit mark to imitate a celebrated manufacturer — read like they were written for a 2026 Telegram fraud.
Which Laws Apply When Telegram Money Is Stolen?
For a typical Telegram investment scam, the police FIR will usually combine two or three sections.
Section 66D of the Information Technology Act, 2000 — punishment for cheating by personation by using a computer resource or communication device. The IT Act commentary explains it directly: "whoever cheats by personating becomes liable to punishment with imprisonment" up to three years and a fine up to one lakh rupees. The mentor's pretence of being a SEBI-registered broker, a foreign investor or a celebrity tipster, done through Telegram, is precisely what 66D punishes.
Section 420 of the Indian Penal Code (now Section 318 of the Bharatiya Nyaya Sanhita, 2023) — cheating and dishonestly inducing delivery of property. This is the heavier section, with punishment up to seven years. Where Section 66D handles the digital pretence, Section 420 handles the actual transfer of money you made because of that pretence.
Section 66C of the IT Act may be added when the fraudster used the photo, name or identity feature of a real broker, a known celebrity or even another victim. The commentary describes it as the offence of fraudulent or dishonest use of "any identification feature of another person."
The Penal Code's own Section 415 is the foundation under all of this. Its ingredients are simple: deception, dishonest inducement, and a delivery of property by the deceived person. The case of Hridya Rajan Pd. Verma v State of Bihar (AIR 2000) clarified that the inducement must be either fraudulent or dishonest from the very start of the transaction — and in a Telegram scam, the dishonest intent exists from minute one. There is no honest broker who later turned bad; there is only a fraud dressed as a broker.
The First 24 Hours: 1930 and the Cyber Portal
Speed matters more than perfection here. The single most useful number on your phone right now is 1930 — the national cyber-fraud helpline. Call it before you do anything else. The operator will take down the transaction details — beneficiary UPI ID, account number, transaction reference — and push a request to the receiving bank to place a hold on the money. Banks have a window where they can flag and freeze incoming fraud-tagged amounts, and that window is short. Reporting within 24 hours, ideally within hours, has a real effect on whether anything is recoverable.
Right after the call, log on to cybercrime.gov.in and file a written complaint there too. Upload the screenshots of the Telegram group, the chats with the mentor, the payment confirmations, and the fake dashboard. Save the complaint reference number. This portal complaint is the official digital paper trail that follows your case through whichever cyber cell ends up handling it.
Then — and only then — call your own bank's fraud helpline. Tell them about the disputed transaction, ask them to flag the beneficiary account, and request a written acknowledgement of the dispute over email. Never share OTPs or PINs with anyone, including someone claiming to be from the bank's fraud team. A genuine bank officer never asks for your PIN.
Filing the FIR — Zero-FIR Rules in Plain Language
An online complaint at cybercrime.gov.in is useful but not enough. You also need a proper First Information Report at a police station. Under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (which replaced Section 154 of the old Code of Criminal Procedure), the police are duty-bound to register an FIR when information disclosing a cognisable offence is given to them. Cheating under Section 420 IPC is cognisable. Section 66D IT Act is cognisable.
The "zero-FIR" principle simply means you can walk into any police station — not just the one where you live — and demand registration. The officer will register the FIR and forward it to the police station with proper territorial jurisdiction. This was clarified by the Supreme Court and is now built into the BNSS itself. Cyber offences are partly committed wherever the affected computer or person is located, so even if the fraudster is in another state, your local Delhi police station can register the FIR. Knowing your FIR rights ahead of time is half the battle.
If the duty officer turns you away, do not argue at the desk. Send a written complaint by registered post to the Senior Superintendent of Police of the district under Section 173(4) BNSS / 154(3) CrPC. If that still fails, file a complaint to the Judicial Magistrate under Section 175(3) BNSS / Section 156(3) CrPC, asking the court to direct registration and investigation. The Supreme Court's reasoning in Sakiri Vasu v State of UP (2008) is the foundation for this layered remedy.
The Bank Side — Account Freeze and Lien
While the criminal case begins, the money has its own track. When 1930 forwards your complaint to the receiving bank, that bank can place a temporary lien on the disputed amount. If the funds are still sitting in the beneficiary account, the lien holds them until a court order or police direction tells the bank what to do next.
If the funds have already moved, the bank can still trace the next account in the chain through inter-bank cooperation under the National Payments Corporation framework. This is where speed pays off — every hop the money takes makes recovery harder. Within a few hours, money received in the morning is often broken up into ten smaller transfers and routed through cryptocurrency exchanges or rural cooperative banks. After 48 hours, recovery becomes a slow grind that needs court orders.
The investigating officer can also write to the receiving bank under Section 91 BNSS / Section 91 CrPC asking for KYC details, statement extracts and CCTV of the ATM where withdrawals were attempted. Your job is to give the IO every transaction reference number and screenshot you have, so that the bank's fraud team has something to match against.
Evidence and Chain-of-Custody for Telegram Chats
Telegram chats can vanish. The fraudster may delete messages on both sides, the group may be wound up, accounts may be deactivated. So your job is to preserve everything before any of that can happen.
Take screenshots of every message — group description, admin handles, profit dashboards, payment requests, the moment the mentor said "transfer now," the moment they said the IPO bank changed, and the moment you were blocked. Use Telegram's "Export Chat" function from a desktop client to save a full archive (text and media). Save UPI transaction receipts as PDFs from the bank app. Save the bank statement extract showing each debit. Note the date and time on each file.
For court use, this electronic material has to clear Section 65B of the Indian Evidence Act. The commentary on the Evidence Act, citing Anvar PV v PK Basheer (AIR 2015 SC 180), says the rule plainly: an electronic record produced as secondary evidence must be accompanied by a Section 65B certificate, and "without such safeguards, the whole trial based on proof of electronic records can lead to travesty of justice." The certificate confirms the working condition and identity of the device that produced the record. Your lawyer will help you draft the certificate; your job is to keep the original device, the screenshots and the export untampered. Do not crop, edit or annotate the originals — keep one clean copy and work on duplicates.
What Should I Actually Do Now?
If you have just realised you have been scammed, run through these steps in order. Do not skip the early ones.
- Call 1930 first. Have your transaction IDs and beneficiary UPI / account number ready. The faster the receiving bank can place a lien, the better the chance of recovery.
- File a complaint at cybercrime.gov.in. Upload screenshots, the Telegram group ID, and bank receipts. Save the reference number on a piece of paper, not just in the phone.
- Call your own bank's fraud helpline and ask for written acknowledgement of the dispute. Get the phone numbers and names of who you spoke with.
- Preserve evidence. Export the full Telegram chat. Take screenshots of the group, the mentor's profile, the fake dashboard, and the block screen. Save bank statement extracts. Keep the original phone safe.
- Go to a police station and register an FIR. Insist on a copy of the FIR with the FIR number. Do not leave without it. Use the zero-FIR principle if needed — any police station can register it.
- If the police refuse, write to the SSP under Section 173(4) BNSS, then move to the magistrate under Section 175(3) BNSS / 156(3) CrPC.
- Stop the bleeding. Block your UPI handle, change your bank app PIN and online banking password. If you shared Aadhaar or PAN with the fraudster, file a separate complaint with the credit bureaus and consider a CIBIL freeze.
- Keep a written diary. Date, time, who you spoke with, what they said, what you sent. This diary becomes critical if the case drags on.
- Tell people who matter. Your spouse, your CA if there is a tax angle, and a lawyer if the amount is large. Hiding it costs more than the embarrassment of telling.
- Watch for second-fraud. Within weeks, "recovery agents" or "cyber experts" will message you offering to "trace and recover" your money for an upfront fee. They are part of the same network. Real police and lawyers do not work like that.
A Realistic Look at Recovery
Honesty is more useful than reassurance here. In a meaningful number of telegram-scam cases, victims do recover part of what they lost — sometimes 20%, sometimes 60%, occasionally everything if the freeze happened in the first few hours. In many cases, however, the money is gone for good because the network has already moved it through layered transfers, mule accounts and crypto. An FIR cannot magically reverse that.
What an FIR does do is establish, on official record, that you were a victim. That record protects you against allegations later — for example, if some bank officer tries to call your transfer suspicious for tax reasons. It also lets the police track the network. Your FIR may not recover your money, but it may be the FIR that, combined with twenty others, lets the police arrest a fraud ring that scammed many more people. That matters.
If the loss is significant — say, more than a few lakhs — it is worth getting a lawyer involved early. A lawyer can write to the bank under the cyber-fraud framework, follow up with the investigating officer, and approach the magistrate quickly if the FIR is delayed. If you are in Delhi, you can speak with the cyber-fraud team at Pinaka Legal — they handle exactly these matters and can give you a frank read on whether your case has practical recovery prospects.
A Calmer Path Forward
The shame after a Telegram fraud is heavier than the financial loss. People replay the chat in their head, ask themselves how they fell for it, and avoid telling family members. None of that helps. These scams are designed by full-time professionals to defeat exactly the careful, intelligent person you are. Falling for it is not a moral failure.
What helps is movement. Make the calls. File the complaints. Lodge the FIR. Preserve the evidence. Get a lawyer if the amount is large. And then return to the rest of your life. The criminal process is slow, banking processes are slower, and recovery — when it comes — comes in pieces. You will not get a Bollywood ending. But you will have done the right things in the right order, which is the only thing the law lets any of us do.
Frequently Asked Questions
I paid money on a Telegram investment group and got blocked — what should I do first?
Treat it as a race against time. Within minutes, call the national cyber helpline 1930 and file a complaint at cybercrime.gov.in with the transaction IDs and the beneficiary UPI/account number. Also call your bank to flag the transfer. The earlier you report, the better the chance the receiving bank can place a hold on the money before the fraudster withdraws it. Then go to the nearest police station and lodge an FIR — any police station, not just where you live, because of the zero-FIR principle.
Which laws are used in a telegram investment scam case?
The police usually register an FIR under Section 66D of the Information Technology Act for cheating by personation using a computer resource, and Section 420 of the Indian Penal Code for cheating. Where the scammer impersonated a real broker or celebrity, Section 66C of the IT Act for misuse of identity features may also apply. The base concept of cheating in Section 415 IPC — dishonest inducement that causes you to part with money — is the legal heart of every telegram investment scam case.
What does Section 66D of the IT Act actually say in plain words?
Section 66D punishes cheating by personation done with the help of a computer resource or a communication device — phone, laptop, app, anything digital. The punishment is imprisonment up to three years and a fine up to one lakh rupees. In a telegram investment scam, the fraudster pretends to be a stock broker, a fund manager, a known celebrity tipster or a foreign investor, and tricks you into transferring money. That pretence using Telegram and a phone is exactly what 66D is built for.
Can I get my money back if I sent the payment myself?
It depends entirely on speed. If the receiving account is identified and frozen quickly through the 1930 helpline and the bank's fraud team, there is a real chance of recovery. If the money has already been split, withdrawn or sent abroad through layered transfers, recovery becomes very hard. Be honest with yourself about this — many victims do recover something, but many do not. The legal goal is twofold: punish the offender through the FIR, and chase the money through bank and court orders.
Is it useful to file a complaint when the scammer is in another state?
Yes. The zero-FIR principle, recognised by the Supreme Court and now built into the Bharatiya Nagarik Suraksha Sanhita, allows any police station to register an FIR even if the offence happened elsewhere or partly online. The local police then transfer it to the police station with territorial jurisdiction. Cyber offences also use the location of the affected computer resource or the affected person as a basis. Do not let any officer turn you away saying it is a different state's matter.
The police are refusing to register my FIR. What can I do?
You have two clear remedies. First, send a written complaint by registered post to the Senior Superintendent of Police of the district under Section 173(4) of the BNSS (the equivalent of Section 154(3) of the old CrPC). If the police still do not act, file a complaint to the Judicial Magistrate under Section 175(3) BNSS / Section 156(3) CrPC asking the court to direct registration and investigation. The Supreme Court in Sakiri Vasu v State of UP (2008) confirmed this layered remedy. A lawyer's help here speeds things up.
My chats are on Telegram and they have started disappearing. What should I save?
Take screenshots of the entire conversation, the group name, the admin handles, the payment screen, the fake dashboard showing your 'profits', and every UPI confirmation. Use Telegram's export chat function to save a full text and media archive. Note the date and time. Where possible, take screen recordings as well. These become electronic evidence in court and a Section 65B certificate of the Indian Evidence Act will be needed at trial — your lawyer will help with the certificate, but only if you have preserved the original material.
Do I have to hire a lawyer immediately for a telegram investment scam?
Not for the very first hour — that hour is for 1930, the bank and the cyber portal. But once the FIR is registered, a lawyer becomes useful for tracking the investigation, writing follow-up letters, getting a copy of the FIR, asking for status reports, and approaching the magistrate if the police are slow. Pinaka Legal's cyber team in Delhi has handled many such telegram-group investment scam matters and can guide you on whether your case has realistic recovery prospects.
How does the 'task scam' version of the telegram fraud actually work?
You are added to a group offering small payments for liking videos, rating products or doing 'merchant tasks'. The first two or three tasks pay you, often a few hundred rupees, to build trust. Then you are asked to do a 'prepaid task' — pay 5,000, 50,000, then more — with the promise of high commission. Profit shows up only on a fake dashboard inside the group. When you ask to withdraw, you are told to pay 'tax', 'unfreeze fee' or 'final round'. Then you are blocked. This is classic Section 415 IPC cheating combined with Section 66D IT Act.
What is the realistic chance of recovering money in a telegram investment scam?
Honest answer — it depends on how fast you reported and how much the receiving accounts had at the moment of freeze. Quick reporting through 1930 and the cyber portal, combined with a strong FIR, gives you the best shot. Recovery in these cases is partial more often than full. Even when the money is gone, an FIR helps establish that you were a victim, protects you from harassment by the same fraud network, and supports any tax or insurance claim later. So filing is always worth it.
Will my name be made public if I file an FIR?
FIRs are public documents in most cases, but cyber fraud FIRs are usually not splashed in newspapers. The fact that you were tricked is not a moral failure — these scams target intelligent people too. If you are worried about social embarrassment, request the police to keep the matter low-profile and consider consulting a lawyer who can help you frame the complaint without revealing unnecessary personal details about your finances.
For more articles on Indian law, visit the Pinaka Legal Blog. For queries, call +91 8595704798 or email info@pinakalegal.com.