Why in news?
The Indian Cybercrime Coordination Centre, or I4C, has warned about deceptive advertisements using manipulated videos to promote fake welfare schemes. A 19 October 2026 report in The Economic Times describes the warning from its National Cybercrime Threat Analytics Unit. Advertisements impersonate prominent public figures and promise financial assistance or cashback, before directing people towards supposed fees or other payments. I4C is the Home Ministry's national coordination body for addressing cybercrime, rather than the department administering those advertised benefits. The warning matters because a convincing video can make an invented offer appear official. The reported advisory identifies a fraud pattern, not a new welfare payment. It does not establish that every advertised benefit is fraudulent.
How an apparent benefit becomes a loss
The reported advertisements appear on Facebook and Instagram and can lead users to phone numbers, messaging conversations or fraudulent websites. Victims are then asked for payments described as taxes, registration charges or processing fees. The warning also covers fake cashback and prize offers. The promised incoming benefit becomes the reason for an actual outgoing transfer. Repeated demands can deepen the loss rather than release the promised money.
The crucial issue is the identity and authority behind the offer, not whether the advertisement looks professionally produced. Paying for an advertisement does not make its contents a government announcement. Nor does a fee demand establish that an official department has approved the supposed benefit. The warning concerns fraudulent representations; it should not be expanded into an unsupported rule that every legitimate government service must always be free.
Why a familiar face or voice is not authentication
A deepfake is synthetic or manipulated media created using artificial intelligence to imitate realistic images, video or audio. The Indian Computer Emergency Response Team, or CERT-In, explained these risks in a November 2024 advisory. Such material can make a person appear to say something they did not say. Other misleading videos may involve simpler editing. The appearance of a public official therefore cannot replace checking whether the responsible department actually announced the scheme.
Visual or audio irregularities can sometimes indicate manipulation, but the absence of an obvious defect does not establish authenticity. Verification needs an independent route, such as the department's official website or a known contact obtained separately. Reopening the same link supplied by the advertisement does not provide an independent check. This shifts attention from trying to judge a face perfectly towards checking the actual source and terms of the claimed service.
What I4C does within the national response
The Home Ministry approved the I4C scheme on 5 October 2018. It became an attached office of the ministry on 1 July 2024. Its purpose is coordinated action against cybercrime, connecting different agencies and capabilities rather than treating each incident as an isolated technical problem. Its framework includes threat analysis, public reporting, joint-investigation coordination, training, forensic support and research. The advertisement warning fits its role in identifying and communicating emerging crime patterns.
These functions address different needs. Threat analysis examines patterns across incidents, while digital forensics helps examine electronic material as evidence. Training strengthens the ability of investigators and other officials to handle such cases. Research can support improved tools and methods. Coordination is especially relevant where victims, accounts and other evidence are spread across jurisdictions. None of these supporting functions makes an online allegation equivalent to a proven offence by a named person.
Central coordination does not remove state-police responsibility
The government explains that police and public order are state subjects under India's constitutional framework. States and Union Territories handle the prevention, investigation and prosecution of crimes through their law-enforcement agencies. The Centre supplements that work through coordination, alerts, capacity-building and related support. A national reporting platform can help connect a complaint with the appropriate response. The authorities handling the case retain their responsibilities within that framework.
The National Cyber Crime Reporting Portal, at cybercrime.gov.in, enables the public to report cybercrime, with particular attention to offences against women and children. Its scope is broader than financial scams alone. The Home Ministry's July 2026 parliamentary account distinguishes complaints, their conversion into First Information Reports and subsequent legal action. These are different records and stages, not interchangeable measures of guilt, resolution or money returned.
Why the direction of a payment matters
The Unified Payments Interface, or UPI, enables instant digital payments. Its personal identification number, commonly called the UPI PIN, is a secret code used when authorising a bank-account payment. In a payment transaction, authorising an outgoing transfer moves money from the payer. A promised reward does not convert that transfer into a receipt. The National Payments Corporation of India specifically warns against fake cashback links that exploit this confusion.
Receiving a credit does not require approving an outgoing payment under the pretext of unlocking it. Likewise, scanning a Quick Response code and authorising payment is not evidence that a benefit will arrive. The amount, recipient and purpose displayed in the payment process matter more than the caller's explanation. A genuine benefit should be verified through its administering authority, rather than through a stranger's request to disclose a secret payment credential.
Reporting quickly can help, but is not a refund guarantee
The Citizen Financial Cyber Fraud Reporting and Management System was launched under I4C in 2021 to support immediate reporting and action against financial fraud. The 1930 helpline assists people in lodging online cybercrime complaints. The system connects the response with banks and financial intermediaries so that available funds can be acted upon promptly. Early reporting is important because the opportunity to secure money can change as it moves through the financial system.
Money prevented from moving further is not necessarily money already restored to the victim. The Home Ministry's July 2026 account separately describes funds marked under lien and amounts refunded. A lien restricts dealing with the marked amount; restoration involves further processing and the applicable legal requirements. These distinctions explain why reporting, securing funds and repayment should not be described as one automatic event, even when rapid action is possible.
The ministry reported a standard operating procedure issued in January 2026 to coordinate complaint handling and restoration of funds. Its June review also called for improvements in helpline technology, staffing and call handling. Those measures concern service delivery, not an unconditional promise that every call will recover every rupee. People reporting fraud should follow the official complaint process and their bank's verified support channels, rather than pay another unknown intermediary promising recovery.
Where CERT-In fits alongside the crime response
CERT-In operates under the Ministry of Electronics and Information Technology. Section 70B of the Information Technology Act, 2000 gives it national cybersecurity incident-response functions. These include analysing incidents, issuing alerts and coordinating response. I4C's crime-coordination role and CERT-In's technical incident-response role can complement each other. Their responsibilities cannot be reduced to all personal matters on one side and all networks on the other.
A fraud may involve both deception of a person and misuse of digital systems. Preventing harm can therefore require public warnings, secure payment practices, action by platforms and banks, and investigation by the relevant authorities. This does not mean that a member of the public must personally determine every institutional responsibility before reporting. The official reporting portal and helpline provide established entry points into the cybercrime-response process.
Conclusion
The I4C warning concerns the misuse of apparent authority: a familiar face and a promised benefit can disguise an outgoing payment demand. Independent verification of the scheme and careful attention to payment direction are central to avoiding that trap. If fraud occurs, prompt reporting can support coordinated action, but securing funds and restoring them remain different stages. The national framework is intended to connect those responses, not replace evidence or guarantee an automatic refund.