Real-Money Betting Scams Privacy Risks and Warning Signs

A man from Secunderabad received a WhatsApp message in 2021. Someone was promoting an online betting game with guaranteed profits. The first few payments he received were real, so he kept investing. By 2025, he had lost Rs 75 lakh to what turned out to be a fraud network. Hyderabad Cyber Crime Police later linked one arrested accused to 22 other similar cases across India.

This is not a rare story. Real-money betting games have become one of the most active cyber fraud categories in India, with victims reported from Hyderabad, Mumbai, Visakhapatnam, Gurugram, Goa, and many smaller cities. If you or someone you know plays or is thinking about trying any such platform, knowing how these scams work and what they do to your data matters.

What the Law Says About Real-Money Betting in India

India passed the Promotion and Regulation of Online Gaming Act, known as PROGA, in August 2025. It bans all online real-money gaming, whether based on skill or chance. Fantasy sports, rummy, poker, casino-style games, and sports betting are all prohibited. By March 2026, the government had blocked over 8,376 URLs linked to these platforms.

The ban did not end the problem. A CUTS survey found that offshore betting platforms captured 42 percent of daily play among former real-money game users by late 2025. These platforms run on foreign servers, which makes recovering money after a scam far more difficult.

How Real-Money Betting Scams Work in India

Most betting game scams follow a recognisable pattern, whatever the game type.

First contact comes through WhatsApp, Telegram, or a paid Instagram or Facebook ad. The message promises easy profits, a referral bonus, or fixed winning tips. In 2025, a 24-year-old woman from Hyderabad was targeted through a fake Instagram advertisement and directed to an online casino platform via WhatsApp. She lost money in a fraud worth Rs 26 crore, and four accused were arrested in that case in March 2026.

After the first contact, the scammer builds trust. Small winning amounts are credited to your account, and they let you withdraw them. This is deliberate. Once you deposit a larger sum, the account freezes. The excuses given are always similar: you owe a tax before withdrawal or your account needs verification. Neither has any resolution. The app stops responding and the money is gone.

A 36-year-old man from Hyderabad received promotional WhatsApp calls in 2025. Over several months, he and his wife transferred approximately Rs 1.5 crore into accounts the fraudsters controlled. Four people were arrested in connection with that case in March 2026.

Three Common Scam Types to Recognise

Fake APK download pages. Scammers build copycat websites for known platforms to push malicious app files to unsuspecting users. When someone searches for a legitimate app such as the lotus365 apk page, they can easily land on a fake look-alike site. These unofficial files often run silently in the background, reading SMS messages, banking notifications, and stored contacts.

Colour-variant and special edition apps. Fraudsters copy the design of real platforms and circulate exclusive versions through social media and group chats. Links promoted as lotus365 blue or other colour-tagged editions sometimes appear in WhatsApp groups as insider tips. Always check whether such a link leads to the platform’s own verified website before opening it. Unofficial versions have been used to steal login credentials.

Lottery and referral traps. A message on WhatsApp or Facebook claims you have won Rs 10 lakh. You only need to pay a small processing fee to claim the prize. In June 2026, Haryana Police arrested 11 people in Gurugram and Delhi running this exact type of Facebook lottery scam.

Privacy Risks That Most People Miss

Every real-money betting platform that runs KYC verification asks for your Aadhaar, PAN, bank account details, and often a selfie. On a legitimate platform this is standard. On an illegal offshore site, the same data goes to people with no legal obligation to protect it.

When police in Odisha busted a betting fraud network, they found that the phones of the accused contained Aadhaar and PAN card details belonging to many different individuals. Separately, a Telegram bot was reported to be selling Indian citizens’ Aadhaar numbers and PAN details for as little as Rs 99, according to a Business Today investigation from June 2025.

With your Aadhaar and PAN, a criminal can open bank accounts in your name, apply for loans, or create fake identities. This kind of damage does not end when the betting app disappears.

Pay attention to what permissions any app requests. A betting platform that asks for access to your camera, contacts, or microphone has no legitimate reason for those permissions. Granting them turns your phone into a data source for whoever built the app.

Warning Signs to Check Before You Download or Deposit

Warning sign	What it likely means
Guaranteed profits or fixed tips	No platform can guarantee winnings. This phrase is always a fraud signal
App shared as an APK link, not from Play Store	Unofficial, possibly malicious
Support only on WhatsApp or Telegram	No real accountability, platform likely unregistered
Small wins allowed, then withdrawal blocked	Classic account freeze scam
App requests camera, contacts, or microphone	Unnecessary permissions, risk of spyware
No privacy policy or company address visible	Unregistered platform
Pay tax first to unlock winnings	Fake compliance demand to steal more money

What to Do If You Have Been Targeted

Call 1930 as soon as you suspect fraud. This is the national cyber fraud helpline run by the Ministry of Home Affairs, and it operates 24 hours a day. The helpline connects to over 85 banks and payment gateways. Calling in the first hour gives the best chance of freezing funds before they move further.

After calling, file a detailed written complaint on the National Cyber Crime Reporting Portal. Choose Online Financial Fraud as the complaint category. Keep the acknowledgement number the portal gives you and share it with your bank when you contact them.

If your Aadhaar details were shared with a suspicious platform, lock your biometrics immediately. You can do this on the mAadhaar app or directly on the UIDAI website. This prevents anyone from using your fingerprint data for banking transactions without your presence.

One more point: under PROGA 2025 and relevant state gambling laws, participating in banned real-money gaming can invite legal action. The risk is not just to your wallet.

Frequently Asked Questions

The Promotion and Regulation of Online Gaming Act 2025 bans all real-money online gaming in India, covering skill-based and chance-based games alike. Esports played without cash stakes are exempt. Using offshore platforms that accept Indian users does not make it legal; it simply shifts the jurisdiction and makes fraud recovery harder.

Key signs include the app is distributed via a link or APK file rather than the Play Store, it promises guaranteed or fixed winnings, all communication happens through WhatsApp or Telegram with no verifiable company details, and withdrawals are blocked after you deposit a significant amount. Any platform without a published privacy policy or a traceable physical address should be treated with caution.

Your identity documents can be used to open bank accounts, apply for loans, or create fake profiles in your name. Report the fraud at cybercrime.gov.in and call 1930 immediately. Lock your Aadhaar biometrics through the UIDAI website or the mAadhaar app to block misuse for AePS transactions. Also notify your bank to flag any unusual activity on accounts linked to your documents.

Call 1930 first, as this can help freeze the money. Then file a complaint at cybercrime.gov.in under the Online Financial Fraud category. Also file a written complaint at your bank and at your state police cyber crime cell. Keep a record of every reference number you receive.

Recovery is not guaranteed, but speed increases the chances. The 1930 helpline connects to banks and payment networks, and early reporting can freeze funds before they are transferred again. Filing on cybercrime.gov.in and with local police creates the legal record you would need for any further claim. Most people who delay reporting lose the window for any recovery.