A High Court Judge’s Six-Lakh Loss: A Cautionary Tale of Reward Point Fraud
In an era where digital convenience shapes daily life, a single misstep can prove devastating. A sitting judge of the Bombay High Court recently discovered this the hard way, falling victim to a sophisticated cyber fraud that drained her account of over six lakh rupees. The scam unfolded through a seemingly harmless attempt to redeem credit card reward points, exposing how even the most cautious individuals can be deceived.
The incident has sent ripples through legal and financial circles, prompting a formal complaint with cybercrime authorities and an ongoing police investigation in Mumbai. It serves as a stark reminder that no one is immune to the tactics of modern scammers.
How the Fraud Unfolded
On 28 February, the judge attempted to redeem reward points associated with her credit card. Unable to connect with the bank’s official helpline, she searched online for an alternative number. The number she found appeared to belong to the bank’s credit card department, so she called it without suspicion.
The person who answered posed as a bank official, offering assistance with the reward point redemption process. Trusting the caller, the judge followed his instructions step by step. He sent her a file of approximately 18 MB via WhatsApp, claiming it was a required form to complete the redemption. However, the file would not open on her iPhone. The scammer then advised her to open it on an Android device.
Once she downloaded the file and entered her credit card details into what seemed like a legitimate form, the damage was instant. Within minutes, multiple unauthorised transactions were processed from her card. She began receiving email alerts confirming the activity, and by the time she realised what had happened, approximately 6.02 lakh rupees had been stolen. She immediately blocked the card, but the money was already gone.
Immediate Response and Investigation
Upon discovering the fraud, the judge reported the incident through the National Cyber Crime Reporting Portal and the cybercrime helpline. A formal complaint was also lodged at the Khar Police Station in Mumbai. Authorities are now investigating the case, tracing the digital trail left by the perpetrators.
The Anatomy of a Reward Points Scam
This type of fraud follows a predictable but effective pattern. Scammers employ several key tactics to exploit unsuspecting victims:
- Fake helpline numbers: Fraudsters plant counterfeit customer service numbers on Google Maps, search results, and online advertisements. These numbers appear legitimate but connect directly to scammers.
- Malicious files or apps: Victims are sent files, often in APK format, disguised as redemption forms. In reality, these files contain spyware that captures sensitive data, including credit card numbers and OTPs.
- Urgency and panic: Scammers create a false sense of urgency, claiming that reward points will expire within hours. This pressure pushes victims to act quickly and skip essential verification steps.
Protecting Yourself from Similar Frauds
While the digital landscape poses risks, adopting a few simple habits can significantly reduce your chances of falling prey to such scams:
- Use official channels only: Always redeem reward points through your bank’s official mobile app or verified website. Avoid third-party links or numbers found through casual searches.
- Verify contact numbers: Obtain customer support numbers directly from the back of your credit card, your bank’s official website, or your banking app. Never trust numbers from unverified online sources.
- Avoid unknown files: Do not download or open files sent via WhatsApp, email, or messaging apps from unknown contacts. APK files, in particular, are common vehicles for malware.
- Never switch SIM cards: If a caller asks you to insert your SIM into another device, refuse immediately. This tactic can compromise your access to OTPs and enable unauthorised transactions.
What to Do If You Are Scammed
If you suspect that you have been a victim of cyber fraud, act without delay. First, block your credit or debit card immediately to prevent further losses. Next, call the national cybercrime helpline at 1930 and file a complaint on the official cybercrime reporting portal. Prompt reporting increases the chances of recovering stolen funds and helps authorities track down the culprits.
