Investment scam: what it is and how it works in India

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 1 Nov 2026 · Online fraud

An investment scam in India is a cheating offence, not a commercial disappointment. Where a person is induced to part with money on a false promise of profit, the conduct falls squarely within section 318(4) of the Bharatiya Nyaya Sanhita, 2023 — cheating and dishonestly inducing the delivery of property — punishable with imprisonment up to seven years and fine. Where the inducement travelled through a website, a mobile application, a messaging group or a fake trading platform, section 66D of the Information Technology Act, 2000, which punishes cheating by personation using a computer resource, is attracted in addition. A civil claim to recover the money and a criminal case against the persons behind the scheme are separate tracks, and both can run at the same time.

The difficulty in these cases is almost never the law. It is the design. In an ordinary theft something is taken without consent; in an investment scam the victim authorises every transfer, often repeatedly, in their own name and through ordinary banking channels. The payment system therefore treats the transaction as valid, the fraudster's exit is smooth, and the money is layered away before anyone begins to look. That is why the sequence matters more than the amount. The stage at which a victim recognises the pattern decides whether the complaint carries a live trail or a cold one.

What the law says about an investment scam

The core provision is BNS 2023, section 318. Sub-section (1) defines cheating as deceiving a person and thereby fraudulently or dishonestly inducing that person to deliver property, to consent to the retention of property, or to do or omit something they would not otherwise have done. Sub-section (4), the provision that governs most investment scams, punishes a person who cheats and thereby dishonestly induces the person deceived to deliver property, with imprisonment of either description up to seven years and fine. The offence is cognizable and non-bailable. Where the deception caused a lesser loss, the residuary punishments are section 318(2), up to three years, or fine, or both, and section 318(3), up to five years, for cheating by a person who was bound by law or by a legal contract to protect the victim's interest — for example an agent, a relationship manager or an adviser.

Three other provisions appear regularly alongside section 318. Where the fraudster pretended to be a specific person — a named adviser, a broker, an officer of an exchange or a regulator — the conduct is cheating by personation under BNS 319, and where the pretending happened through a computer resource it is also punishable under section 66D of the IT Act, 2000 with imprisonment up to three years and fine up to Rs 1 lakh. Where the fraudster used the victim's own credentials, one-time passwords or other unique identification features, the offence is identity theft under section 66C of the IT Act, 2000, again up to three years and fine up to Rs 1 lakh. And where a group of persons agreed to run the scheme, section 61 of the BNS makes the agreement itself a criminal conspiracy, punishable in the same manner as the abetment of the offence that was the object of the conspiracy.

Two further provisions are worth knowing because they are frequently missed. If money was entrusted to an agent, a portfolio manager, a sub-broker or a person in a position of trust and was then misappropriated, the case is not only of cheating but of criminal breach of trust under BNS 316, punishable in its general form with imprisonment up to five years, or fine, or both. If the scheme was dressed up with fabricated registration certificates, forged account statements, fake allotment letters or a fraudulent electronic record, that is forgery under BNS 336; forgery committed intending that the forged document or electronic record be used for cheating carries up to seven years under section 336(3).

One caveat belongs in every honest answer. Not every lost investment is a crime. The dividing line is dishonest intention at the time the money was taken. A business that raised money openly, kept records, and failed for genuine commercial reasons is a civil dispute. A scheme built on a false platform, false returns and false identities is a criminal one. Because intention is a matter of inference, courts read the entire course of conduct — what was promised, what was actually done with the money, what was shown to the investor, and what happened when the investor asked to withdraw.

How the fraud actually runs

The pattern is remarkably stable, even as the branding changes. Most investment scams in India move through the same six stages, and recognising the stage is usually enough to explain why the victim's faith survived for so long.

1. Contact. The first approach comes as a wrong-number message, a free stock tips group, an advertisement on a social platform, a part-time earning offer, or a dating or matrimonial conversation that gradually turns to money. Increasingly it is a group of strangers who all appear to be making profits, because the other members are part of the scheme.
2. Credibility. A persona is built: a photograph, a designation, a registration number, a customer-care number that answers, and a polished application or website showing charts, live prices and a portfolio. Some are built only for the fraud; others link to real market data to look genuine.
3. The small win. The investor is encouraged to start small, and the first withdrawal is honoured promptly. That single success does more to build trust than any certificate, because people trust a payment, not a promise.
4. Escalation. With trust established, the pitch moves to higher amounts, VIP or institutional tiers, block deals, private placements, initial public offering allotments, or a guaranteed plan whose returns no regulated product could lawfully offer. Family members are sometimes brought in.
5. The dashboard illusion. The application keeps showing a growing balance. What the investor sees is a number maintained by the scheme, not a holding with any exchange or depository. No contract note, no demat credit and no independent statement ever appears, and any request for one is met with an explanation about internal settlement.
6. The withdrawal wall. The first blocked withdrawal is explained away — an account under review, a compliance hold, a tax deduction, a conversion charge, an insurance deposit, a regulatory fee. Each demand for a further payment is itself a fresh act of cheating, and it is the point at which many victims double their loss.

The final stage is disappearance and rebranding — the group closed, the number changed, the application dead — with the same operators surfacing under a new name. The money, meanwhile, has moved.

Where the money goes, and why the first hours matter

Money paid into an investment scam leaves through beneficiary accounts, a large proportion of which are mule accounts — accounts opened or rented in the names of other people. From the first account the funds are split across several others, converted to cash, or pushed into crypto through peer-to-peer transfers.

What this means practically is that the single most valuable fact in the whole case is the transaction trail and the speed of the complaint. The unique transaction reference of each payment, the date and time of each transfer, the beneficiary name and account number as shown in the statement, and the bank's own record of where the money went next are what allow an investigating officer to trace funds while they are still traceable. A complaint filed in the first days has a chance of freezing a beneficiary account before it is abandoned; the same complaint filed after three months usually has none.

The offences, in one table

What decides the outcome

Whether a case ends in a charge-sheet and a recovery attempt, or in an early dead end, turns on four practical factors. The first is the quality of the documentary record: chats, call recordings, screenshots of the application, the payment confirmation, bank statements and the unique transaction reference. Digital material is only useful if it can be shown to be authentic, and section 63 of the Bharatiya Sakshya Adhiniyam, 2023 requires an electronic record to be accompanied by a certificate identifying the record and the device, signed by the person in charge of the device and an expert, at each stage at which it is tendered. Victims who preserve the original device and the original application data are in a far stronger position than those who rely on prints of screenshots alone.

The second factor is the identity of the beneficiary. A complaint naming a beneficiary account, a payment gateway, a merchant and a mobile number gives the investigator a starting point; a complaint that describes only a loss gives none. The third is timing. The fourth is how the case is framed at the outset: presenting the matter as a mere civil recovery suit forfeits the use of police powers, and presenting it as a pure criminal case without a parallel civil claim can forfeit the ability to attach assets if the criminal case proceeds.

Mistakes that cost victims money and credibility

Do not wait a day to see whether the withdrawal clears. Every hour in which funds sit in a beneficiary account is an hour of value. Do not pay the release fee, the tax or the insurance deposit; that demand is fresh cheating, and the money is not being held anywhere. Do not delete the application, clear the chat or factory-reset the phone before the data has been preserved and, where necessary, certified. Do not publish accusations against named private individuals on social media without evidence; an unproven public allegation can expose the complainant to defamation proceedings and can damage the criminal case itself. And do not let a civil recovery notice be sent so aggressively that the operators destroy the trail before a criminal complaint is registered. If you would rather have the police complaint and the civil claim coordinated, that is the point at which an advocate adds something concrete; a cyber crime lawyer in Kolkata can sequence the two so that one does not damage the other, and the firm's cyber crime law services are built around exactly this sequencing.

When to involve a lawyer

Consider legal advice early, and certainly at the moment a withdrawal is blocked. A lawyer's value at that stage is not litigation; it is preventing the errors that close off options — the deleted application, the civil suit filed first, the notice that warns the operators, the complaint that omits the transaction trail. Most victims are better served by a clear, fast, documented complaint than by an aggressive posture. What the law requires is simple: an inducement, a false promise, a delivery of property, and a documented trail.

Frequently asked questions

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Related articles

• Work From Home Scam: What It Is and How It Runs
• Trading app scam: what it is and how the fraud runs
• Stock market scam: how the fraud actually runs in India
• Mutual fund scam: what it is and how the fraud runs
• Job scam in India: what it is and how the fraud runs
• Sextortion: What It Is and How the Fraud Actually Runs

Cyber crime lawyer in your city · Bank account freeze help · Contact