Cyber Security Bureau cautions public against rise in fake Holi offers, payment scams

With the Holi festival approaching, cyber security officials have cautioned citizens against a rise in online frauds and digital payment scams, particularly those linked to festive shopping, event bookings, travel plans and social media activity.

According to the Telangana Cyber Security Bureau (TGCSB), fraudsters are circulating fake Holi offers, discounted colour and gift hampers, party passes, food delivery deals and cashback links through WhatsApp, SMS, social media platforms and email. Fake e-commerce websites and fraudulent payment links are being used to steal banking credentials and personal data.

Director of the bureau, Shikha Goel, said: “Citizens must remain cautious while making online purchases during the festive season. Cybercriminals exploit festivals when online transactions increase. Do not click on unknown links or download applications from unverified sources. Verify websites carefully before making payments and never share OTPs, PINs or banking credentials with anyone,” she said.

Officials said in several cases users receive messages offering Holi event entry passes, community tickets or bulk colour orders that redirect them to phishing websites or prompt installation of malicious applications. Such applications can access one time passwords, financial details, contacts and social media accounts, and may be used to commit further fraud.

Typically, victims receive attractive festival greetings or booking links which lead to fake websites or malicious application downloads. Fraudsters then collect OTPs, card details and login credentials. Compromised accounts are often used to target the victim’s contacts.

Citizens who suspect fraud or who have clicked on suspicious links have been advised to stop all financial transactions immediately, avoid sharing OTPs, PINs, CVV numbers or passwords, save screenshots of messages and transaction details, and inform their bank or payment application without delay.

Victims have been urged to report incidents immediately by dialling 1930, the national cyber fraud helpline, or by registering a complaint on the National Cyber Crime Reporting Portal. Officials said early reporting significantly increases the chances of preventing financial loss.