Who is the most vulnerable to cyber frauds?

1. At a Glance

• Cyber fraud is growing faster than any other crime category in India. Registered cybercrime cases rose 17.9%, from 86,420 (2023) to 1,01,928 (2024) [1].
• Being targeted and being victimised follow different patterns. People who spend more time online are more likely to be targeted. Actual financial fraud is more closely tied to social and economic status: wealthier and more educated respondents were more likely to report being victims [1].
• This cuts against the common idea that only the poor, the elderly or people with low digital literacy fall for scams. That makes it useful for Mains answers on internal security (GS-III), vulnerable sections (GS-II) and the digital economy [1].
• The response is led by the Ministry of Home Affairs (MHA) through the Indian Cyber Crime Coordination Centre (I4C), the 1930 helpline and the CFCFRMS reporting system [2][3][4].

2. Why in the News

• An explainer in The Hindu dated 30 September 2026 ("Who is the most vulnerable to cyber frauds?", Devesh Kumar) draws on NCRB data for 2024 and a new Lokniti–CSDS and Common Cause survey [1].
• NCRB 2024: cybercrime rose 17.9% even though overall registered crime fell by 6% in the same period. Cybercrime is moving sharply against the national trend [1].
• Lokniti–CSDS and Common Cause study: 8,306 citizens across 16 States. It looks at how often people get fraud calls and messages, who is targeted, and the social profile of those most exposed [1].
• Digital arrest scams have become a policy priority. The government has run a national awareness campaign and blocked accounts used for these scams on a large scale [5].

3. Background & Evolution

• Driving factor: daily life now runs heavily on digital transactions, so concerns about online safety and privacy have "grown exponentially" and digital scams have multiplied [1].
• 2018: MHA set up the I4C as a scheme to build a framework for the prevention, detection, investigation and prosecution of cybercrime [3].
• 2021: the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS) was launched under I4C. Its purpose is immediate reporting of financial fraud so that stolen funds can be stopped before fraudsters move them out [4].
• 1 July 2024: I4C became an Attached Office of MHA [3].
• 2023 → 2024: cybercrime cases went from 86,420 to 1,01,928 (NCRB) [1].
• Up to 31 January 2026: more than ₹8,690 crore saved across more than 24.65 lakh complaints through CFCFRMS [4].

4. Core Static Facts

• Key terms:
• Exposure (targeting): receiving fraud calls or messages.
• Victimisation: actually losing money.

• The survey treats these as separate layers [1].

• Under-reporting: registered cases capture only what was formally reported, and fraud is chronically under-reported. Surveys pick up the "invisible layer" that crime data misses [1].

5. Multi-Dimensional Analysis

Social

• Time online raises the chance of being targeted, so heavy users are most exposed [1].
• Financial fraud victims skew toward the wealthier and more educated. Having more money and more digital transactions creates more attack surface [1].
• Vulnerability therefore has two sides: exposure is broad-based, while losses concentrate in the better-off groups that report them [1].

Economic

• As digital transactions spread, the losses from fraud grow with them [1].
• Quickly freezing stolen funds matters: more than ₹8,690 crore has been saved through CFCFRMS [4].
• Delivery scams (33%) and investment scams (31%) show fraudsters targeting e-commerce and retail investing [1].

Governance / Administrative

• Data gap: NCRB figures cover only registered FIRs. Survey data shows the real scale is far larger [1].
• MHA has built institutions for this: I4C became an Attached Office in 2024, and the 1930 helpline gives a single national reporting channel [2][3].
• Awareness work runs through many channels: newspaper ads, announcements in Delhi Metro, social media influencers, Prasar Bharati and Akashvani [5].

Scientific / Technological

• Fraudsters misuse communication platforms (Skype, WhatsApp) for digital arrest scams, and I4C blocks these accounts in bulk [5].
• The fight needs real-time links between police, banks and platforms, which is what CFCFRMS is built for [4].

Security (Internal)

• Cybercrime is going up while overall crime goes down. Policing has to shift toward cyber capacity [1].

6. Recent Developments (last 12–18 months)

• 22 July 2025: MHA answered a Lok Sabha question on I4C and cyber fraud [6].
• 4 February 2026: MHA answered a Rajya Sabha question with CFCFRMS figures up to 31 January 2026 (₹8,690+ crore saved; 24.65+ lakh complaints) [4].
• 2026: NCRB data for 2024 was released, showing 1,01,928 cybercrime cases (+17.9%) [1].
• 30 September 2026: the Lokniti–CSDS and Common Cause survey findings were reported in The Hindu [1].

7. Prelims Hooks

• Cybercrime cases in India, 2024 (NCRB): 1,01,928 [1].
• Growth in cybercrime, 2023 to 2024: 17.9% [1].
• Change in overall registered crime in 2024: down 6% [1].
• Cybercrime cases in 2023: 86,420 [1].
• I4C was set up by MHA in 2018 [3].
• I4C became an Attached Office of MHA on 1 July 2024 [3].
• 1930 is the national toll-free cyber fraud helpline [2].
• CFCFRMS was launched in 2021 under I4C [4].
• CFCFRMS had saved more than ₹8,690 crore by 31 January 2026 [4].
• I4C blocked more than 1,700 Skype IDs and 59,000 WhatsApp accounts linked to digital arrest scams [5].
• The Lokniti–CSDS and Common Cause survey covered 8,306 respondents in 16 States [1].
• The most commonly reported fraud call type in the survey was fake delivery calls (33%) [1].

8. Does 'Rich and Educated Victims' Mean the Poor Are Safe?

• The survey counts losses that people admit to, not every loss that happens
• The wealthier and more educated were more likely to report being victims [1].
• Fraud is chronically under-reported (many victims never tell anyone) [1].
• A person who understands the scam and knows about 1930 is more likely to name it as fraud. A person who lost ₹500 through a fake delivery call may not even see it as a crime.

• So part of the gap may come from who reports, not only from who gets cheated.

• Bigger bank balances make better targets

• Better-off people do more digital transactions and hold more money in reach of a scam [1].
• A fraudster chasing one big payout will go after them first.

• This part of the finding is real, not just a reporting gap.

• How to use this in an answer

• Do not write "only the digitally illiterate fall for scams". The survey evidence does not support it [1].
• Do not swing to "the poor are not vulnerable" either. Being targeted is spread widely, since anyone who spends time online gets fraud calls [1].
• The safe line: who gets targeted depends on time online, and who loses money depends on how much money and how many transactions a person has.

9. Why a 17.9% Jump Is Partly Better Counting

• More cases on record can mean more people are reporting
• Registered cases count only complaints that became formal cases [1].
• The 1930 helpline and the National Cyber Crime Reporting Portal (cybercrime.gov.in) have made it easier to complain [2][7].

• When reporting gets easier, recorded crime can rise even if real crime stays the same.

• But the rise against the national trend still matters

• Overall registered crime fell 6% in the same year [1].
• Better reporting tools did not arrive only for cybercrime, yet only cybercrime rose this sharply.

• So the jump is not only better counting. Read it as "more crime + more reporting", not either one alone.

• Even 1,01,928 is far below the real number

• 33% of people say they often get fake delivery calls, and 31% regularly get investment scam calls [1].
• Spread across India's population, this is many crores of fraud attempts. Registered FIRs capture only a tiny share of that.

10. What the ₹8,690 Crore Figure Does Not Tell You

• It shows money stopped, not money lost
• CFCFRMS saved more than ₹8,690 crore across more than 24.65 lakh complaints [4].
• That is roughly ₹35,000 saved per complaint on average.

• The note has no figure for the total amount victims reported losing. Without that, we cannot tell whether ₹8,690 crore is most of the loss or a small part of it.

• The system works only if the victim is fast

• CFCFRMS is built to freeze money before fraudsters move it out [4].
• Money usually passes quickly through several accounts, one after another.

• So the people who gain most are those who know about 1930 and call within minutes. People who report late, or feel too ashamed to report, gain least.

• Where this matters for Mains

• Quote the ₹8,690 crore as a success of fast reporting [4].
• Then add that success is measured without the total loss figure, so the recovery rate is unknown.

11. The Hidden Victims: People Who Rent Out Their Bank Accounts

• Fraud needs 'mule accounts' to move stolen money
• A mule account is a bank account, usually in someone else's name, used to receive and pass on stolen money.
• I4C has warned that transnational organised gangs build illegal payment gateways out of such mule accounts [8].

• Up to 31 December 2025, 26.48 lakh Layer-1 mule accounts (the first accounts the stolen money lands in) were shared with banks through the Suspect Registry [7].

• The account holder can end up as the accused

• I4C tells citizens not to sell or rent their bank accounts, company registration or Udyam Aadhaar certificates [8].
• Money coming into such an account can lead to legal action, including arrest [8].

• A person tempted by a small fee for "lending" an account can end up facing criminal charges, while the gang behind it stays abroad.

• Why this changes the vulnerability question

• The survey asks who loses money [1]. It does not count people pulled in as mules.
• A full answer to "who is vulnerable" should include both groups: those who are cheated, and those who are used.

12. What Should Follow, and Who Should Do It

• I4C and banks: stop the money earlier, not only recover it later
• The Suspect Registry, launched on 10 September 2024 with banks, has already helped decline transactions worth ₹9,055.27 crore [7].
• That is more than the ₹8,690 crore saved after complaints through CFCFRMS [4][7].

• Blocking a payment before it happens protects victims who never report. Expanding the Registry to more banks and payment apps is the stronger lever.

• MHA: aim awareness at the people the data points to

• Current campaigns run through newspapers, Delhi Metro, influencers and Akashvani [5].
• The survey shows heavy internet users get targeted most, and better-off users lose most money [1].

• Messages should also reach salaried, educated and investing users, especially on fake investment offers (31% get such calls) [1], not only elderly or rural audiences.

• NCRB and MHA: measure the crime nobody reports

• NCRB data counts only registered cases [1].
• The Lokniti–CSDS and Common Cause survey showed what a victim survey can reveal that FIRs miss [1].

• A regular official victimisation survey (asking people directly whether they were cheated) would show the real scale and the real victims.

• Banks and I4C: treat mule-account holders as a prevention target

• Warnings against renting out accounts already exist [8].
• They should reach the same groups that fraud gangs recruit from, not only the general public.

13. Anchors for Answers

• Data: Cybercrime cases rose 17.9% to 1,01,928 in 2024 (NCRB), while overall registered crime fell 6% [1]
• Data: Suspect Registry declined transactions worth ₹9,055.27 crore; 26.48 lakh Layer-1 mule accounts shared with banks (to 31 December 2025) [7]
• Data: More than ₹8,690 crore saved through CFCFRMS across more than 24.65 lakh complaints (to 31 January 2026) [4]
• Report/Committee: Lokniti–CSDS and Common Cause survey, 2026: 8,306 citizens in 16 States. Time online predicts being targeted; wealth and education predict reported loss [1]
• Law/Case: Information Technology Act, 2000, Section 66D (cheating by personation using a computer resource)
• Scheme: I4C Suspect Registry (2024) blocks fraud before it happens; CFCFRMS (2021) and the 1930 helpline recover money after it [4][7]

14. Mains Relevance

• GS-III: challenges to internal security through communication networks; basics of cyber security; money laundering.
• GS-II: government policies and interventions; mechanisms for the protection of vulnerable sections.
• GS-IV: ethics of digital platforms and institutional accountability.
• Possible question stems: 1. Cybercrime in India is rising even as overall crime declines. Examine the reasons and assess the adequacy of institutional responses such as I4C. (250 words) 2. Vulnerability to cyber fraud is not confined to the digitally illiterate. Discuss in the light of recent survey evidence. (150 words) 3. Registered crime data understates the scale of cyber fraud. Suggest measures to improve reporting and victim redressal. (250 words)

15. Related Topics to Study Next

• Digital arrest scams: the fastest-growing type of fraud and the target of a dedicated government awareness campaign.
• NCRB 'Crime in India' report: the source of the official statistics and their limits.
• Information Technology Act and its cyber offence provisions: the legal basis for prosecuting cyber fraud.
• Bharatiya Nyaya Sanhita provisions on cheating: how fraud is prosecuted under the new criminal code.
• RBI measures against digital payment fraud: how banks share responsibility for fraud and limit customer liability.
• Digital Personal Data Protection framework: data leaks feed targeted scams.
• CERT-In: the technical cyber-security agency, which is different from I4C's policing and coordination role.
• UPI and the digital payments ecosystem: more transactions mean more exposure to fraud.

16. Common Errors / Trap Areas

• Wrong ministry: I4C is under MHA, not MeitY. CERT-In is the MeitY body [3].
• I4C's founding year vs its status change: it started as a scheme in 2018 and became an Attached Office in 2024 [3].
• Mixing up exposure and victimisation: time online predicts being targeted, while wealth and education predict reported financial loss [1].
• Reading NCRB numbers as the full picture: they count only registered cases, and fraud is chronically under-reported [1].
• Mixing up CFCFRMS and the 1930 helpline: CFCFRMS (launched 2021) is the system for reporting and freezing funds, and 1930 is the helpline that gives access to it [2][4].