India’s Supreme Court has directed the central government to draft a standalone law that makes “digital arrest” a distinct criminal offense and closes the legal gaps that let deepfake enabled fraud run unchecked, according to Free Press Journal and a wire report carried by ANI and NewKerala. The court, hearing a suo motu case on cyber fraud, said existing statutes were not built to punish a scam that has already cost Indians nearly $345 million (₹3,000 crore), and the Centre’s own lawyers confirmed a draft bill covering both digital arrests and deepfakes is already in the works.

What happened	Supreme Court urged the Centre to enact a standalone law criminalizing “digital arrest” scams and covering deepfake fraud
When	Hearing held July 28, 2026; formal directions expected this week, per Free Press Journal
Who is affected	Victims of digital arrest scams nationwide, including a 73 year old Ambala woman and a senior citizen couple named in the case filings
Scale	Nearly $345 million (₹3,000 crore) lost; CBI probing roughly 20 cases with losses exceeding $1.1 million (₹10 crore) each
Fix or deadline	Centre says a draft bill covering digital arrests and deepfakes is in progress; no timeline given for introduction in Parliament

What Is a “Digital Arrest” Scam?

In a digital arrest scam, fraudsters pose as police, CBI, income tax or narcotics officials and tell a victim over video or voice call that they are under investigation. Victims are told to stay on camera, sometimes for days, while the callers threaten arrest unless money is transferred immediately to “clear” the case. Some operations have gone further, using AI generated forgeries of court orders and impersonated officials to make the threat look real, a tactic our earlier coverage of AI voice cloning and deepfakes reshaping financial fraud has tracked across multiple markets, not just India.

The case before the Supreme Court traces back to a 73 year old woman in Ambala who was defrauded of more than $115,000 (₹1 crore) after fraudsters used forged Supreme Court orders to convince her she was under investigation, according to NewKerala’s report of the ANI wire. Free Press Journal, citing the same proceedings, traces the suo motu action to a senior citizen couple who reported losing $172,000 (₹1.5 crore) to a similar impersonation scheme in October 2025.

What Did the Supreme Court Tell the Government?

According to Free Press Journal, Chief Justice Surya Kant led a bench that included Justice Joymalya Bagchi and Justice V Mohan in urging the Centre to define digital arrest as a specific criminal offense carrying stricter punishment, rather than leaving prosecutors to stretch existing fraud and impersonation provisions to fit the crime. The bench also pressed for the power to freeze the assets of accused persons once a prima facie case is established, before the money is laundered out of reach.

Justice Bagchi was explicit about the limits of what the court itself can do, telling the government that courts can apply existing offenses but cannot invent new crimes by judicial order alone, per Free Press Journal, which is why the bench pushed the request to Parliament rather than attempting to fill the gap itself. Solicitor General Tushar Mehta told the court a draft bill is already moving through government channels and “will take care of digital arrests, deepfakes, etc,” according to NewKerala’s report. Attorney General R Venkataramani added that an Inter Departmental Committee is finalizing a report on the legal and procedural gaps that have let the scam spread.

How Much Money Have Indians Lost to These Scams?

The court was told nearly $345 million (₹3,000 crore) has been swindled through digital arrest scams nationwide, according to NewKerala’s report of the hearing. The CBI is separately investigating roughly 20 major cases in which losses exceeded $1.1 million (₹10 crore) each, a figure corroborated by both NewKerala and Free Press Journal. Free Press Journal also reported that WhatsApp banned more than 9,400 accounts linked to digital arrest scams between January and March 2026 alone, a sign of how much of this fraud now runs through mainstream messaging apps rather than the phone network.

Much of the stolen money moves through networks of mule bank accounts before it disappears, the same laundering pattern our reporting on the Varanasi mule account gang supplying cyber fraud operations has documented elsewhere in India. The bench’s recommendations reflect that reality: it pushed for the Reserve Bank of India to formalize standard operating procedures for temporary debit holds on accounts suspected of receiving mule funds, and for the national Grievance Redress Module and Money Restoration Module to be operationalized so victims have a faster route to recovering funds before they move offshore.

Why Should Security Leaders Care About a Scam That Targets Individuals?

Digital arrest fraud has so far mostly targeted individuals and senior citizens rather than enterprises, but the underlying technique, a deepfaked authority figure used to pressure a target into an urgent financial decision, is the same one now showing up inside corporate fraud. India’s own market regulator has already flagged deepfake CEO impersonation reaching listed companies through the so called boss scam, and the pending legislation would, for the first time, give prosecutors a dedicated deepfake offense to charge rather than forcing them to rely on IT Act and Bharatiya Nyaya Sanhita provisions written before generative AI existed.

For CISOs, the legislative gap the court is describing is the same one shaping enterprise risk more broadly: laws written for a pre AI threat landscape struggling to keep pace with synthetic media, a dynamic our 2026 CISO perspective on how AI is changing the security function covers in more depth. India’s broader shift toward holding named executives accountable for cyber governance failures, detailed in our guide to India’s cybersecurity policy and CISO liability, means a standalone digital arrest and deepfake law would give regulators and boards a clearer bar to hold organizations to, particularly for banks and telecoms whose brands and call centers are impersonated in these scams.

What Happens Next?

The Supreme Court is expected to issue formal directions this week following the July 28 hearing, per Free Press Journal, though it has left the actual drafting to Parliament rather than attempting to legislate from the bench. The Centre has not given a timeline for introducing the bill described by Solicitor General Mehta, and the Inter Departmental Committee’s report on legal gaps has not been made public. Until the standalone law passes, prosecutors will keep charging digital arrest cases under India’s existing fraud, impersonation and IT Act provisions, the same patchwork the court says is no longer adequate for a scam that has cost victims nearly $345 million (₹3,000 crore).

Security teams at banks, telecoms and government facing organizations whose identities are routinely spoofed in these scams should expect the eventual law to bring mandatory reporting or takedown obligations, following the pattern set by India’s IT Rules amendments on synthetic content earlier this year. Until then, the most effective defense remains the same one used against any impersonation fraud: verifying urgent demands for money or personal information through a second, independently confirmed channel before acting.

Frequently asked questions