Yes, online shopping fraud is a cyber crime in India. If a fake site or OLX seller took your money, call 1930 at once and file a complaint on cybercrime.gov.in. If a real seller or platform failed to deliver or refund, that is a consumer dispute: use the National Consumer Helpline (1915) and then the consumer commission via e-Daakhil.
Key takeaways
- Fraud (fake site, fake seller) goes to 1930 and cybercrime.gov.in; a bad but real seller goes to 1915 and consumer commission.
- You never need to scan a QR code or enter your UPI PIN to receive money.
- Check domain age, contact details, GSTIN and payment options before buying from an unknown site.
- On OLX and similar apps, meet in person, inspect, and pay only on handover.
- Report within hours: the faster the complaint, the better the chance of freezing the money.
Is online shopping fraud a cyber crime in India?
Yes. When someone deceives you over the internet into paying for goods that do not exist, or that they never intend to send, it is cheating under the Bharatiya Nyaya Sanhita, 2023 (BNS s.318, earlier IPC 420), and usually also cheating by personation using a computer resource under s.66D of the IT Act, 2000. Both are cognizable, so police must register your complaint.
Not every bad experience is fraud, though. India treats two situations very differently:
- Fraud: a fake website, a fake Instagram "boutique", or an OLX "seller" who disappears after taking an advance. This is a crime. Report it on the National Cyber Crime Reporting Portal or helpline 1930.
- Deficiency in service: a genuine marketplace or seller sends a wrong, fake-branded or damaged item, or refuses a refund. This falls under the Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020.
If you are unsure which applies, report both ways. The general reporting process, timelines and complaint tracking are covered in our guide on how to report cyber fraud in India; this page focuses on shopping and classifieds scams specifically.
How do fake shopping sites and OLX scams actually work?
Most cases fit one of a handful of scripts. Recognising the script is often enough to stop.
| Scam | How it plays out | The tell |
|---|---|---|
| Fake shopping website | Ads on Instagram or Facebook for branded shoes, phones or sarees at 70-90% off; site takes UPI only, then goes silent | New domain, no GSTIN, no real address, "UPI only", no cash on delivery |
| QR code "payment" (OLX seller targeted) | "Buyer" agrees your price instantly, then sends a QR code "to send you money" | Scanning a QR and entering a PIN always sends money, never receives it |
| "Army/CRPF officer" seller | Bike, car or furniture listed cheap because of a "transfer"; asks for advance plus "gate pass", "transport" or "GST" fees | Can't meet, uniform photo and ID card offered as proof, endless extra fees |
| Fake courier / delivery charge | SMS says your parcel is held; link asks for a small fee or app install | Unknown link, remote-access app, urgency |
| Social media reseller | Page with stolen product photos and fake reviews; takes advance, blocks you | Comments turned off, recently renamed page, no invoice |
| Refund or customer-care scam | You search a helpline number and call a fake one; "agent" asks you to install an app for refund | Number from a search ad or social post, not from the official app |
The common thread: urgency, a price too good to be true, payment by UPI or bank transfer only, and a reason why you cannot see the item or the person.
How do I know if an online shop is legit before paying?
Five minutes of checking prevents most losses. Before buying from a site or page you have not used before:
- Look at the domain. Misspelt brand names, extra words ("-sale", "-official-outlet") or odd endings are warning signs. A WHOIS lookup showing the domain was created a few weeks ago is a strong red flag.
- Find the seller's identity. The E-Commerce Rules require sellers and marketplaces to show legal name, address, customer care details and a grievance officer. Missing details mean you have no one to hold liable.
- Verify the GSTIN. If a GST number is shown, check it on the official GST portal and confirm the trade name and state match. Our guide to verifying a company in India explains MCA and GST checks step by step.
- Check payment options. Genuine stores usually offer cards, net banking or cash on delivery through a known payment gateway. "UPI to a personal number only" is the single biggest tell.
- Read reviews off the site. Search the store name plus "fraud" or "scam". Reviews on the site itself can be fabricated.
- Check return and refund policy. A missing or copy-pasted policy (mentioning another country's laws) suggests a cloned template.
None of these checks is conclusive alone, but two or more red flags together should end the purchase.
How to identify scammers on OLX and other classifieds
Classifieds apps connect strangers, so the safety rules are about the handover rather than the website.
- If you are selling: never scan a QR code or approve a UPI "collect request" from a buyer. You only share your UPI ID to receive money. Do not share OTPs that arrive during the "payment".
- If you are buying: do not pay an advance to hold an item, especially a vehicle. Meet at a public place, inspect the item, and pay at handover.
- Vehicles: check the registration details on the government's vehicle services before paying, and make sure the seller's name matches the RC. Transfer papers should be signed in person.
- Phones and electronics: check the IMEI on Sanchar Saathi to see whether it has been reported lost or stolen.
- Stay on the platform chat as long as possible; scammers push you to WhatsApp quickly so the platform can't flag them.
A buyer who agrees your price without bargaining, cannot come to see the item and insists on paying by QR is almost always a scammer.
What to do when you get scammed online shopping
Speed matters most. Funds sent by UPI or bank transfer are usually moved through several "mule" accounts within hours, so act in this order:
- Call 1930 (National Cyber Crime Helpline) and give the transaction ID, UPI ID or account details, amount and time.
- File on cybercrime.gov.in under financial fraud and save the acknowledgement number. Upload screenshots of the ad, chats, payment and website.
- Inform your bank or UPI app and ask them to raise a dispute. If you paid by card, ask about a chargeback for goods not received.
- Report the listing or page to OLX, Instagram, Facebook or the marketplace so others are warned.
- Preserve evidence: the URL, screenshots with dates, the seller's numbers and any courier tracking. Don't delete the chat even if it is embarrassing.
If an account linked to the scam is frozen, the money is not automatically refunded; release usually needs police or court process. If your own account gets frozen because a scammer routed money through it, see what to do when a bank account is frozen by cyber crime. For a lost UPI payment specifically, our UPI fraud guide covers bank and NPCI escalation.
How to complain against a genuine seller or marketplace
If the seller exists but delivered a fake, wrong or defective product, or won't refund, follow the consumer route:
- Write to the platform's grievance officer. Under the E-Commerce Rules, marketplaces must acknowledge a complaint within 48 hours and resolve it within one month.
- Register with the National Consumer Helpline on 1915, via the NCH app or the consumerhelpline.gov.in portal. Many companies respond through NCH's convergence process before litigation.
- File with the consumer commission online through e-Daakhil. District Commissions hear claims up to ₹50 lakh, and you can appear without a lawyer.
A legal notice from a lawyer before filing is optional but often prompts a settlement. Consumer complaints must generally be filed within two years of the cause of action.
Can the person behind a fake shop be traced?
Often, yes, but mostly by police. Bank account KYC, UPI handles, phone number subscriber details and domain registrar records can only be demanded through legal process, which the cyber cell can do and you cannot. Private individuals and detectives cannot lawfully obtain bank statements, KYC or call records.
What a verified investigator can do lawfully is open-source work: linking a page's photos, phone numbers and usernames across platforms, checking whether a "warehouse address" exists, and documenting it in a usable format for your complaint. This is the same approach described in finding who is behind a fake account. For businesses hit by repeated fake storefronts using their brand, a corporate investigation can support takedowns and police action.
Bottom line
Treat any deal that is very cheap, very urgent and UPI-only as a scam until proven otherwise. Vet the seller, pay at handover, and never scan a QR code to "receive" money. If you have been cheated, call 1930 within hours and file on cybercrime.gov.in; if a real seller let you down, use 1915 and e-Daakhil. For lawful help documenting a fraud or a fake seller, you can find a verified detective near you.
Sources & official links
This guide is general information, not legal advice. Laws and procedures change, and every case is different — speak to a lawyer about your situation. In an emergency, call 112.