Audience hub
A practical security baseline for growing teams
Start with account security, payment verification, tested backups and a clear incident contact path.
UPI Fraud
Abuse of India’s Unified Payments Interface — fake collect requests, "wrong transfer" refunds, QR-code swaps, screen-sharing takeovers and mule-account cash-out — exploiting the fact that UPI payments are instant and irreversible.
Financial & Banking Fraud · Recognise, prevent, report and recover →
Investment & Trading Scam
Fraudsters run fake advisory groups, cloned brokerage apps and Ponzi schemes that show fabricated profits, then block withdrawals once the victim has deposited enough — often after months of grooming.
Financial & Banking Fraud · Recognise, prevent, report and recover →
Ransomware
Malware that encrypts an organisation’s data — and increasingly steals it first — then demands payment for decryption and for not publishing the stolen files.
Malware & Ransomware · Recognise, prevent, report and recover →
Business E-mail Compromise (BEC)
Attackers impersonate or hijack an executive, vendor or lawyer’s e-mail to redirect a legitimate payment into an account they control — usually with no malware involved at all.
Financial & Banking Fraud · Recognise, prevent, report and recover →
Fake Loan App & Digital Lending Fraud
Unregulated "instant loan" apps disburse tiny amounts, harvest the borrower’s contacts and photos, then extort repayment through blackmail, morphed images and mass shaming of family and colleagues.
Financial & Banking Fraud · Recognise, prevent, report and recover →
OTP Fraud & Remote Access Scam
Fraudsters posing as bank, wallet or platform support persuade the victim to reveal an OTP or install a screen-sharing app, then authorise transactions themselves in real time.
Financial & Banking Fraud · Recognise, prevent, report and recover →
QR Code Fraud (Quishing)
Malicious or swapped QR codes that send money instead of receiving it, or that lead to credential-phishing pages — exploiting a code format humans cannot read before they act.
Financial & Banking Fraud · Recognise, prevent, report and recover →
WhatsApp Fraud
Account takeover through registration-code theft, impersonation of family members from new numbers, malicious APK forwards, and fraudulent investment and task groups.
Social Media & Messaging Fraud · Recognise, prevent, report and recover →
Data Breach
Unauthorised access to and removal of personal or corporate data — through intrusion, misconfiguration, insider action or a compromised vendor — followed increasingly by extortion rather than quiet resale.
Data Breach & Identity Theft · Recognise, prevent, report and recover →
Cloud Misconfiguration & Exposure
Publicly reachable storage buckets, databases, dashboards and over-permissive identity policies — the leading cause of large data exposures, and one requiring no exploit at all.
Network, Web & Cloud Attacks · Recognise, prevent, report and recover →
Internet Banking Fraud
Unauthorised access to net-banking credentials through phishing, malware or credential reuse, used to add beneficiaries and drain accounts — often overnight while alerts are suppressed.
Financial & Banking Fraud · Recognise, prevent, report and recover →
Cryptocurrency Fraud
Fake exchanges, rug-pull tokens, cloud-mining schemes, celebrity giveaway scams and wallet-drainer approvals — all exploiting the fact that a blockchain transaction, once signed, cannot be reversed.
Financial & Banking Fraud · Recognise, prevent, report and recover →
Credit Card Fraud
Fraudulent use of card details obtained through phishing, skimming, data breaches or malware — most commonly for online card-not-present purchases where no physical card is needed.
Financial & Banking Fraud · Recognise, prevent, report and recover →
Invoice & Vendor Payment Fraud
An altered or fabricated invoice with changed bank details, sent from a compromised or lookalike vendor address — so a genuine payment for genuine goods lands in the fraudster's account.
Financial & Banking Fraud · Recognise, prevent, report and recover →
Advance-Fee Loan Scam
A loan "approved" without any checks, conditional on paying processing, insurance, GST or verification fees upfront — after which the lender stops responding and no loan is ever disbursed.
Financial & Banking Fraud · Recognise, prevent, report and recover →
Fake Income Tax & Refund Scam
Impersonation of the Income Tax Department claiming a pending refund or an outstanding demand, driving victims to a cloned e-filing page or a payment to "settle" a fabricated notice.
Impersonation & Authority Scams · Recognise, prevent, report and recover →
Fake Electricity Bill Scam
An SMS warning that power will be disconnected tonight over an unpaid bill, with a mobile number to call — leading to a remote-access app install and a drained bank account.
Impersonation & Authority Scams · Recognise, prevent, report and recover →
Technical Support Scam
Fake virus warnings or cold calls claiming to be from Microsoft, Apple or an ISP, leading to remote access, payment for imaginary problems, and often a follow-up "refund" scam.
Impersonation & Authority Scams · Recognise, prevent, report and recover →
Trojan Horse Malware
Malware disguised as legitimate software — a cracked application, an invoice document, a fake update — that installs a backdoor giving the attacker persistent control once run.
Malware & Ransomware · Recognise, prevent, report and recover →
Distributed Denial of Service (DDoS)
Flooding a service with traffic or expensive requests from many sources to make it unavailable — sometimes as extortion, sometimes as hacktivism, sometimes as cover for another intrusion.
Network, Web & Cloud Attacks · Recognise, prevent, report and recover →
DNS Hijacking & Domain Takeover
Manipulation of DNS records or the registrar account to redirect visitors and e-mail to attacker infrastructure — quietly, and with the victim's own domain name still in the address bar.
Network, Web & Cloud Attacks · Recognise, prevent, report and recover →
E-mail Spoofing
Forging the sender of an e-mail so it appears to come from a trusted person or organisation — solvable with DMARC for your own domain, but not for lookalikes or compromised accounts.
Social Engineering & Phishing · Recognise, prevent, report and recover →
Caller ID Spoofing
Falsifying the number shown on an incoming call or message so a fraudster appears to be calling from a bank, police station or government office — the trust signal people rely on most, and the easiest to fake.
Social Engineering & Phishing · Recognise, prevent, report and recover →
Instagram Fraud
Fake shops, investment pages, follower-boost services, cloned profiles and account takeovers driven by phishing links in direct messages and fake copyright-violation notices.
Social Media & Messaging Fraud · Recognise, prevent, report and recover →