Courier & Customs Scam — Why FedEx / DHL 'Customs Duty' Calls Are Fake
The FedEx / DHL customs-duty scam: how callers impersonate couriers and 'Mumbai narcotics' officers to extort lakhs from Indian professionals. Warning signs + reporting.
How the scam actually works
- Automated IVR calls thousands of numbers claiming a parcel in your name was seized.
- Victims who press 1 are transferred to a 'Mumbai narcotics / CBI' officer in police uniform on Skype/WhatsApp video.
- The 'officer' shows fake FIRs, threatens arrest, and demands you transfer money to a 'RBI verification account' to prove innocence.
- Victims often stay on the call for hours, unable to talk to family. Losses run into ₹20-80 lakh per victim.
Red flags — what to look for
- Any courier claiming a parcel from you contained narcotics, RBI-restricted items, or Aadhaar cards.
- Video call with someone in uniform demanding you stay on the line and not tell anyone ('national security').
- Instructions to transfer money to an unfamiliar bank account for 'verification' or 'clearance'.
- Threats of immediate arrest, immigration ban, or CBI raid within hours if you disconnect.
How to report in India
- Hang up. Real courier companies and Indian police never demand money over a video call.
- Call 1930 and file at https://cybercrime.gov.in — India's cyber cell tracks this specific scam under 'Digital Arrest'.
- Report the caller number and the video-call handle to the actual courier's fraud team (FedEx, DHL, BlueDart have India-specific fraud emails).
- Freeze net banking and inform your bank if any transfer was already initiated — RBI has a 24-hour recall window.
How to protect yourself going forward
Prevention is boring but works. Enable UPI transaction alerts on SMS + email (both, not just one). Set a daily UPI cap of ₹10,000 unless you actively need more — you can raise it back in 30 seconds when required. Add a separate low-balance current account for online payments and keep the salary account off UPI entirely. Lock your Aadhaar biometric at resident.uidai.gov.in — that alone stops most eKYC-based downstream fraud even if your OTP is leaked. Finally, tell one family member every time you get a suspicious message. Fraud thrives on isolation.
What actually helps recovery
Time. The single strongest recovery factor is reporting to 1930 within the first hour. RBI's Turnaround-Time framework requires banks to freeze beneficiary accounts within specific windows and the 1930 number is plugged directly into that flow. After 24 hours, freeze probability drops sharply. After 72 hours, recovery is rare. Screenshot everything: the SMS, the caller number, the UPI ID, and the debit alerts. All of these become evidence on cybercrime.gov.in.
Frequently asked questions
Do Indian police ever arrest people over a Skype call?
No. There is no such thing as a 'digital arrest' in Indian law. Every arrest requires a physical warrant served in person, and no officer will demand money to 'clear' you.
How did the caller know my Aadhaar / PAN details?
Bulk leaks from courier companies, telecom operators and banking KYC processes. Knowing your details is not proof they're legitimate.
Why do victims stay on the call for hours?
Manipulation: constant threats, fake senior officers joining, telling the victim they'll be arrested if they hang up. Isolation is the whole tactic — the fix is to tell family immediately and disconnect.
Which agency actually handles this?
The state cyber cell + I4C (Indian Cyber Crime Coordination Centre). File on cybercrime.gov.in — they route to the right state jurisdiction.
What if I already transferred money?
Call 1930 immediately, then your bank. If reported within 24 hours through the official RBI complaint window, the beneficiary account can be frozen and part of the money recalled.