Act this weekWhat happenedPolice warned of fake firecracker sites, courier address scams using a malicious app, and fake booking sites ahead of Diwali 2026.
Who is affectedOnline shoppers, anyone expecting parcels or gifts, travelers booking trains, buses or hotels, and older relatives and families.
What to do- 1Do not tap links or install apps from parcel, gift or address-update messages.
- 2Never share a banking OTP, UPI PIN, password or card CVV with anyone who calls you.
- 3If a caller claims to be police or customs, end the call. There is no legal 'digital arrest'.
- 4If you paid, contact your bank at once and report it on 1930 or cybercrime.gov.in.
Police have warned shoppers about three festive tricks ahead of Diwali 2026: fake firecracker websites, a courier scam that uses a malicious app, and fake booking sites. The Times of India reported the warning. The common thread is a message or deal that pushes you to act fast and pay.
What police warned about
The fake firecracker sites offer discounts that are too good to be true. Buyers are sent to unofficial payment accounts or messaging contacts. In the courier scam, a message says your parcel needs an address update or a small fee. The link may install a malicious app on your phone. The third warning covers fake train, bus and hotel bookings, often when real seats are sold out.
The bigger picture
The national numbers cover all online financial fraud, not just festival cases. Home Ministry figures show reported losses of ₹22,495 crore in 2025, down slightly from ₹22,848 crore in 2024. A crore is 10 million rupees. Complaints still rose about 25%, to 24,02,579. The reported reports do not show that losses peak at festival time, so there is no reason to panic. They do show how common these scams are.
Who it affects
Anyone shopping online or expecting a parcel or gift is a target. So are travelers booking trains, buses or hotels. Families should talk to older relatives. Senior citizens filed 1,03,488 complaints in 2025, with ₹4,005.12 crore in reported losses. Those groups overlap with others and the figures do not measure who is most at risk.
What to watch for
Urgency is the common thread: pay now, keep it secret, or lose your account or prize. Treat that pressure as a reason to check the claim yourself. Typical bait in the material includes:
- Crackers at 80% off, ordered over WhatsApp
- Diwali gift vouchers or a bumper prize you never entered
- A parcel on hold with a small fee to redeliver
- Callers posing as police or customs
There is no legal procedure called a digital arrest. In these scams, a caller claims a parcel, SIM card or bank account is linked to a crime. The victim is kept on a video call and told to move money. Trading apps are another trap. One Noida woman told police she sent nearly ₹1 crore into a scheme. An app showed gains, but withdrawals were blocked and more money was demanded.
What to do
The alert box above lists the steps. If you have already paid, speed matters. Contact your bank and report it on 1930 or cybercrime.gov.in. Do not pay anyone who offers to recover the money for a fee. That is a second scam.
What is not known
The reports do not say how many people have lost money to the Diwali 2026 scams so far. They also do not say which sites or apps are involved.
The takeawayIf a deal, parcel message or caller pushes you to pay fast, stop and check it yourself, and never share an OTP or UPI PIN.