Rajasthan Police issue festive sale cyber fraud advisory for Flipkart, Amazon shoppers
Synopsis
With Flipkart's Big Billion Days and Amazon's Great Indian Festival drawing millions of shoppers, Rajasthan's Cyber Crime Branch has issued a sweeping advisory flagging fake sites, UPI scams, and remote-access app traps — a timely reminder that India's festive season is as much a hunting ground for fraudsters as it is a bonanza for buyers.
Key Takeaways
Rajasthan Police Cyber Crime Branch (R4C) issued a cyber fraud advisory on 9 October 2026 ahead of festive e-commerce sales.
The advisory was issued on directions of DGP Rajiv Kumar Sharma and detailed by ADGP (Cyber Crime) V.K.
Fraudsters use fake websites, counterfeit apps, and pressure tactics like 'Only two minutes left' to trap shoppers.
A UPI PIN is needed only to send money — never to receive a refund or cashback; shoppers must never share it.
Remote-access apps such as AnyDesk and TeamViewer must not be installed at a stranger's request.
Victims are advised to contact their bank immediately and preserve transaction details including UTR number , screenshots, and the fraudster's phone number or URL.
Rajasthan Police Cyber Crime Branch (R4C) has issued a comprehensive advisory on 9 October 2026, warning online shoppers against cyber fraud during high-traffic festive sale events such as Flipkart's Big Billion Days and Amazon's Great Indian Festival. The advisory, issued on the directions of Director General of Police (DGP) Rajiv Kumar Sharma, urges consumers across the state to verify offers before making payments and avoid acting under artificial urgency.
How Fraudsters Target Festive Shoppers
Additional Director General of Police (Cyber Crime) V.K. Singh said cybercriminals routinely exploit the festive shopping season by luring buyers with steep discounts, limited-time cashback offers, and countdown pressure tactics. Messages such as 'Buy today', 'Only two minutes left', and 'Pay now or the offer expires' are specifically designed to push consumers into hasty, unverified transactions.
Fraudsters deploy a range of deceptive tools — fake websites, counterfeit mobile applications, suspicious hyperlinks, and misleading payment gateways — to siphon money from unsuspecting shoppers. The advisory notes that the presence of HTTPS or a padlock icon in a browser does not, by itself, confirm that a website is genuine.
Key Dos and Don'ts for Online Shoppers
The Cyber Crime Branch has laid out a clear set of precautions. Consumers are advised to cross-check all deals on the official website or app of the respective e-commerce platform and to refrain from clicking purchase links received via WhatsApp, SMS, Telegram, or social media. Mobile applications should be downloaded exclusively from the Google Play Store or Apple App Store.
On digital payments, the advisory stresses that a UPI PIN is required only to authorise outgoing payments — never to receive money or claim a refund. Shoppers should never enter their PIN or scan a QR code in response to a refund or cashback claim.
Customer care numbers sourced from Google Search or social media should not be trusted blindly; users must instead rely on support contacts listed directly within official apps or websites.
Remote-Access Apps and Public Wi-Fi Risks
The advisory explicitly warns against installing remote-access tools such as AnyDesk or TeamViewer at a stranger's request, and prohibits conducting banking transactions or payments while screen-sharing. Large payments and banking services should never be accessed over public Wi-Fi networks at malls, cafes, airports, or other shared spaces.
For added financial security, the police recommend using a dedicated card with a low spending limit or a separate bank account for online purchases, enabling international and online transactions only when strictly necessary, and keeping SMS and email alerts active for all bank accounts and cards.
What to Do If You Are Defrauded
Citizens who detect a suspicious or fraudulent transaction are advised to contact their bank or card issuer immediately and preserve all relevant evidence — including the transaction date, amount, UTR or transaction ID, phone number, website URL, and screenshots — to support any investigation. Reporting promptly can increase the chances of recovering lost funds.
This advisory comes ahead of what is typically the busiest online shopping period of the year in India, with billions of rupees in transactions expected across platforms during the festive window. Authorities say the volume of cyber fraud complaints tends to spike sharply during such sales seasons, making public awareness a critical first line of defence.
Point of View
However thorough, is only as effective as its reach — and the demographic most vulnerable to festive-season cyber fraud is often the least connected to official police communications. The R4C advisory covers the right ground: UPI misuse, fake apps, remote-access traps, and public Wi-Fi risks are all live threats. What it cannot substitute for is platform-level enforcement — Flipkart and Amazon must do more to surface warnings inside their own apps at the point of checkout, not leave it to law enforcement alone. India's cybercrime complaint volumes spike every October, yet conviction rates remain low, which means deterrence is weak and public education carries a disproportionate burden.
NationPress
9 Oct 2026
Frequently Asked Questions
What is the Rajasthan Police festive sale cyber fraud advisory about?
The Rajasthan Police Cyber Crime Branch issued an advisory on 9 October 2026 warning shoppers about cyber fraud during major festive e-commerce sales such as Flipkart's Big Billion Days and Amazon's Great Indian Festival. It details how fraudsters operate and lists precautions shoppers should take to protect their money.
How do cybercriminals target online shoppers during festive sales?
According to the advisory, fraudsters lure shoppers with fake discounts, limited-time offers, and cashback schemes, using pressure phrases like 'Only two minutes left' to provoke hasty decisions. They then direct victims to fake websites, counterfeit apps, or suspicious payment links to steal money.
Why should I never share my UPI PIN to receive a refund?
A UPI PIN authorises outgoing payments from your account — it is never required to receive money, claim a refund, or collect cashback. Fraudsters use refund or cashback pretexts to trick victims into entering their PIN, which instead transfers money out of the victim's account.
Which apps are dangerous to install during an online shopping fraud attempt?
The advisory specifically warns against installing remote-access applications such as AnyDesk and TeamViewer at a stranger's request. Once installed, these apps give fraudsters full control of your device, allowing them to access banking apps, capture OTPs, and drain accounts.
What should I do if I lose money to online fraud during a festive sale?
Contact your bank or card issuer immediately to report the fraudulent transaction and request a freeze or reversal. Preserve all evidence — the transaction date, amount, UTR or transaction ID, the fraudster's phone number or website URL, and screenshots — as these will be critical for any police or bank investigation.
