Electricity or Gas Will Be Disconnected Tonight Unless I Pay or Update KYC: How Utility Smishing Scams Work in India

2026 guide to fake disconnection SMS, KYC links, malicious APKs, remote access, payment tracing, Chakshu, 1930 and digital evidence

By Advocate Ankit Kumar Singh

Last verified: 12 August 2026

Direct Answer: What Should I Do If an SMS Says My Electricity or Gas Will Be Disconnected Tonight?

Do not pay through the message, do not call the number supplied in it, do not install an APK and do not allow remote access to your phone merely because the message threatens disconnection tonight.

Instead, independently open the genuine electricity-distribution company, gas provider or utility website/app, or use the customer-care number printed on an authentic previous bill or other independently verified source.

Check:

• consumer/account number;
• actual outstanding amount;
• bill due date;
• whether any disconnection process genuinely exists;
• whether KYC is actually pending; and
• the authorised payment channels.

A genuine-looking SMS sender name is useful evidence but does not, by itself, conclusively prove that the message was authorised by the genuine utility.

If no money has been lost but the communication appears fraudulent, preserve it and consider reporting the suspicious call/SMS/WhatsApp communication through the Department of Telecommunications’ Sanchar Saathi / Chakshu facility.

If money has already been transferred or an unauthorised transaction has occurred, promptly notify the relevant bank/payment provider, call 1930 and complete the complaint through the National Cybercrime Reporting Portal at cybercrime.gov.in.

1. Why the “Disconnected Tonight” Message Is So Effective

Utility-smishing fraud is built around a problem almost every consumer understands immediately: losing electricity or gas service.

The criminal does not initially need to convince the victim that an investment will make money or that a lottery has been won. The scammer only needs the victim to believe:

“My electricity may stop tonight if I do nothing.”

The psychological structure usually combines:

• urgency — “today”, “tonight”, “within two hours”;
• authority — electricity board, DISCOM, gas company, billing department;
• loss avoidance — disconnection of essential service;
• technical confusion — KYC, meter update, backend update, consumer-number verification;
• small initial compliance — call this number, click this link, pay ₹10 or ₹20 for verification;
• escalation — app installation, remote access, banking credentials or larger payment.

That sequence matters because the final debit may look voluntary when examined in isolation even though it followed a carefully engineered deceptive chain.

2. What Is Smishing?

Smishing is the SMS or mobile-message form of phishing.

The attacker uses a deceptive text message to induce a person to:

• click a malicious link;
• visit a fake website;
• download software;
• reveal credentials;
• call a fraud operator;
• transfer money; or
• perform another action advantageous to the fraudster.

In a utility scam, the message itself is often only the entry point.

The investigation should therefore ask:

What happened after the victim read the SMS?

3. Common Electricity / Gas Disconnection Messages

Examples of fraud narratives may include:

• “Dear consumer, electricity will be disconnected tonight due to non-payment.”
• “Your last bill has not been updated in our system.”
• “KYC verification pending. Supply will be disconnected.”
• “Meter account will be blocked today.”
• “Call electricity officer immediately.”
• “Update consumer number through the link.”
• “Pay ₹10 verification amount to prevent disconnection.”
• “Gas connection KYC expired. Update immediately.”
• “Subsidy / PNG / LPG connection will be suspended.”

The wording alone does not determine authenticity.

The correct test is independent verification through the utility’s genuine infrastructure.

4. A Real Utility May Send Genuine Billing Messages — So Do Not Use an Overbroad Rule

A safe cyber-fraud guide should not tell readers that every electricity-related SMS is fraudulent or that a legitimate utility can never send a payment reminder.

Utilities may lawfully send billing, due-date, outage, meter, service or customer-information communications.

Therefore the correct rule is:

Do not authenticate a payment request merely because the SMS looks official. Independently verify the underlying account and authorised payment route.

Compare:

• consumer number;
• billing period;
• amount;
• due date;
• official domain;
• official mobile application;
• customer-care number printed on the real bill;
• authorised payment gateway; and
• utility’s published disconnection/KYC procedure.

5. Preserve the SMS Header — It Can Be Important Telecom Evidence

Many legitimate commercial or service SMS messages appear under an alphanumeric sender header rather than an ordinary ten-digit mobile number.

TRAI maintains a Header Information Portal through which users can query headers associated with commercial and government awareness communications.

Preserve:

• complete sender header exactly as displayed;
• prefix/suffix formatting;
• full SMS text;
• date;
• exact time;
• SIM slot/number on which received, if relevant;
• message thread;
• link contained in the SMS;
• callback number;
• screenshot showing the complete message context.

Do not crop the image so tightly that the sender header, timestamp or preceding/following messages disappear.

Important Evidentiary Distinction

A header resembling the genuine utility does not automatically establish that:

• the genuine utility authored the message;
• the message template was authorised;
• the genuine utility controlled the callback number;
• the linked website belonged to the utility; or
• the payment beneficiary belonged to the utility.

The telecom route must be correlated with the rest of the evidence.

6. TRAI Header Information: What It Can and Cannot Prove

TRAI’s Header Information Portal is useful for identifying the Principal Entity associated with registered commercial/government communication headers.

That can help answer:

• Is this header registered?
• Which entity is associated with it?
• Is there a look-alike header?
• Does the visible header broadly correspond with the claimed sender?

However, the public header lookup is not a complete criminal-attribution system.

An investigation may separately require records concerning:

• Principal Entity;
• registered telemarketer/aggregator;
• content template;
• traffic route;
• originating telecom provider;
• delivery logs;
• timestamps;
• related callback number; and
• other telecom identifiers.

7. Shortened URLs: Why the Link Deserves Separate Preservation

Fraudsters may use shortened links to hide the destination domain.

Instead of displaying:

https://suspicious-example-domain.invalid/utility-kyc

the SMS may show only a shortened redirect.

CERT-In specifically recommends caution with shortened URLs and advises users to identify the full destination before trusting them.

If you have NOT clicked the suspicious link

• do not click merely to investigate it yourself;
• preserve the original text;
• record the shortened URL exactly;
• independently verify your bill through the official utility channel.

If you already clicked it

Preserve, where available:

• browser history;
• resolved destination URL;
• screenshots;
• download history;
• files downloaded;
• credentials entered;
• payment attempts;
• date/time; and
• device used.

8. Fake Utility Website: What Should Be Preserved?

A phishing webpage may imitate:

• utility logo;
• consumer-number interface;
• bill-payment screen;
• KYC form;
• payment gateway;
• customer-care page; or
• mobile application download page.

Preserve:

• full domain and URL;
• page title;
• screenshots;
• consumer information requested;
• telephone numbers;
• UPI IDs;
• QR codes;
• APK download links;
• email addresses;
• payment processor/merchant identity displayed;
• browser warnings; and
• certificate/domain information where professionally collected.

Do not repeatedly submit personal information merely to “test” the site.

9. The Dangerous Escalation: “Download This App to Update KYC”

If an electricity or gas message directs you to install an APK received through SMS, WhatsApp, Telegram or an unknown webpage, the incident changes character.

It may now involve potential device compromise.

CERT-In’s Android-malware advisories demonstrate that malicious APKs distributed by social engineering may seek permissions capable of exposing:

• SMS messages;
• bank OTPs;
• notifications;
• contacts;
• device information;
• keystrokes;
• files; and
• other sensitive information.

An alleged electricity-bill application has no logical reason to demand unrelated, high-risk privileges merely to show a bill.

Critical warning signs

• “Enable installation from unknown sources.”
• “Allow Accessibility.”
• “Allow reading SMS.”
• “Allow notification access.”
• “Set as device/home application.”
• “Install Update.”
• app disappears after installation;
• unexplained VPN/profile;
• bank OTPs appear unexpectedly.

10. If You Installed the APK: Immediate Response

1. Disconnect mobile data and Wi-Fi.
2. Stop banking from the suspected device.
3. Do not enter another OTP, PIN or password on it.
4. Use a separate clean device to contact banks/payment providers.
5. Review recent transactions.
6. Preserve basic application/message evidence where this can safely be done offline.
7. Follow appropriate malware-removal/security guidance.
8. Change exposed credentials/UPI PIN from a trusted environment.
9. If money was lost, call 1930 and complete NCRP reporting.

Do not leave a compromised device connected merely to obtain perfect screenshots.

11. Remote-Screen / Remote-Access Utility Scam

Another common escalation is:

“I am the electricity officer. Install this application so I can update the bill from my side.”

Remote-support or screen-sharing software may itself be legitimate technology.

The risk lies in granting control or visibility to an unknown caller.

The caller may attempt to:

• watch the victim open banking applications;
• observe credentials or notifications;
• guide the victim into creating a beneficiary;
• cause a UPI/card transaction;
• obtain card details;
• manipulate browser sessions;
• read incoming OTP information; or
• direct the victim to approve a transaction disguised as “verification”.

Evidence to preserve

• remote-access app name;
• installation timestamp;
• session ID/code where available;
• caller number;
• call duration;
• screenshots;
• permissions;
• transactions during the session;
• OTP/alert times;
• time the remote session ended.

12. “Pay ₹10 to Update KYC” — Why a Small Amount Can Be Dangerous

The first payment may be intentionally small.

Its purpose may be to:

• create trust;
• obtain card details;
• move the victim into a fake payment page;
• identify the bank used;
• cause installation of malicious software;
• induce a larger payment later; or
• test whether the victim will follow instructions.

Do not assume:

“It is only ₹10, therefore there is no risk.”

Always verify the transaction through the utility’s independently obtained official payment channel.

13. UPI / QR / Bank Transfer: Follow the Money

The financial trail may become more useful for attribution than the wording of the original SMS.

UPI

• VPA / UPI ID;
• displayed beneficiary;
• UTR/RRN;
• amount;
• time;
• payment app;
• QR code;
• bank statement.

Bank Transfer

• beneficiary account;
• beneficiary name;
• IFSC;
• UTR;
• amount;
• time;
• onward transaction information where obtained by investigators.

Card / Merchant Transaction

• merchant descriptor;
• transaction reference;
• acquirer/payment gateway;
• amount;
• authentication details;
• dispute reference.

The first account receiving money should not automatically be labelled the mastermind.

Investigators should examine:

• account control;
• knowledge;
• commission;
• repeat credits;
• withdrawal pattern;
• onward transfers;
• device/IP links;
• communications; and
• relationship with the fraud operator.

14. Chakshu vs NCRP vs 1930 — Which One Should I Use?

Situation	Primary Route	Purpose
Suspicious electricity/gas SMS or WhatsApp received; no loss yet	Chakshu / Sanchar Saathi	Report suspected fraudulent telecom communication
Spam/UCC communication requiring telecom complaint/report	TSP / TRAI UCC framework	Telecom complaint/reporting and sender investigation
Cybercrime actually occurred	NCRP	Cybercrime complaint
Money transferred / cyber-financial fraud	Bank + 1930 + NCRP	Rapid financial-fraud reporting and tracing intervention
Threats / serious criminal conduct requiring immediate police intervention	Police / Cyber Police plus NCRP as appropriate	Criminal investigation

These mechanisms can complement one another.

Chakshu is not a substitute for immediately contacting the bank and 1930 after a completed financial fraud.

15. How to Use Chakshu Effectively

Preserve the communication before reporting it.

Depending upon the available reporting fields, keep ready:

• type of communication — SMS / call / WhatsApp;
• sender number/header;
• date;
• time;
• fraud category;
• screenshot;
• message content;
• callback number;
• URL;
• claimed organisation.

Chakshu helps DoT identify suspected misuse of telecom resources for fraud.

Its telecom-prevention purpose should remain conceptually separate from:

• criminal investigation;
• bank reversal;
• NCRP complaint;
• 1930 financial intervention.

16. TRAI Spam/UCC Complaint Is Another Telecom Layer

TRAI permits consumers to complain/report unsolicited commercial communication through the telecom-service-provider mechanism.

TRAI states that complaints made within the prescribed three-day period are treated as complaints capable of further investigation under the UCC framework, while later submissions may be treated as reports.

The TSP may ask for:

• communication mode;
• sender details;
• date/time;
• communication category; and
• description.

This telecom-regulatory route should not be confused with NCRP reporting for cybercrime.

17. What Telecom Records May Be Needed to Reconstruct the Fraud?

A serious investigation may require more than the screenshot visible on the victim’s phone.

Subject to lawful process and provider retention, relevant telecom evidence may include:

• SMS sender/header information;
• Principal Entity information;
• registered telemarketer/aggregator information;
• content-template details;
• message delivery timestamps;
• originating/terminating telecom information;
• subscriber information for callback numbers;
• call detail records;
• IMEI/device-related information where lawfully relevant;
• cell/tower information where required and available;
• WhatsApp/mobile-number attribution records through appropriate lawful process; and
• complaint history concerning the telecom resource.

No single record automatically identifies the ultimate fraudster.

A SIM subscriber, header owner or telemarketer may require further investigation to determine actual use, knowledge and control.

18. What Bank and Payment Records May Be Needed?

Depending upon the transaction method, investigators may require:

• beneficiary-account KYC;
• account-opening records;
• transaction statement;
• UTR/RRN;
• UPI VPA mapping;
• merchant ID;
• merchant onboarding/KYC;
• acquirer/payment-aggregator details;
• device/login/IP data where retained;
• beneficiary additions;
• cash withdrawals;
• ATM records;
• onward transfers;
• freeze/lien information;
• linked accounts; and
• other records lawfully obtained during investigation.

The objective is to reconstruct:

VICTIM → FIRST BENEFICIARY → ONWARD LAYERS → CASH-OUT / ULTIMATE CONTROL.

19. Bank Dispute: Report Immediately, But Do Not Assume Automatic Refund

RBI’s customer-protection framework requires banks to provide mechanisms for customers to report unauthorised electronic transactions and emphasises prompt reporting.

After notification, the bank is expected to take immediate steps to prevent further unauthorised transactions.

However, liability depends upon the facts.

Important questions include:

• Did malware execute the transaction?
• Did a remote-access operator control the process?
• Did the customer share credentials?
• Did the customer personally enter a UPI PIN because of deception?
• Was there a third-party system breach?
• When was the bank notified?
• What does the bank’s authentication evidence show?

A social-engineering scam involving victim-authorised payment can raise different issues from a transaction that was technically initiated without the victim’s authorisation.

Therefore:

Always dispute promptly; never promise automatic refund.

20. What If I Only Clicked the Link but Did Not Pay?

The response depends upon what actually happened.

Clicked but entered nothing

• close the page;
• preserve URL/history if useful;
• verify the utility independently;
• watch for subsequent suspicious activity.

Entered customer ID / mobile number

Expect possible follow-up social engineering because the attacker may now know that the number belongs to an active utility consumer.

Entered password/card/bank credentials

Secure the relevant accounts immediately through official channels.

Downloaded a file/APK

Treat the incident as possible device compromise and assess the file/application separately.

21. What If I Installed a Remote-Access App but No Money Has Yet Moved?

End unauthorised access.

From a trusted device:

• review banking activity;
• review important passwords;
• review email;
• review payment applications;
• review unknown beneficiaries;
• review recently installed applications;
• review device administrator/accessibility/notification permissions where relevant.

Preserve the call and app/session evidence before unnecessarily deleting all traces where a serious complaint or forensic investigation may follow.

22. Criminal-Law Framework

Conduct	Potential Provision	Legal Caution
Deception inducing delivery of money/property	BNS Section 318	Cheating ingredients must be proved
Fraudster pretends to be electricity/gas official or authorised representative	BNS Section 319	Cheating by personation where ingredients are established
Cheating by personation through SMS, WhatsApp, website or communication device	IT Act Section 66D	Electronic/computer-resource personation
Fraudulent use of another person’s password/unique identification feature	IT Act Section 66C	Identity-theft ingredients required
Unauthorised computer/device access or contaminant-related activity	IT Act Sections 43 / 66	Section 66 requires dishonest/fraudulent conduct concerning relevant Section 43 acts
False electronic documents/payment records	BNS forgery provisions may require examination	Do not mechanically classify every fake webpage as statutory forgery

A criminal complaint should primarily narrate what happened and preserve the evidence rather than simply list every cyber section available.

23. Can I Report the Fraud Locally If the Number or Account Is in Another State?

Yes, cyber-fraud infrastructure frequently spans multiple jurisdictions.

Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023 provides for giving information relating to a cognizable offence irrespective of the area where it was committed, subject to the statutory procedure.

That is relevant where:

• victim is in another Indian jurisdiction;
• SIM belongs to another State;
• bank beneficiary is elsewhere;
• website is hosted outside the State;
• UPI recipient is elsewhere;
• fraud operator is unknown.

24. Electronic Evidence Under the Bharatiya Sakshya Adhiniyam, 2023

SMS messages, WhatsApp chats, URLs, screenshots, APKs, remote-access records, UPI transactions, bank records and call evidence are electronic/digital evidence.

Sections 61 to 63 of the Bharatiya Sakshya Adhiniyam, 2023 provide the statutory framework concerning electronic/digital records and their proof.

The Section 63 certificate framework includes source/device information and hash-value fields.

Preservation principles

• retain original device where material;
• retain original message thread;
• retain original downloaded file where forensic examination may be necessary;
• preserve source URL;
• preserve timestamps;
• preserve original bank alerts;
• retain UTR/RRN;
• avoid unnecessary cropping/editing;
• use working copies for annotation;
• document hashes where appropriate in forensic cases.

25. The Evidence Matrix

Fraud Stage	Evidence	Potential Source
SMS delivery	Header, number, message, timestamp	Victim device / telecom records
Short URL	Original short link and resolved destination	Message / browser / technical investigation
Fake website	URL, domain, page, server/registrar trail	Browser / hosting / registrar
APK	File, filename, permissions, hash, package information	Device / forensic examination
Telephone call	Number, time, duration, recording	Device / telecom provider
Remote access	App, session ID, logs, screenshots	Device / application records
Payment	VPA, account, merchant, UTR/RRN	Bank/payment provider
Onward movement	Transfers, withdrawals, linked accounts	Investigating agency / banks

26. Ten-Minute Emergency Checklist

1. Do not pay through the suspicious message.
2. Do not call the number supplied in it.
3. Preserve the full SMS/WhatsApp communication.
4. Record the sender header/number.
5. Independently open the utility’s genuine website/app.
6. Check the real outstanding bill/KYC status.
7. Do not install APK or remote-screen software.
8. If malware was installed, isolate the device.
9. If money moved, call the bank and 1930 immediately.
10. Complete NCRP and preserve every acknowledgement.

27. Suggested Cybercrime Complaint Chronology

On [DATE] at approximately [TIME], I received an SMS / WhatsApp message
from [SENDER HEADER / NUMBER].

The message represented itself as being connected with:
[UTILITY / ELECTRICITY DISTRIBUTION COMPANY / GAS PROVIDER].

It stated:
[EXACT DISCONNECTION / KYC / PAYMENT REPRESENTATION].

The message contained:
[CALLBACK NUMBER / URL / SHORT URL / APK / PAYMENT LINK].

I independently deny / could not verify the representation from the genuine
utility at that stage.

Thereafter, I:
[CALLED THE NUMBER / CLICKED THE LINK / INSTALLED THE APP /
ALLOWED REMOTE ACCESS / MADE PAYMENT].

Caller number:
Claimed designation:
Remote-access application:
APK/file name:
URL/domain:

Financial transaction, if any:

Amount:
Date/time:
Mode:
UPI ID / account / merchant:
UTR/RRN/reference:

I subsequently verified through [OFFICIAL UTILITY CHANNEL] that:
[FACTUAL VERIFICATION].

I reported the incident through:

Bank complaint:
1930 acknowledgement:
NCRP acknowledgement:
Chakshu reference:
TRAI/TSP complaint reference, if any:

I have preserved the original communication, sender/header information,
URLs/files, call records, payment information and relevant electronic evidence.

I request investigation of the telecom origin, fraudulent digital infrastructure,
device/application trail, beneficiary/payment chain and persons responsible.

28. Fraud Reconstruction Flowchart

URGENT DISCONNECTION / KYC MESSAGE
                ↓
PRESERVE HEADER + NUMBER + URL
                ↓
VERIFY REAL UTILITY INDEPENDENTLY
                ↓
      ┌─────────┼───────────┐
      ↓         ↓           ↓
 SHORT URL     APK /      DIRECT
 FAKE PAGE     REMOTE      PAYMENT
      └─────────┼───────────┘
                ↓
  TELECOM + DEVICE + MONEY EVIDENCE
                ↓
    ┌──────────────────────────────┐
    ↓                              ↓
SUSPICIOUS ONLY               FRAUD / MONEY LOST
CHAKSHU                       BANK + 1930 + NCRP
    └──────────────────────────────┘
                ↓
TRACE ACTUAL OPERATOR + BENEFICIARY

29. Frequently Asked Questions

Q1. I received an SMS saying electricity will be disconnected tonight. Is it definitely fake?

Not necessarily. Utilities may send genuine billing/service communications. Do not authenticate the SMS through the number or link contained in the same message. Independently check the bill through the genuine utility website/app or verified customer-care channel.

Q2. How do I check whether the SMS sender header is genuine?

Preserve the exact header and use TRAI’s Header Information Portal where applicable. The result is one evidentiary layer and should be compared with the utility’s authentic communication and telecom records.

Q3. Should I click the shortened link to see where it goes?

No. Do not deliberately expose yourself merely to investigate a suspicious link. Preserve it and verify the utility independently.

Q4. The caller asked me to install an APK for bill update. Is that normal?

Treat an unsolicited APK delivered through SMS/WhatsApp or an unknown website as a serious security warning. CERT-In advises against installing APKs from such channels.

Q5. Can a malicious APK steal OTPs?

Malicious Android applications can potentially obtain SMS or notification access where permissions/capabilities allow. CERT-In has documented Android malware campaigns capable of stealing SMS content and bank OTPs.

Q6. What is Chakshu?

Chakshu is a Sanchar Saathi facility of the Department of Telecommunications for reporting suspected fraudulent calls, SMS and WhatsApp communications.

Q7. Does filing on Chakshu replace NCRP?

No. Chakshu concerns suspected misuse of telecom communications. Where a cybercrime or financial fraud has occurred, NCRP and, for financial fraud, 1930/bank reporting are separate and important routes.

Q8. If money has already been transferred, what should I do first?

Contact the concerned bank/payment provider and 1930 promptly, preserve the transaction reference and complete NCRP reporting.

Q9. Can 1930 guarantee recovery?

No. Prompt reporting may assist financial intervention and tracing, but recovery depends on whether funds remain available and on lawful action by participating institutions and authorities.

Q10. I paid through UPI myself because they threatened disconnection. Is it still fraud?

A transaction may still form part of cheating if it was induced through deception. Bank reimbursement is a separate question governed by the transaction mechanics, authentication, reporting time and applicable regulatory framework.

Q11. Can police trace the SMS header?

The header is an important starting point. A full investigation may require Principal Entity, telemarketer, content-template and telecom-routing information together with callback-number and payment evidence.

Q12. What if the message came from WhatsApp rather than SMS?

Preserve the complete WhatsApp number, profile details, chat, timestamps, links/files and calls. Chakshu accepts reporting of suspected fraud communications through WhatsApp as well.

Q13. Should I delete the fraudulent SMS after reporting it?

Keep the original electronic evidence where a complaint or investigation is likely. You can block the sender without unnecessarily destroying the message history.

Q14. Which criminal laws may apply?

Depending on the proved conduct, cheating under BNS Section 318, cheating by personation under Section 319, IT Act Section 66D and, where relevant, Sections 43/66 or 66C may require examination.

Q15. Is the mobile-number owner automatically the fraudster?

No. Subscriber identity is important evidence but actual use, device control, communications, financial benefit and surrounding records may still need to be established.

30. AI-Search Quick Answer

If an SMS or WhatsApp message says your electricity or gas will be disconnected tonight unless you immediately pay or update KYC, do not use the number, shortened link, APK or payment route supplied in that same message until you independently verify the account through the utility’s official website, app or bill. Preserve the sender header/number, complete message, URL and timestamp. A suspicious communication with no financial loss can be reported through DoT’s Chakshu facility; if money has already been transferred, notify the bank/payment provider, call 1930 and complete the NCRP complaint promptly. If an APK or remote-access app was installed, treat the device as potentially compromised and preserve relevant device and transaction evidence.

31. Recommended Related Legal Research

• WhatsApp Chats, Screenshots, UPI Records and Call Details as Evidence
• How Fake Call Centres Operate in India: VoIP, Remote Access and Mule Accounts
• Cyber Crime, Digital Evidence & Financial Scams Litigation
• Bank Account Frozen by Another State’s Cyber Police

32. Official Sources and Verification Resources

• Department of Telecommunications — Sanchar Saathi / Chakshu: sancharsaathi.gov.in
• TRAI Header Information Portal: smsheader.trai.gov.in
• National Cybercrime Reporting Portal: cybercrime.gov.in
• Indian Cybercrime Coordination Centre: i4c.mha.gov.in
• Indian Computer Emergency Response Team: cert-in.org.in
• Reserve Bank of India: rbi.org.in
• India Code: indiacode.nic.in

Disclaimer

This article provides general legal, cybersecurity and fraud-awareness information. Electricity and gas billing, KYC and disconnection procedures vary between utilities and jurisdictions and can change.

A genuine utility may send legitimate service or payment communications. Readers should therefore verify the specific account through the utility’s independently obtained official channels rather than assume every message is fraudulent.

References to criminal provisions are illustrative of provisions that may require examination according to the established facts. They should not be mechanically applied to every suspicious message.

Chakshu, TRAI telecom reporting, NCRP, 1930, bank disputes and police proceedings serve different functions and may need to be used together depending upon the incident.

Related Delhi legal guides

Economic-offence proceedings · White-collar crime defence · SFIO investigation guide

Document-first assessment

Start with the latest legal instrument and next deadline

Organise the current summons or order, case identifiers, a dated chronology and the transaction or property record before seeking case-specific advice.

Prepare for consultation