The FedEx / customs / narcotics scam: full script and how to shut it down

The “FedEx customs” scam is now responsible for some of the largest single losses reported to Indian cybercrime helplines — individual victims have lost ₹40 lakh to ₹1 crore in a single sitting. It’s worth knowing the script cold, because the whole attack depends on you not recognising it.

The script, act by act

Act 1 — The courier

A polite voice from “FedEx / DHL / BlueDart customer service” calls. A parcel in your name is being held at Delhi / Mumbai customs. It contains — and here they pause — several passports, five kilograms of MDMA, and credit cards. They ask if you would like to be transferred to the cybercrime division to file a complaint.

Act 2 — The “police officer”

You’re transferred (or the same actor changes tone). A stern officer — often with a fake uniform on video — explains you’re a suspect in a narcotics case. They read out your Aadhaar number. They put you on a “digital arrest” and instruct you not to disconnect, not to leave the room, not to speak to family.

Act 3 — The transfer

To “verify” your accounts are not linked to money laundering, they instruct you to transfer your savings to an RBI-controlled “verification account.” Once verified, everything will be refunded within 30 minutes. It’s never refunded.

The 4 things the script depends on

1. Isolation. You’re on the call for hours; you can’t consult anyone.
2. Fear of shame. Being named in a drugs case is socially catastrophic; the scammer knows most people would rather pay than have family find out.
3. Authority theatre. Fake uniform, fake room, fake court seal in the background.
4. The false promise of refund. The whole thing is framed as temporary custody, not theft.

How to shut it down in 30 seconds

Memorise these three facts:

1. Indian courier companies never phone individuals about customs. Customs correspondence is by written notice.
2. Indian police never arrest anyone over a video call. “Digital arrest” does not exist as a legal concept.
3. The RBI does not operate personal “verification accounts” that citizens transfer to. Ever.

If any one of these three appears in a call, hang up. Then walk to a family member, tell them what just happened, and call 1930.

If you already transferred

Every minute matters. Call 1930 from any phone right now — the cybercrime helpline can freeze the receiving accounts if you call within the first hour. Then file on cybercrime.gov.in and take the acknowledgement to your bank branch. See our step-by-step reporting guide for exactly what to say.

If you have elderly parents

Print the three facts above and stick them on the fridge. This scam disproportionately targets people over 55, and the shame element keeps victims from reaching out until it’s too late. Read our next post, Protecting elderly parents from phone scams, for a full checklist.