Umang Sisodia • • 3 min read • 8 views

How a Former Army Officer Lost ₹28 Lakh in a Three‑Hour Pension Scam

How a Former Army Officer Lost ₹28 Lakh in a Three‑Hour Pension Scam

A Harrowing Tale of Digital Deception

When Ravi Kumar, a retired Indian Army sergeant, logged into his pension portal on a quiet Tuesday morning, he expected the routine credit of his monthly allowance. Within three hours, nine unauthorized transactions siphoned ₹28 lakh from his account, leaving him financially crippled and emotionally shaken.

The Anatomy of the Scam

  1. Phishing Hook – The fraud began with a convincing SMS that appeared to be from the Defence Pension Disbursal Office, urging Ravi to verify his details via a link.
  2. Clone Website – The link redirected to a near‑identical replica of the official portal, harvesting his login credentials.
  3. Credential Hijack – Hackers used the stolen ID to log in, change the registered mobile number, and add multiple UPI and IMPS beneficiaries.
  4. Rapid Cash‑Out – Nine transactions, each ranging from ₹2 lakh to ₹5 lakh, were executed in rapid succession, exploiting the three‑hour window before any OTP or alert could be acted upon.

Why Retired Defence Personnel Are Prime Targets

  • Trust in Government Channels – Ex‑servicemen often rely on official communication, making them less skeptical of seemingly authentic messages.
  • Limited Digital Literacy – While many pensioners now use mobile banking, comprehensive cybersecurity training remains scarce.
  • High‑Value Accounts – Defence pensions are relatively sizable, presenting lucrative bait for cybercriminals.

The Wider Landscape of Pension Cyber Fraud in India

According to a Reserve Bank of India (RBI) report released in early 2024, cyber frauds targeting pensioners rose by 38 % year‑on‑year. The report highlighted:

  • ₹1,200 crore lost across the country in the last fiscal year.
  • UPI and IMPS as the most abused payment channels.
  • A lack of real‑time fraud detection mechanisms for government‑issued accounts.

Lessons for the Community

1. Verify Before You Click

Never trust unsolicited messages that request personal data. Always navigate to official portals by typing the URL directly.

2. Enable Two‑Factor Authentication (2FA)

Most banks now offer device‑linked authentication or biometric verification—activate them immediately.

3. Regularly Review Transaction History

Set up instant SMS alerts for every transaction, no matter how small. Promptly flag unfamiliar activity.

4. Report Immediately

If you suspect fraud, contact your bank’s 24‑hour helpline and lodge a complaint with the cyber crime cell. Early reporting can sometimes halt further withdrawals.

Government and Institutional Responses

The Ministry of Defence has announced a nationwide cyber‑awareness drive for retired personnel, partnering with the National Cyber Crime Reporting Portal. Additionally, the National Payments Corporation of India (NPCI) is piloting an AI‑driven fraud detection engine that flags multiple transactions within short intervals.

Looking Ahead

Ravi’s ordeal underscores a pressing need for digital resilience among India’s senior citizens, especially those who have served the nation. While technology offers convenience, it also opens doors for sophisticated fraudsters. A coordinated effort—combining government outreach, bank-level safeguards, and individual vigilance—is essential to protect the hard‑earned pensions of our veterans.

If you or someone you know has faced a similar incident, share your story in the comments below. Together, we can raise awareness and help prevent future tragedies.

Original Reporting & Source: India Today Top Stories

Umang Sisodia

Written by

Umang Sisodia

want to write every thing that comes to my mind

Discussion (0)

Sign in to join the discussion.

No comments yet. Be the first to start the conversation!

| |

How a Former Army Officer Lost ₹28 Lakh in a Three‑Hour Pension Scam

By Umang Sisodia • 3 min read • 8 views

A Harrowing Tale of Digital Deception

When Ravi Kumar, a retired Indian Army sergeant, logged into his pension portal on a quiet Tuesday morning, he expected the routine credit of his monthly allowance. Within three hours, nine unauthorized transactions siphoned ₹28 lakh from his account, leaving him financially crippled and emotionally shaken.

The Anatomy of the Scam

  1. Phishing Hook – The fraud began with a convincing SMS that appeared to be from the Defence Pension Disbursal Office, urging Ravi to verify his details via a link.
  2. Clone Website – The link redirected to a near‑identical replica of the official portal, harvesting his login credentials.
  3. Credential Hijack – Hackers used the stolen ID to log in, change the registered mobile number, and add multiple UPI and IMPS beneficiaries.
  4. Rapid Cash‑Out – Nine transactions, each ranging from ₹2 lakh to ₹5 lakh, were executed in rapid succession, exploiting the three‑hour window before any OTP or alert could be acted upon.

Why Retired Defence Personnel Are Prime Targets

  • Trust in Government Channels – Ex‑servicemen often rely on official communication, making them less skeptical of seemingly authentic messages.
  • Limited Digital Literacy – While many pensioners now use mobile banking, comprehensive cybersecurity training remains scarce.
  • High‑Value Accounts – Defence pensions are relatively sizable, presenting lucrative bait for cybercriminals.

The Wider Landscape of Pension Cyber Fraud in India

According to a Reserve Bank of India (RBI) report released in early 2024, cyber frauds targeting pensioners rose by 38 % year‑on‑year. The report highlighted:

  • ₹1,200 crore lost across the country in the last fiscal year.
  • UPI and IMPS as the most abused payment channels.
  • A lack of real‑time fraud detection mechanisms for government‑issued accounts.

Lessons for the Community

1. Verify Before You Click

Never trust unsolicited messages that request personal data. Always navigate to official portals by typing the URL directly.

2. Enable Two‑Factor Authentication (2FA)

Most banks now offer device‑linked authentication or biometric verification—activate them immediately.

3. Regularly Review Transaction History

Set up instant SMS alerts for every transaction, no matter how small. Promptly flag unfamiliar activity.

4. Report Immediately

If you suspect fraud, contact your bank’s 24‑hour helpline and lodge a complaint with the cyber crime cell. Early reporting can sometimes halt further withdrawals.

Government and Institutional Responses

The Ministry of Defence has announced a nationwide cyber‑awareness drive for retired personnel, partnering with the National Cyber Crime Reporting Portal. Additionally, the National Payments Corporation of India (NPCI) is piloting an AI‑driven fraud detection engine that flags multiple transactions within short intervals.

Looking Ahead

Ravi’s ordeal underscores a pressing need for digital resilience among India’s senior citizens, especially those who have served the nation. While technology offers convenience, it also opens doors for sophisticated fraudsters. A coordinated effort—combining government outreach, bank-level safeguards, and individual vigilance—is essential to protect the hard‑earned pensions of our veterans.

If you or someone you know has faced a similar incident, share your story in the comments below. Together, we can raise awareness and help prevent future tragedies.

Original Reporting & Source: India Today Top Stories