Digital arrest and the scams coming for your people

It does not come for your firewalls. It comes for your mother, on a video call, from someone in a uniform who says she is under arrest and must not hang up or tell anyone.

This week the Prime Minister warned that economies are now a target in conflict and that India’s banking must be protected from cyber terror, and the Reserve Bank launched a dedicated cybersecurity hub. Behind that headline sits the quieter, grimmer reality it responds to: a steady stream of ordinary people being defrauded, among them an elderly widow tricked in a so-called “digital arrest” scam, alongside investment frauds and large organised schemes.

Here is the part that makes it yours as an employer. These frauds do not pick the lock on a corporate network. They pick a person, and the people they pick are your employees and, very often, their parents. A workforce is a community of households, and a scam that empties a retired parent’s savings lands, within a day, on the desk of someone who works for you. Seeing it as a people problem, not an IT one, is where a sensible response begins.

Put simply: a “digital arrest” scam is one where fraudsters impersonate police or other authorities, contact a person by call or video, claim they are implicated in a crime and under some form of arrest, and isolate and frighten them into transferring money. There is no such thing in law as a digital arrest; the entire thing is a performance designed to panic a person out of their savings.

These frauds come for people, not systems

The striking thing about this generation of fraud is how little technology it needs. It does not defeat your security; it bypasses it entirely by going after a human being directly, usually through fear or the promise of easy returns. The targets are disproportionately older, less familiar with these tricks, and more likely to be alone when the call comes. For most of your team, the person most at risk is not them; it is a parent in another city who would never dream of mentioning a frightening call until it is too late.

Why it’s an employer’s concern

You might reasonably ask why a company should care about a fraud aimed at an employee’s family. The honest answer is that there is no clean line between a person’s home life and their work. An employee whose parent has just lost their savings, or who has been defrauded themselves, is frightened, distracted, ashamed and financially shaken, and none of that stays at home. A business that takes the wellbeing of its people seriously cannot treat this as somebody else’s problem, and the good news is that the most effective thing it can do costs almost nothing.

Awareness is the cheapest, strongest defence

Most of these frauds collapse the moment the target knows two or three simple truths, so the single most valuable thing an employer can do is make sure their people, and their families, know them. No genuine police force or agency ever places someone under “arrest” over a video call, or demands secret money transfers to stay out of jail. No real official asks you to keep a call secret from your family. And the one habit that defeats almost all of it is to pause, hang up, and verify independently, on a number you find yourself, never one the caller gives you. Shared plainly and repeated, not buried in a one-off email, these few rules save more people than any product.

Where cover and support fit

Behind awareness, two things help. Personal cyber cover, which can be arranged for employees as a benefit, may assist with certain losses from online fraud and with the response, subject to the wording, though recovering money already transferred is often difficult, which is exactly why prevention matters most. And the everyday support side matters here too: someone who has been defrauded carries real distress, and having a route to confidential help, through the kind of everyday benefits Rise provides, is part of treating this as the wellbeing issue it is.

How these scams map to a response

It helps to see what actually answers each part of the problem, because for much of it the answer is not a policy at all. This is category-level — general guidance, not any one insurer’s product.

A five-minute check for an employer

You don’t need a programme to make a difference. Five questions usually surface the gaps:

1. Do your people know the golden rules, and have they told their parents?No video-call arrests, no secret transfers, always verify independently. The parents are the point.
2. Do you remind them more than once?A single email is forgotten. A short, repeated nudge is what sticks.
3. Is there a safe, no-blame way to report being targeted?Shame keeps victims silent. Make it clear that reporting quickly is smart, not embarrassing.
4. Do you signpost personal cover and support?Where personal cyber cover and confidential support exist, make sure people know they are there.
5. If someone is hit, do they have somewhere to turn?A victim needs practical steps and a listening ear, not silence. That is part of duty of care.

A note on this page. Everything here is general information and awareness guidance, not insurance, legal, financial or tax advice, and nothing is an offer. What any personal cyber cover responds to depends on its own policy wording. If you or someone you know is targeted, contact the national cybercrime helpline and your bank without delay. For advice about your situation, talk to us. News references are drawn from reporting dated 26 October 2026.