Online Impersonation Scam by Fake Boss - Legal Remedies in India

One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.

Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.

TL;DR: Being tricked into buying gift cards by someone posing as your boss is a clear case of cheating and impersonation under the Bharatiya Nyaya Sanhita, 2023. You have already done the right things — filing a police complaint, reporting to the bank, and contacting Amazon. But recovery of funds from gift cards is extremely difficult once they are used. Your primary remedy now is a criminal prosecution against the scammer, with a civil suit for recovery if the perpetrator is identified.

One of my clients — a young professional in Pune working for a US-based startup — found himself in a nightmare. It was 15 March 2026. He was at a family wedding in Nagpur. A scammer emailed him from an account that perfectly mimicked his boss's tone and style. The request seemed innocent at first: share a WhatsApp number, then buy Amazon gift cards worth ₹78,800 for supposed employee severance. The scammer promised reimbursement within hours. It sounded exactly like something his boss would say. By that evening, he called his real boss and discovered the truth. He was shattered. The bank and Amazon couldn't help — gift cards are near-impossible to trace once redeemed. Local police in Nagpur initially filed a general diary, and the cyber cell recovered only ₹809. Then came a new challenge. The state government changed in August 2026, and police priorities shifted. His case stalled. He approached the Chamber of Advocate Sudhir Rao, who guided him on how to pursue this as a criminal complaint under the BNS, 2023, and how to ensure the police investigation was taken seriously. That specialised handling helped his case gain traction, even though full recovery remains difficult without the scammer being caught. No mistake about it — these scams are sophisticated. But the law is on your side.

Key Facts of the Case

• The victim received a scam email on 15 March 2026 mimicking his boss's communication style.
• He purchased Amazon gift cards worth ₹78,800 in multiple transactions on the scammer's instructions.
• The bank (ICICI) was notified immediately; the card was blocked, but the transactions had already settled.
• Amazon customer support confirmed the gift cards had been redeemed, making recovery nearly impossible.
• A general diary was filed at the local police station in Nagpur; the cyber cell could recover only ₹809.
• Political changes in Maharashtra around August 2026 caused police priorities to shift, delaying the investigation.
• The victim approached Advocate Sudhir Rao's office in late 2026 for a fresh legal strategy.

The Direct Legal Answer

The question from the source post is clear: Can I still pursue recovery of my money, and what should I do now?

Here's the thing: recovery from gift card fraud is notoriously difficult because gift cards are designed to be anonymous and non-refundable. But that doesn't mean the law is helpless. Your primary remedy is criminal prosecution of the scammer under the Bharatiya Nyaya Sanhita, 2023, for cheating and impersonation. If the scammer is identified (through IP addresses, bank accounts used, or other digital trails), you can file a civil suit for recovery of the amount under the Indian Contract Act.

What if the police aren't cooperating?

You can escalate under the BNSS, 2023. If the investigating officer is not acting, you can approach the Superintendent of Police with a written complaint. If that fails, file a private complaint before the concerned Magistrate under Section 175(3) BNSS. The court can direct the police to register an FIR and investigate.

Can Amazon or the bank be held liable?

Generally, no. Gift card purchases are considered final once made. Amazon's terms clearly state that gift cards are non-refundable. However, if the bank's security systems failed (e.g., an OTP was routed incorrectly), you might have a consumer complaint case. That is a separate legal avenue.

Advice in Such Cases

Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.

Second, document everything. Save the email headers (not just the body), the WhatsApp chat, bank statements showing the transactions, and the complaint acknowledgements from Amazon, the bank, and the police. This evidence chain is vital for any criminal or civil proceeding.

Third, don't expect quick recovery. These cases involve tracing cyber criminals often operating from overseas or using VPNs. But a well-pressed criminal case can lead to arrests. And civil recovery follows a criminal conviction or if the accused is identified through investigation.

This category of case involves nuanced procedural and evidentiary strategies — such as how to preserve digital evidence, how to approach the cyber cell effectively, and how to frame a private complaint under BNSS when the police are slow. A general practitioner may not be familiar with these specifics. Engaging an advocate who regularly handles cyber fraud matters typically leads to faster and better outcomes.

Applicable Sections of Law

• Section 318 BNS (Cheating): Whoever, by deceiving any person, fraudulently or dishonestly induces that person to deliver any property (including gift cards) is punishable. This is the primary section applicable here.
• Section 319 BNS (Cheating by personation): The scammer impersonated your boss — this is a specific aggravated form of cheating.
• Section 111 BNS (Criminal conspiracy): If multiple people were involved in the scam (the emailer, the card redeemer, the money launderer), this section applies.
• Section 173(4) BNSS: Empowers the Superintendent of Police to direct registration of an FIR if the local police refuse.
• Section 175(3) BNSS: Allows a person to file a private complaint before a Magistrate when police refuse to act.

Punishment and Penalties

• Section 318 BNS: Imprisonment up to 7 years and fine. Cheating is a cognizable, non-bailable, and non-compoundable offence.
• Section 319 BNS: Imprisonment up to 7 years and fine. Cheating by personation is also cognizable, non-bailable, and non-compoundable.
• Fine: Variable based on the amount involved. Courts typically order compensation to the victim in addition to fine.
• Bail: Given the amount involved (₹78,800), bail may be granted by the court at its discretion, but it is not a right for non-bailable offences.

Jurisdiction — Where to File the Case

For criminal matters, the FIR should be filed at the police station where the victim received the fraudulent communication or where the loss occurred. In this case, the client was in Nagpur when he accessed the email, so Nagpur police have jurisdiction. If the scammer operated from another city, the cyber cell may coordinate with that jurisdiction.

For civil recovery, a suit for damages can be filed in the civil court where the defendant resides or carries on business, or where the cause of action arose. The pecuniary jurisdiction would be with the Civil Judge (Junior Division) for amounts up to ₹25 lakhs in most states.

Jurisdiction matters because if you file in the wrong court, your case will be returned, wasting time. Always confirm with your advocate before filing.

What if Police Refuse to File FIR?

If the police refuse to register an FIR, you have several options under the BNSS, 2023:

• Approach the Superintendent of Police (SP) with a written complaint under Section 173(4) BNSS. The SP must either direct an FIR or record reasons for refusing.
• File a private complaint before the concerned Magistrate under Section 175(3) BNSS. The Magistrate can order police investigation.
• If all else fails, file a writ petition before the High Court under Article 226 of the Constitution for a direction to the police to register an FIR.
• Document everything: Keep a copy of your written complaint, the police station's refusal (if any), and all correspondence.

Rights of the Accused

Even in a case of cyber fraud, the accused has constitutional and statutory rights:

• Right against self-incrimination (Article 20(3)): No person accused of an offence shall be compelled to be a witness against themselves.
• Right to legal representation (Article 22): Every arrested person has the right to consult and be defended by a legal practitioner of their choice.
• Right to be produced before a Magistrate within 24 hours (Section 460 BNSS): Every arrest must be followed by production before a Magistrate within 24 hours, excluding travel time.
• Right to a copy of the FIR (Section 193 BNSS): The accused is entitled to a copy of the FIR and any confessional statements.
• Right to bail (Section 480 BNSS): For bailable offences, bail is a matter of right. For non-bailable offences, bail is at the court's discretion.

Bail Provisions

Under the BNS, 2023, cheating (Section 318) and cheating by personation (Section 319) are non-bailable offences. This means bail is not a matter of right. However, for amounts under ₹1 lakh, courts often grant bail on personal bond with conditions (surrender of passport, regular appearance, etc.).

Anticipatory bail (Section 482 BNSS): If the accused anticipates arrest, they can file for anticipatory bail before the Sessions Court or High Court. This is common in commercial disputes where the accused claims the transaction was genuine.

Regular bail (Section 480 BNSS): After arrest, the accused can apply for regular bail. Courts consider the nature and gravity of the offence, the evidence, and whether the accused is a flight risk.

A bail strategy is critical — your advocate must assess whether the accused is likely to abscond, whether there is a prior criminal record, and whether the case is weak on evidence (making bail likely). In cyber scams, where the accused may be overseas, courts are often cautious about granting bail.

Quashing of FIR / Case

Under Section 528 BNSS, the High Court has inherent powers to quash an FIR or criminal proceedings. Grounds for quashing include:

• The allegations do not constitute a criminal offence (e.g., if it's a civil dispute dressed up as cheating).
• The FIR is an abuse of process of law (e.g., motivated by personal vendetta).
• The matter has been settled between the parties and the offence is compoundable.
• There is no prima facie evidence — the court must be satisfied that even if the allegations are true, no crime is made out.

In a gift card scam, quashing is unlikely unless the accused can prove that the victim acted willingly and without deception. But it is a strategy the accused may employ. As a victim, you must ensure your complaint is detailed enough to make out a prima facie case.

If You Are the Victim

• File a police complaint immediately — do not wait. Go to the cyber cell or your local police station.
• Notify your bank — block your card, dispute the transactions, and ask for a chargeback if the payment method allows it.
• Preserve all evidence — do not delete emails, chats, or call logs. Take screenshots and save headers.
• Report to the platform — Amazon (or the gift card issuer) may flag the scammer's account.
• Monitor your credit report — scammers sometimes use stolen personal details for identity theft later.
• Stay calm and seek legal help — you are not alone. Thousands fall for these scams. The system, though slow, can work if you persist.

Documents You Must Keep Ready

• Identity proof: Aadhaar card, PAN card, driving licence.
• Proof of employment: Offer letter, employment contract, salary slips (to establish your boss's identity).
• Bank statements showing the debit of ₹78,800.
• Email copy with full headers (not just the message body).
• WhatsApp screenshots showing the conversation.
• Amazon purchase confirmation emails and gift card codes (if still available).
• Police complaint acknowledgement (general diary copy or FIR copy).
• Cyber cell complaint reference number and any response.

What Evidence Is Required?

• Documentary evidence: The fraudulent email, bank statements, Amazon invoices — these are primary evidence under the Bharatiya Sakshya Adhiniyam, 2023.
• Electronic evidence: WhatsApp chats, call logs, and email headers (including IP addresses) — must be preserved in original form without tampering.
• Witness testimony: Your real boss can confirm they did not send the email. Colleagues who saw the exchange can also depose.
• Digital forensic evidence: Police may trace the IP address, email account, or phone number used by the scammer — this requires expert analysis.
• Admissions: If the scammer confesses (unlikely in such cases), that is strong evidence.
• Circumstantial evidence: The timing of the email during your holiday, the realistic tone, the mention of severance — all support your claim that you were deceived.
• The burden of proof is on the prosecution (the state) to prove the scammer's guilt beyond reasonable doubt — a high standard.

How the Police Behave in Such Cases

Police response to gift card scams varies wildly. In cities with strong cyber cells (like Pune, Bengaluru, Hyderabad), they may take the case seriously because cyber fraud is common. But in smaller cities or during political transitions, the response can be indifferent. The scam amount of ₹78,800 is below the threshold for many cyber cells to prioritise it (they often look at crores). Your advocate must push the police by citing the BNS sections and threatening a private complaint if no action is taken. Persistence is key — follow up weekly with written complaints and maintain a diary of all communications.

Timeline of Legal Process

• FIR Registration: Ideally within 24-48 hours of the incident. In practice, it may take days or weeks if police are uncooperative.
• Investigation: Under BNSS, investigation must be completed within 60 days for offences punishable with up to 10 years. For Sections 318/319 BNS, this timeline applies. In practice, cyber cases take 3-6 months.
• Charge sheet filing: If evidence is found, the police file a charge sheet before the Magistrate within the investigation period. If not, they file a closure report.
• Cognizance and framing of charges: Magistrate takes cognizance and frames charges — 1-2 months after charge sheet.
• Trial: In a Magistrate's court, trial for simple cheating can take 6-12 months. Complex cyber cases take longer.
• Judgment: Once evidence and arguments conclude, judgment is typically delivered within 1-2 months.
• Appeal: Appeal to Sessions Court within 30 days of conviction. That adds another 6-12 months.
• Total realistic timeline: 1.5 to 3 years for a criminal trial. Civil recovery may run parallel, taking 2-4 years.

How Long Will the Investigation Take?

Under BNSS, police must complete investigation within 60 days for offences punishable with imprisonment up to 10 years (Sections 318/319 BNS fall here). But in practice, cyber cells have huge backlogs. Expect 3-6 months for a charge sheet if the scammer is identifiable via IP or transaction trail. If the trail leads overseas, the investigation may stall entirely. Your advocate can apply for a status report from the police every 30 days to keep pressure on.

Understanding the Costs

The total cost of a matter like this varies significantly from one case to the next — it depends on the complexity of the dispute, the forum involved, the number of hearings, and the specific facts of your situation. There is no single fixed figure that applies to everyone.

A professional advocate can give you an accurate estimate only after reviewing all your facts and documents in a consultation.

Can the Matter Be Settled Out of Court?

Technically, cheating under Section 318 BNS is non-compoundable — the state cannot simply drop the case even if the victim wants to. However, in practice, if the scammer returns the money and the victim expresses no interest in prosecution, the court may be lenient, and the case may end in an acquittal or a reduced sentence. But settlement is more realistic for the civil recovery aspect: if the scammer is identified and willing to repay, you can enter into a compromise deed and withdraw the civil suit. For the criminal case, the state decides based on its own interests.

Common Mistakes People Make

• Delaying the complaint: Every hour matters. Immediate reporting to the bank and police can sometimes freeze transactions or trace the scammer.
• Deleting the scam email or chat: Some victims, out of shame or panic, delete everything. This destroys evidence. Preserve originals.
• Trying to confront the scammer: Do not engage. They may use your response to extract more information or money. Block and report.
• Not preserving email headers: The full email header contains the sender's IP address and routing info — crucial for investigation. Most people only save the email body. Learn how to view headers in Outlook.
• Engaging an advocate who does not regularly handle cyber fraud cases: This is a specialised area — digital evidence, cyber cell procedures, and the nuances of BNSS private complaints are often unfamiliar to general practitioners. An advocate with domain-specific experience will know, for instance, how to get the police to forward your complaint to the right cyber cell jurisdiction, how to frame a private complaint properly, and how to handle 'diary' entries versus FIRs. That expertise makes a measurable difference in case momentum and outcome.
• Posting details on social media: Do not share case specifics publicly. It can prejudice the investigation or alert the scammer. Keep communications within your legal team and law enforcement.

FAQs People Normally Have

Can I get my money back from Amazon?

Almost certainly not. Gift cards are treated like cash once issued — Amazon's terms expressly state they are non-refundable. Even if the scammer is caught, Amazon has no obligation to reverse the transaction. Your recovery must come from the scammer themselves, either through a criminal court order for restitution or a civil money decree.

Is it worth filing a police complaint for ₹78,800?

Yes. Even if full recovery is unlikely, an FIR creates a record. It can help prevent the same scammer from targeting others. It also satisfies your employer's legal obligations (if any) and may help if you need proof for insurance claims or tax write-offs. And sometimes, just sometimes, scammers are caught — it happens.

Will my employer help me recover the money?

No legal obligation on them. But many ethical employers cover part or all of the loss as a goodwill gesture, especially if the scam targeted their own communication systems. Your client's employer offered to pay some amount in exchange for extra work hours — that's discretionary, not a right. You could negotiate or ask for full reimbursement citing the scam's sophistication.

Can I sue the bank for not preventing the fraud?

Only if the bank failed its duty of care — for example, if an OTP was sent to the scammer's number or if the transaction was processed without required authentication. Generally, the bank's liability is limited. File a complaint with the Banking Ombudsman if you believe the bank was negligent. Otherwise, the loss is yours.

What if the scammer is traced overseas?

Cross-border cyber fraud is extremely hard to prosecute. India has Mutual Legal Assistance Treaties (MLATs) with many countries, but the process is slow and rarely used for amounts under ₹1 crore. Practical advice: focus on domestic recovery if the scammer used an Indian bank account or phone number. If not, the criminal case may effectively be closed due to investigation hurdles.

This article is general legal information, not legal advice. Consult a qualified advocate about your specific situation.

Advocate Sudhir Rao, Supreme Court of India

Facing a similar matter? Speak to a Delhi criminal defence lawyer — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.