Harassment & PoliceDoT Directives & TCCCPR 201811 Min Read

Recovery Agents Using Spoofed Numbers to Call You: How to Stop Them

DoT Regulations and Cybercrime 1930 Reporting Guide

Thousands of loan borrowers across India face aggressive phone calls daily. When payments are delayed on credit cards or personal loans, collection agencies often turn to unlawful tactics. One widespread method is Calling Line Identification (CLI) spoofing.

You might see a local landline, a court number, or a police station on your phone screen. In reality, the caller is an outsourced agent using internet calling software. They use this trick to scare you into picking up. Under Indian telecom rules and Reserve Bank of India mandates, disguising phone numbers is strictly illegal.

Key Legal Protections:
  • Telecommunications Act 2023 (Section 42): Tampering with phone numbers brings up to three years in prison and fines up to 50 lakh rupees.
  • TRAI TCCCPR 2018 (Regulation 25): Unregistered call centers face line disconnection and a two-year ban across all Indian telecom networks.
  • TRAI 1600 Series Rule: Banks must call from verified 1600 numbers, never from personal mobile phones.
  • RBI Circular August 12, 2022: Calling before 8:00 AM, calling after 7:00 PM, or hiding numbers is forbidden.
  • Bharatiya Nyaya Sanhita 2023 (Section 204 & 319): Posing as police officers or court staff is a serious criminal offense.

01. What Is CLI Spoofing and How Debt Collectors Use It

Calling Line Identification shows the caller phone number on your screen. Under telecom rules, network providers verify this number before connecting the call.

CLI spoofing happens when the caller changes this display data using computer dialers. The caller enters a fake number into software, and your phone displays that fake number instead.

Collection agencies use spoofed calls for three reasons:

  • Bypassing Blocks: When you block their number, agents rotate to a new fake number immediately.
  • Local Area Codes: Agents in another state show your local city code to make calls look familiar.
  • Police Station Scares: Rogue callers display real police station numbers to make you fear arrest.

Remember that debt default is a civil matter. Banks cannot use fake numbers, and real police do not collect credit card dues.

02. The Technology Behind Fake Calls: VoIP and SIM Boxes

To handle these calls, it helps to understand how collection centers dial them. Regular calls use physical phone lines. Modern collection agencies use internet calling systems called Session Initiation Protocol (SIP) trunks.

When an internet call starts, the software transmits two separate data fields:

The From Field: This is the visible text that appears on your phone. Bad actors type whatever fake number they want into this field.

The P-Asserted-Identity Field: This is the internal network record kept by the telecom provider to track the actual user and internet connection.

Some agencies route calls through illegal hardware called SIM boxes. These boxes hold dozens of cheap prepaid SIM cards. The call travels over the internet and enters the SIM box, which dials your phone as a local mobile call.

While this hides the caller from your screen, every call leaves clear records inside the telecom network. Government investigators can trace these records back to the source.

03. Telecommunications Act 2023: Penalties for CLI Tampering

India replaced its old Telegraph Act with the Telecommunications Act 2023. This law directly targets phone number manipulation and predatory caller tactics.

Section 42(3)(c) of the Act makes tampering with caller identifiers a severe crime:

Penalties Under Section 42(3)(c):

Imprisonment for up to three years, a fine of up to 50 lakh rupees, or both punishments together.

Section 28 of the Act protects phone users from spam calls and fake messages. Violating these rules carries clear monetary penalties:

  • First Offense: A civil penalty of up to 50,000 rupees.
  • Repeat Offenses: A civil penalty of up to 2 lakh rupees per call, plus total cancellation of telecom lines.

Faking caller numbers is not just bad conduct. It is a serious crime under Indian law.

04. TRAI 1600 Series Mandate and 10-Digit Mobile Ban

TRAI sets clear standards under TCCCPR 2018 regulations to ensure citizens know who is calling.

TRAI created distinct phone number ranges for business and financial calls:

140 Series: Promotional Calls

Used strictly for sales pitches and marketing campaigns. Customers registered on the National Do Not Disturb list can easily block these calls.

1600 Series: Regulated Banking Calls

Reserved exclusively for banks and finance companies regulated by RBI, SEBI, IRDAI, and PFRDA. Official loan alerts must come from this series.

Banks and their recovery agencies cannot use random 10-digit mobile numbers for debt recovery. Under Regulation 25 of TCCCPR 2018:

  • The telecom company must immediately disconnect all phone lines used by that caller.
  • The caller identity is shared across all telecom networks within 24 hours.
  • All other network operators must cut off services to that company within 24 hours.
  • The entity is blacklisted across India for up to two full years.

05. RBI Master Directions: August 12, 2022 Guidelines

On August 12, 2022, the RBI issued circular DOR.ORG.REC.65/21.04.158/2022-23 to stop recovery harassment.

This circular binds all commercial banks, cooperative banks, NBFCs, and collection agencies to these standards:

Allowed Calling Hours: Agents may only call borrowers between 8:00 AM and 7:00 PM. Calls outside these hours are illegal.

No Anonymous Numbers: Agents must never hide their numbers or call from lines that reject return calls. They must state their name and bank clearly.

Privacy Protections: Agents cannot call your relatives, friends, or office colleagues. Sharing your debt details with others is prohibited.

Zero Harassment Rule: Endless repeat calling, threats of arrest, or abusive language are strictly barred.

The Supreme Court affirmed in ICICI Bank v. Shanti Devi Sharma (2008) that banks are fully responsible for their collection agents. The RBI can fine banks directly under Section 47A of the Banking Regulation Act 1949.

06. Criminal Impersonation Under BNS 2023 Sections

Collection agents often cross into serious crime. When an agent spoofs a number and claims to be a police officer or court bailiff, they break multiple criminal laws.

The Bharatiya Nyaya Sanhita 2023 (BNS) provides strong criminal charges against fake callers:

BNS Section 204: Impersonating a Public Servant

Pretending to be a police officer or court staff brings a mandatory prison term of six months up to three years, plus a fine.

BNS Section 319: Cheating by Personation

Cheating someone by pretending to be an officer or legal authority brings up to five years in prison, a fine, or both.

BNS Section 308: Extortion

Putting a person in fear of arrest or disgrace to force money transfers carries up to seven years in prison.

IT Act 2000 (Section 66D)

Cheating by personation using phones or computer networks brings up to three years in prison and a one lakh rupee fine.

Real police do not collect bank debts. These calls are punishable crimes.

07. How Telecom Operators Trace Spoofed Calls via IPDR

Borrowers often think fake numbers cannot be traced. That is incorrect. The number on your screen is just a display label. The network itself logs every call step.

When police and telecom units investigate spoofed calls, they use a clear three-step process:

1. Call Detail Records (CDR): The investigator gets records from your mobile operator for the exact minute of the call. This identifies the network gateway that delivered the call.

2. Signaling Header Checks: Engineers inspect the session logs. They look past the fake display number to read the internal P-Asserted-Identity header, which shows the real account holder.

3. IP Detail Records (IPDR): For internet-based calls, investigators review internet logs. Indian internet providers must store source IP addresses and port numbers. This leads straight to the call center location.

In 2024, the Department of Telecommunications launched an automated system to block incoming spoofed calls at the gateway level. When you file a timely complaint, telecom officers can find the real caller quickly.

08. Step-by-Step Reporting on DoT Chakshu Portal

The Department of Telecommunications created the Chakshu portal on Sanchar Saathi. It allows any citizen to report fraud calls, spoofed numbers, and fake messages directly to telecom regulators.

Follow these simple steps to report spoofed recovery calls:

Step 1: Open Sanchar Saathi

Go to sancharsaathi.gov.in using any phone or computer browser.

Step 2: Click on Chakshu

Find Citizen Centric Services and click Chakshu: Report Suspected Fraud Communication.

Step 3: Choose Voice Call

Select Voice Call as the medium. Pick WhatsApp if threats arrived by chat.

Step 4: Pick Category

Choose Impersonation as Police or Fake Loan Update based on the caller claims.

Step 5: Enter Call Details

Type the exact phone number shown on your screen, with date and time. Upload a call log screenshot.

Step 6: Describe the Event

Write: Collection agency using computer spoofed numbers to harass borrower and bypass blocks. Violates TRAI and RBI rules.

Step 7: Verify and Submit

Enter your active mobile number, enter the OTP, and submit. Save the reference number.

Chakshu accepts reports for calls received in the past 30 days. If money was stolen, file on the cybercrime portal immediately.

09. Filing a Complaint on Cybercrime Portal 1930

If a caller threatens physical harm, uses abusive words, or pretends to be a police officer, file a formal cybercrime complaint right away.

The Ministry of Home Affairs runs the National Cyber Crime Reporting Portal and the 1930 helpline. Take these clear steps:

1. Call Helpline 1930: Call 1930 if an agent claims you face immediate arrest or demands money transfers to private accounts.

2. File on Portal: Open cybercrime.gov.in and click Report Other Cyber Crimes. Pick Cyber Intimidation or Cheating by Personation.

3. Attach Your Evidence: Upload clear proofs:

  • Screenshots of the call logs showing dates, times, and numbers.
  • Call recordings of the caller issuing threats or making fake claims.
  • Screenshots of WhatsApp texts or fake court papers sent by the caller.
  • Your loan account number and the name of the lending bank.

The portal provides a formal complaint acknowledgement. This official receipt protects you and shows you are taking lawful action against extortion.

10. Holding Banks Vicariously Liable via RBI CMS

Do not argue with collection agents on the phone. Hold the lending bank directly accountable under RBI orders.

Use this simple two-stage process:

Stage 1: Complain to the Principal Nodal Officer (PNO)

Send an email to the Principal Nodal Officer of the bank. State that their recovery agency uses illegal spoofed numbers in violation of telecom laws and the RBI circular of August 12, 2022. Attach your call logs, cyber complaint slip, and audio recordings. Demand an end to agent calls.

Stage 2: Escalate to the RBI Banking Ombudsman

If the bank does not fix the problem within 30 days, file on the RBI CMS portal at cms.rbi.org.in. Select Harassment by Recovery Agents as your category. The Ombudsman can award compensation for mental agony and fine the bank under Section 47A of the Banking Regulation Act.

When an RBI complaint opens against a bank, their compliance team usually acts fast to pull collection agents off your account.

11. Actionable 7-Step Defense Checklist for Borrowers

1. Stay Calm When Numbers Appear:

Remember that caller screens can be faked. A landline or police number does not prove who is on the line.

2. Turn on Call Recording:

Record every call from unfamiliar numbers. Clean audio files serve as primary evidence for police and regulators.

3. Ask for Full Identification:

Ask the caller for their full name, employee number, agency address, and bank authorization letter. Fake callers hang up.

4. Never Pay Private Accounts:

Never send money to personal UPI accounts or mobile numbers. Pay only to your verified loan account at the bank.

5. Report to Sanchar Saathi Chakshu:

Log the number on sancharsaathi.gov.in within 30 days to help telecom officials disconnect rogue phone lines.

6. File on Cybercrime Portal 1930:

If the caller threatened arrest, submit a complaint on cybercrime.gov.in under BNS Section 204 and Section 319.

7. Escalate to RBI Ombudsman:

Write to the bank Principal Nodal Officer, then file on cms.rbi.org.in to trigger regulatory action against the bank.

12. Frequently Asked Questions

What is CLI spoofing when used by loan recovery agents?[+]

CLI spoofing happens when a collection agency uses software or VoIP services to alter the caller ID displayed on your phone. Instead of showing their real number, they display a local landline, a police station number, or a random mobile number to deceive you into answering.

Is it legal for recovery agents to call from random 10-digit mobile numbers?[+]

No. Under TRAI regulations and the TCCCPR 2018 framework, commercial and service calls from financial institutions must originate from dedicated series like 1600. Using personal 10-digit mobile numbers or unregistered lines for debt collection violates telecom directives.

Can recovery agents pretend to call from a police station or court?[+]

No. Impersonating a police officer, CBI agent, or court official is a criminal offense under Section 204 and Section 319 of the Bharatiya Nyaya Sanhita 2023. Real police officers never act as debt collection agents for private banks or NBFCs.

What is the Department of Telecommunications Chakshu portal?[+]

Chakshu is a citizen-centric reporting facility on the official Sanchar Saathi portal (sancharsaathi.gov.in). It allows citizens to report suspected fraud communications, spoofed calls, and fake WhatsApp numbers within 30 days of receiving them.

Can telecommunication providers trace the real caller behind a spoofed VoIP number?[+]

Yes. Telecom security units trace spoofed calls by analyzing Call Detail Records (CDR) and Internet Protocol Detail Records (IPDR). They examine the P-Asserted-Identity SIP header and gateway logs to identify the originating IP address and physical network connection.

What hours are recovery agents legally permitted to call borrowers in India?[+]

Under the RBI circular dated August 12, 2022, recovery agents are strictly permitted to call borrowers only between 8:00 AM and 7:00 PM. Calling outside these hours, calling repeatedly in a single day, or making anonymous calls is prohibited.

How do I report recovery agent spoofing to the National Cybercrime Portal?[+]

You can report digital harassment, impersonation, and spoofed extortion calls by dialing the 1930 national helpline or submitting a formal complaint on cybercrime.gov.in. Upload call screenshots, audio recordings, and details of the lender involved.

Can my lending bank be penalized for third-party collection agent spoofing?[+]

Yes. Under Section 47A of the Banking Regulation Act 1949 and RBI outsourcing directives, banks bear direct vicarious liability for the misconduct of their recovery agents. The RBI Banking Ombudsman can award compensation and penalize the lender.

Official Statutory Resources & Regulatory Portals

RBI & GOVT VERIFIED

Access official government portals, regulatory ombudsman channels, and statutory dispute resolution bodies governing Indian banking and borrower rights:

Community Discussion & Case Notes

0 Comments

No comments posted yet. Be the first to share your experience below!

Join the Discussion & Share Your Experience

Have you dealt with this situation or received a notice? Share your questions or experience with other borrowers.

0/500

Find this content helpful?

If this guide has helped you navigate your settlement journey, consider showing some support to keep this platform running.