The WhatsApp group felt like a room. The room was a trapdoor.
A 59-year-old retired gas company officer in Bhopal watched a screen show him ₹67 lakh in profits. When he tried to withdraw, the group asked for one more payment. That payment was the door closing.
Premlal was fifty-nine and the folder on his desk was labeled in his own handwriting. PENSION. GAIL. PPF. LIC. He had worked thirty-four years at a gas company and he had not lost a document in any of them. His wife teased him about the folder. He kept it anyway. A man who had spent his career around pressure valves understood what a paper trail was for.
On April 28, his phone buzzed with a WhatsApp notification. He had been added to a group. The group already had close to ninety members. The name on the group was the kind of name that sounded like it belonged in a Bloomberg terminal. The pinned message announced an upcoming IPO allotment, available only to members, with the kind of capitalized words that boiler-room pitches have used since I was seventeen years old selling platinum out of a room on LaSalle Street.
He did not leave the group. That was the first decision. He read.
The group was busy. Members posted screenshots of their gains. Members asked the "advisor" polite questions and the advisor answered with polite numbers. There was a moderator who reminded people to follow "compliance procedure." There was talk of SEBI registration, casually, the way real people talk about something they assume is in order. Somewhere in the first week, someone forwarded what looked like a registration certificate.
Picture it. A retired engineer with a folder labeled PENSION, reading a chat group at his kitchen table while his tea cools, watching strangers describe profits in a tense that sounds like the future.
This is the room. Not a real room. A WhatsApp room. But it had everything a room needs. Furniture, in the form of pinned messages. Other people, in the form of names with photos. A man at the head of the table, in the form of an "advisor" with a title. And a door, which is the trading app you are asked to download in week two.
Premlal downloaded the app.
The first investment was ₹15.05 lakh (about $18K USD). According to the complaint, this went into one fake IPO through the first platform. The dashboard updated. The numbers moved in the direction numbers move when you want to believe. He invested ₹9.15 lakh ($11K USD) in a second allotment. Then ₹1.36 lakh ($1.6K USD) in a third. Through a second platform, another ₹2.58 lakh ($3.1K USD) into a fourth.
Total, according to the FIR filed with Bhopal's Misrod police: ₹28.14 lakh. About $33.7K USD. A retired Indian engineer's retirement, in the currency the American reader can feel.
The dashboard, also according to the complaint, showed purported returns of over ₹67 lakh ($80.4K USD).
Read that slowly. He had not made ₹67 lakh. He had been shown ₹67 lakh. Those are not the same thing. The screen is not the brokerage. The screen is the wallpaper in the room.
I have been in rooms like this. Not WhatsApp rooms. Real ones. A hundred desks, a hundred phones. The customer on the line is not buying platinum. He is buying a number on a screen we control. The number can be anything we want. The number is whatever keeps him on the phone for one more call. The room I worked in is gone. The mechanism is not. It just moved into the phone in his pocket.
The mechanism has a name. The renaming move applies here. This is not "online fraud." This is a boiler room with no rent. A boiler room used to need a lease, a hundred chairs, a sales manager who walked the floor. Now it needs a WhatsApp account and a website built in a weekend. The overhead went to zero. The pitch did not change. The pitch never changes.
What changed for Premlal was the request.
He had tried to withdraw. I do not know what amount he asked for first. The record does not say. What the record says is that the platform asked for a 20% processing charge before it would release the funds.
That is the moment.
That is always the moment. In every scheme I have ever watched or run, there is a hinge. The hinge is the request for one more payment. The customer who has invested ₹28 lakh and is staring at ₹67 lakh in apparent profit is not in a state to refuse a 20% fee. He is in a state to do the math the operator wants him to do. Twenty percent of what I am owed is a small price to receive what I am owed. He does not yet know that he is not owed anything. He does not yet know that the screen has been lying since the first green digit appeared.
I do not know whether Premlal paid the processing charge. The reporting is silent on that detail. If he did, it would not have been the last request. There would have been a tax. There would have been a verification deposit. There would have been a regulatory clearance fee. The processing charge is not the toll at the exit. The processing charge is the next room down the hallway, and the hallway has no end.
What I know is that he stopped, eventually. He went to the National Cybercrime Reporting portal. He filed. The complaint was routed to the Cyber Crime and High-Tech Crime station as an e-Zero FIR, which is the mechanism Indian police use when a cybercrime crosses jurisdictions and needs to be transferred to the location where the victim sits. From there it went to Misrod police in Bhopal. Inspector in charge Ratan Singh Parihar's station registered the case. The accused are unidentified. The charges are cheating, impersonation, and extortion under the Bharatiya Nyaya Sanhita.
Allegation is not adjudication. The operators have not been found, let alone tried. They may never be found. The platforms have already been taken down and rebuilt under different URLs. The WhatsApp group has been deleted and the next one is already running with a different name and the same script.
I want to put Premlal back in his kitchen for a moment.
The folder is still on the desk. The labels are still in his handwriting. PENSION. GAIL. PPF. LIC. There is no folder for what just happened. There is no file tab for ₹28.14 lakh that left a savings account in four tranches over a few weeks in pursuit of an allotment that did not exist. He is a man who built a career around documentation, and the most expensive transaction of his retirement has no documentation he can trust.
That part may be the saddest. Not the money. The folder.
He is not alone in his week. On June 7, a logistics professional in Navi Mumbai was duped of ₹1.09 crore (about $130K USD) through a WhatsApp group called "IIFL Invesco VII 2026 10x Growth Strategy Y113" and a fake SEBI certificate. On June 9, a retired IT professional in Pune lost over ₹4.43 crore ($530K USD) to a platform that displayed fictitious profits of ₹26 crore. The same day in Mumbai, a sixty-year-old woman lost over ₹2.2 crore ($263K USD). In May, a seventy-one-year-old man in Karnataka lost ₹75.4 lakh ($90K USD) to a group impersonating SBI Securities. A retired hotelier in Mumbai lost ₹49 lakh ($59K USD) in a fake IPO trading scam via WhatsApp.
The escalating list is doing the work here. One after another. And another. And another. The names change. The cities change. The ages do not change much. The mechanism does not change at all.
Indian government data shows cybercriminals took ₹22,845.73 crore (about $2.74B USD) from Indians in 2024, a 206% jump from the year before. That is not a category of crime. That is an industry.
The industry has a sales floor. The sales floor is the group chat. The product is the screen. The close is the processing fee.
Premlal walked into a room he thought was a brokerage. The room was not a brokerage. The room was the close.
- Free Press Journal | June 2026 | "Retired Gail Officer Duped Of ₹28 Lakh In Fake IPO Investment Scam; Fraudsters Used A Fake WhatsApp Group"
- Bhopal Misrod Police | June 2026 | FIR registered against unidentified accused under Bharatiya Nyaya Sanhita sections for cheating, impersonation, extortion
- National Cybercrime Reporting Portal | April-June 2026 | e-Zero FIR filed by victim
- SEBI investor advisories | 2025-2026 | warnings on unsolicited WhatsApp/Telegram investment groups and fake trading apps
- NSE/Moneycontrol | May 30, 2026 | explainer on Foreign Portfolio Scams
- Indian Cyber Crime Coordination Centre (I4C) / Ministry of Home Affairs data | 2024 cyber fraud loss figure of ₹22,845.73 crore
- CloudSEK research reports | 2025-2026 | surge in investment scam ads and fake WhatsApp groups targeting Indian investors
- Related case reporting | May-June 2026 | Navi Mumbai (₹1.09 crore), Pune (₹4.43 crore), Mumbai (₹2.2 crore, ₹49 lakh), Karnataka (₹75.4 lakh)
Editorial Notice
MarkTell is a true crime publication about financial fraud. Some scenes, dialogue, and sequential details are reconstructed from court filings, enforcement actions, news reports, and public records. Where the public record does not provide exact details, editorial reconstruction is used to convey the documented pattern of events. Names of private individuals may be changed to protect identity. All factual claims are sourced to public documents cited in the Evidence Trail above. MarkTell does not provide investment, legal, or financial advice. Nothing published here constitutes a recommendation to buy, sell, or avoid any investment. Allegations described in active cases have not been adjudicated and defendants are presumed innocent until proven guilty. Readers should conduct their own due diligence before making financial decisions.