Cyber Crime Centre Warns of Boss Scam

The Indian Cyber Crime Coordination Centre (I4C), under the Ministry of Home Affairs, issued an advisory on 22 June 2026 on a cyber fraud called the “Boss Scam” or CEO impersonation fraud. The scam uses malicious archive files, malware infection, and account impersonation to trigger unauthorised financial transfers through email and WhatsApp.

What is the Boss Scam?

The Boss Scam is a form of social engineering fraud that targets senior executives, chief executive officers, and finance personnel. In this fraud, criminals impersonate a senior official and send urgent instructions for money transfers to subordinate employees or corporate finance teams.

How the Fraud Operates

Cybercriminals send malicious archive files through email or WhatsApp and present them as urgent regulatory or compliance documents. When a victim opens the file on a Windows device, malware can infect the system and hijack active Web WhatsApp sessions. The fraudster then uses the genuine WhatsApp account of the executive to send transfer instructions. Some cases involve impersonation of regulators such as the Reserve Bank of India to create pressure for immediate action. The fraud depends on urgency, authority, and digital account compromise.

Cybersecurity Measures and Verification Steps

The I4C has advised organisations to strengthen cybersecurity protocols, improve employee awareness, and use verification mechanisms for financial transactions. Executives are advised not to open unsolicited attachments, even when the message appears work-related, and to verify financial instructions through a separate communication channel. Digital communications used for payments and approvals require secure handling, especially when messages involve urgent transfers, compliance notices, or identity-based requests.

Important Facts for Exams

• The Indian Cyber Crime Coordination Centre functions under the Ministry of Home Affairs.
• CEO impersonation fraud is also called the Boss Scam.
• Web WhatsApp sessions can be hijacked after malware infection on a device.
• The Reserve Bank of India is sometimes impersonated in such frauds.