#FactCheck - Viral Graphic Falsely Attributes Statement on UGC to CM Yogi Adityanath

Executive Summary
‍

A video from the Parliament complex is being widely shared on social media with the claim that Bharatiya Janata Party (BJP) MP Kangana Ranaut has come out in support of the ongoing Cockroach Janata Party (CJP)-led protest at Delhi’s Jantar Mantar. The viral post claims that Ranaut can be seen raising slogans in support of the protesters. CyberPeace Research Wing’s research found the claim to be misleading. The viral footage is not related to the ongoing CJP protest. It dates back to April 2026, when BJP women MPs staged a demonstration outside Parliament after the 131st Constitutional Amendment Bill failed to pass. The old video is now being falsely linked to the current protest.

‍

Claim:
‍

On July 20, 2026, an X (formerly Twitter) user shared the viral video claiming that “BJP MP Kangana Ranaut has now started protesting against her own party.”

The post link, archive link and screenshot are provided below.

https://x.com/Kshivasp_IND/status/2079215438664233391 

https://archive.ph/m5OHh

‍ 

‍

Fact Check:

‍

To verify the claim, the Desk extracted keyframes from the viral video and conducted a reverse image search using Google Lens. This led to the same video uploaded on the Instagram account ashutoshjourno on April 17, 2026. The caption accompanying the post read, “Aaj Makar Dwar ka nazara alag tha” (The scene at Makar Dwar was different today).

https://www.instagram.com/reels/DXPQoIAiQ3L/ 

‍

‍

In the next stage of the research, the Desk carried out a keyword search based on the clues obtained from the Instagram post. This led to a Zee News report published on April 17, 2026, which reported that NDA MPs staged a protest outside Parliament after the 131st Constitutional Amendment Bill failed to pass. The visuals in the report matched those seen in the viral video.

https://www.instagram.com/reels/DXPL4tOky5P/ 

‍

‍

Conclusion:

‍

CyberPeace Research Wing’s research found the viral claim to be misleading. The video is unrelated to the ongoing CJP protest at Jantar Mantar. It was recorded in April 2026, when BJP women MPs protested outside Parliament following the failure of the 131st Constitutional Amendment Bill to pass. The old footage is now being falsely shared as a recent video of Kangana Ranaut supporting the CJP protest.

‍

Introduction

The information of hundreds of thousands of Indians who received the COVID vaccine was Leaked in a significant data breach and posted on a Telegram channel. Numerous reports claim that sensitive information, including a person’s phone number, gender, ID card details, and date of birth, leaked over Telegram. It could be obtained by typing a person’s name into a Telegram bot.

What really happened?

The records pertaining to the mobile number registered in the CoWin portal are accessible on the Malayalam news website channel. It is also feasible to determine which vaccination was given and where it was given.

According to The Report, the list of individuals whose data was exposed includes BJP Tamil Nadu president K Annamalai, Congress MP Karti Chidambaram, and former BJP union minister for health Harsh Vardhan. Telangana’s minister of information and communication technology, Kalvakuntla Taraka Rama Rao, is also on the list.

MEITY stated in response to the data leak, “It is old data, we are still confirming it. We have requested a report on the matter.

After the media Report, the bot was disabled, but experts said the incident raised severe issues because the information might be used for identity theft, phishing emails, con games, and extortion calls. The Indian Computer Emergency Response Team (CERT-In), the government’s nodal body, has opened an investigation into the situation

The central government declared the data breach reports regarding the repository of beneficiaries against Covid to be “mischievous in nature” on Monday and claimed the ‘bot’ that purportedly accessed the confidential data was not directly accessing the CoWIN database.

According to the first complaint by CERT-In, the government’s cybersecurity division, the government claimed the bot might be displaying information from “previously stolen data.” Reports.

The health ministry refuted the claim, asserting that no bots could access the information without first verifying with a one-time password.

“It is made clear that all of these rumours are false and malicious. The health ministry’s CoWIN interface is entirely secure and has sufficient data privacy protections. The security of the data on the CoWIN portal is being ensured in every way possible, according to a statement from the health ministry.

Meity said the CoWin program or database was not directly compromised, and the shared information appeared to be taken from a previous intrusion. But the hack again highlights the growing danger of cyber assaults, particularly on official websites.‍

Recent cases of data leak

Dominos India 2021– Dominos India, a division of Jubilant FoodWorks, faced a cyberattack on May 22, 2021, which led to the disclosure of information from 180 million orders. The breach exposed order information, email addresses, phone numbers, and credit card information. Although Jubilant FoodWorks acknowledged a security breach, it refuted any illegal access to financial data.

Air India – A cyberattack that affected Air India in May 2021 exposed the personal information of about 4.5 million customers globally. Personal information recorded between August 26, 2011, and February 3, 2021, including names, dates of birth, contact information, passport information, ticket details, frequent flyer information from Star Alliance and Air India, and credit card information, were exposed in the breach.

Bigbasket – BigBasket, an online supermarket, had a data breach in November 2020, compromising the personal information of approximately 20 million consumers. Email IDs, password hashes, PINs, phone numbers, addresses, dates of birth, localities, and IP addresses were among the information released from an insecure database containing over 15 GB of customer data. BigBasket admitted to the incident and reported it to the Bengaluru Cyber Crime Department.

Unacademy – Unacademy, an online learning platform, experienced a data breach in May 2020, compromising the email addresses of approximately 11 million subscribers. While no sensitive information, such as financial data or passwords, was compromised, user data, including IDs, passwords, date joined, last login date, email IDs, names, and user credentials, was. The breach was detected when user accounts were uncovered for sale on the dark web.

2022 Card Data- Cybersecurity researchers from AI-driven Singapore-based CloudSEK found a threat actor offering a database of 1.2 million cards for free on a Dark Web forum for crimes on October 12, 2022. This came after a second problem involving 7.9 million cardholder records that were reported on the BidenCash website. This comprised information pertaining to State Bank of India (SBI) clients. And other well-known companies were among those targeted in high-profile data breach cases that have surfaced in recent years.

Conclusion

Data breach cases are increasing daily, and attackers are mainly attacking the healthcare sectors and health details as they can easily find personal details. This recent CoWIN case has compromised thousands of people’s data. The All-India Institute of Medical Sciences’ systems were compromised by hackers a few months ago. Over 95% of adults have had their vaccinations, according to the most recent data, even if the precise number of persons impacted by the CoWin privacy breach could not be determined.

Introduction

‍

In October 2024, when the comedian's phone rang, and the voice at the other end claimed to be a FedEx representative, comedian Ankita Shrivastav thought it was a simple issue of misdelivery or customer grievance. The caller said that a parcel in her name was detected being shipped to Iraq and contained illegal drugs. The phone was soon handed over to what appeared to be police personnel in uniform, and she was told that she was under investigation and placed under a so-called digital arrest. For seven hours, she was ordered not to disconnect the call, leave her home, or contact anyone. Through fear, authority, constant surveillance, and psychological pressure, the scammers coerced her into transferring ₹9 lakh in the FedEx parcel scam.

This is the anatomy of one of India's fastest-spreading cyber frauds, and it is costing victims everything.

‍

The Modus Operandi

‍

The most concerning part is the sheer consistency of the script. It usually starts with an unsolicited call, made on a spoofed number that could show up as a legitimate courier or government agency. The caller acts as a FedEx/DTDC executive and claims that a parcel dispatched in the victim’s name to either Taiwan, Iraq, Thailand, or Cambodia has been intercepted and contains drugs, forged passports, or fake credit cards.

As the victim tries to establish that they have no knowledge of this, the scammers smoothly shift the conversation to someone must have impersonated the victim’s Aadhaar number. The victim is now both accused and victim and, therefore, more easily manipulated.

The call is "transferred" to a fake NCB officer or cybercrime cell official. The victim sees a person dressed in uniform seated behind a mock police station set with official-looking documents scattered on the desk. A fake arrest warrant that carries the victim’s real name, address, and Aadhaar number, presumably acquired from stolen databases, is presented to the victim.

This is what the scammers call the "digital arrest." The victim is commanded not to move from the camera, nor leave the house, nor speak to anybody. Scammers take turns monitoring the call, who eventually ask the victim to transfer cash into a "secure government account" for RBI or CBI verification. 

‍

The Psychology of Fear

‍

"The art of scamming is psychological rather than technological," journalist and author Soumya Gupta opines. The scammers use two deeply primal fears: the fear of the police and the fear of social disgrace. Their victims are manipulated into believing that ending the call is tantamount to pleading guilty and that confessing to friends and family will only exacerbate their current circumstances. The victims' isolation is deliberately induced and combined with fatigue and disorientation.

"From a young age, we are taught to be scared of the police and not to question them,” comedian Ankita Shrivastav, who fell victim in October 2024, explains that childhood condition silenced the alarm bells ringing in my head. Shrivastav admitted that her fear of damage to her reputation made her more susceptible to the scam.

‍

The Human Cost

‍

The FedEx parcel scam is targeting everyone, irrespective of age, income, background, or education. Victims of this scam show the kind of different people they are: A 70-year-old veteran journalist was psychologically tortured for eight days in Bangalore, losing 1.2 crores, whereas a 61-year-old retired executive of a multinational was video watched for almost a fortnight in Bangalore, losing 9.14 crores, and additionally, a 25-year-old woman lost 10 lakhs through a video call scam in Coimbatore.

Such a varied mix of victims in such different cases suggests how hard it is to stereotype the ones being swindled: there can be individuals of different age groups ranging from 25 to 70 years old, both educated and non-educated.

‍

Why the Scam Is Spreading?

‍

This FedEx parcel scam is a result of a highly industrialised, sophisticated cybercrime system. The National Cyber Crime Reporting Portal records over 45,000 complaints tagged as specifically 'courier-impersonation fraud' in 2024 alone, where a 1,200-crore loss was registered in that category. 

This scam is powered by stolen Personal Identifiable Information (PII), illegally gathered by scammers through compromised e-commerce stores and rogue registry sites. This data enables the scammers to personalise and tailor the conversation to each individual to make it more believable. Furthermore, fake arrest warrants can be produced within minutes using official-looking templates, and the scammers utilise AI voice cloning and deep-fake videos of government officials. Vast networks of call centres (some based out of India and some overseas, including scam compounds in Cambodia and Myanmar) operate this scam with teams working in shifts. Money is quickly laundered into accounts of 'mule' account holders and quickly into cryptocurrency wallets. Post 24 hours of receiving the funds, recovering money is nearly impossible.

‍

What You Must Do If You Get This Call?

‍

One should always remember: no genuine government official will ever carry out an arrest over a video call. There is no "digital arrest," and this process has absolutely no basis in Indian law. If you do get such a call:

• Cut the call immediately: The scammers have you where they want you if you stay on the line. It is not illegal to hang up on them.
• Do not transfer money under threat or compulsion: No authentic investigative process ever requires you to move money to a "secure government account."
• Never share: your Aadhaar details, bank details, OTP, or passwords with anyone you speak to on the phone.
• Do not provide video statements: Whatever you say can be recorded and used to blackmail you further.
• Verify information independently: Call FedEx India (1800-22-6161) or any courier company using numbers from their official website, never numbers provided to you by the caller.
• Lock: your UPI, cards and Aadhaar biometrics instantly if you feel you have shared information with them.
• Call: 1930 within an hour of money transfer. The rate of recovery is 40-60% within one hour and less than 5% after 24 hours.
• File a complaint at cybercrime.gov.in and an FIR at your local cyber police station.
• Tell someone: Isolation is the scammer's greatest tool. Breaking it breaks the scam

‍

Conclusion

‍

The FedEx parcel scam is also based on a very basic human reaction: the fear of being accused, the urge to obey any figure that represents authority, and the desire to avoid public humiliation. It is designed to skip any part of the brain that may be used to rationalise anything. The only real prevention is to realise, before answering, that the call is never about the FedEx parcel, never from FedEx.

‍

References

‍

• https://www.aol.com/news/fedex-says-parcel-drugs-scam-220400617.html
• https://righttoinformation.wiki/fedex-courier-scam-recovery
• https://www.thenewsminute.com/karnataka/beware-of-fedex-scam-bengaluru-journalist-loses-rs-12-crore
• https://www.digit.in/news/general/coimbatore-woman-loses-rs-10-lakh-in-shocking-courier-scam-heres-what-happened.html
• https://www.deccanherald.com/india/fedex-courier-scam-a-tale-of-terror-trickery-and-deceit-2804802
• https://www.deccanherald.com/india/karnataka/bengaluru/fedex-frauds-con-scared-retiree-of-rs-9-crore-2810169
• https://www.deccanherald.com/india/karnataka/bengaluru/fedex-frauds-hold-woman-in-digital-captivity-for-8-days-2848168
• https://www.deccanherald.com/india/karnataka/bengaluru/how-to-fight-fedex-courier-scam-2836566
• https://www.businesstoday.in/india/story/fedex-scam-lawyer-blackmailed-424883-2024-04-09
• https://www.ncrb.gov.in/uploads/files/2CrimeinIndia2024-VolumeII.pdf‍
• https://www.newsmobile.in/fraud-and-scam/indian-comedian-falls-victim-to-fedex-digital-arrest-scam-loses-rs-9-lakh/