AI Scams in Nepal: Real Cases, Real Victims, Real Fixes

Fifteen days before the FIFA World Cup kicked off, an advertisement appeared on the Facebook timeline of a student living in a rented room in Kathmandu. It read: Watch the World Cup for Free.

He clicked. His phone shut down. He switched it back on. In the few minutes it took to boot, Rs 20,000 had been withdrawn from his mobile banking and eSewa accounts.

He had been trying to save Rs 999 — the fee Nepal's broadcasters were charging for World Cup coverage. Instead he lost twenty times that, in the time it takes to make tea. He rushed to the Cyber Bureau at Bhotahity and found out he was not alone: 115 people had already complained about the same trap, and the total stood at Rs 22.9 million (Nepal News).

That student — the report calls him Parmeshwar Tiwari, a changed name — is the face of AI scams in Nepal. Not a sci-fi robot. A tired kid in a rented room who wanted to watch football.

This is not a warning about the future. It is an account of what already happened, with names, amounts and dates, plus what actually works to stop it.

What Nepal's police are actually recording

Forget the hype for a second and look at the ledger.

That is roughly 56 complaints every single day, and the number is climbing (Rising Nepal). By June 2026 the Cyber Bureau had logged 19,334 incidents in the year, of which 6,735 involved financial fraud. Of 6,684 registered complaints, just 579 were resolved. An estimated Rs 2 billion has been lost — and most of it was never traced (Nepal News).

One line from that reporting deserves to be read twice:

The victims of online fraud are not just illiterate people or those unaware of technology; the educated class appears to be bearing a massive blow.

A retired Senior Superintendent of Police was once talked out of his bank details by a caller posing as the head of eSewa and offering him a Rs 9,000 bonus. He lost Rs 150,000. The Central Investigation Bureau has said that more than 500 phone numbers are actively running phishing operations in Nepal (Nepal News). If a career police officer can be caught, so can you.

Five real cases, five real Nepali accounts

Here is the uncomfortable truth about most of what gets called an "AI scam": the technology underneath is often embarrassingly simple. What is sophisticated is the script. These are five documented cases, with the names police actually published.

1. The "free World Cup" trap

Parmeshwar's ad led to an APK — an app file installed outside the official Play Store. The syndicate behind it used apps named EXE, BAT and APK, and police believe they took more than Rs 20 million from football fans. The money was moved from one account across ten others and then sent abroad so fast that it could not be frozen.

The Cyber Bureau issued a public warning on 15 June 2026 telling people not to install "Free World Cup" or "Free Cinema" APKs. Complaints dropped immediately — but the Rs 22.9 million was already gone. Nepal Investment Mega Bank issued its own notice four days later.

The lesson: a link that arrives with an offer is never a gift. It is a hook.

2. The eSewa call: "There are reward points in your account"

On 16 June 2026, police arrested Shubham Sah, 22, of Madhav Narayan Municipality-2 in Rautahat. He had been calling businesses and introducing himself as an eSewa employee. His opening line, according to the police file, was:

"There are reward points in your account, why haven't you used them?"

He called the mobile number of Yak and Company Enterprises repeatedly, pushing them to withdraw the rewards. An OTP had to be shared "for verification." They gave it. Sah moved Rs 198,499 to an eSewa account belonging to Evolution Trading Pvt. Ltd. — and bought himself an iPhone 17.

In Kailali, a woman named Sapana got a WhatsApp call at 5:57 in the evening from someone claiming to be in eSewa's central office, offering a Rs 4,000 bonus. She was sceptical and hung up. They called back and said she only needed to open her email. She followed instructions until screen sharing began. Within hours, Rs 210,000 was gone — including further withdrawals after she had already changed her passwords. She has not recovered a rupee (Nepal News).

The lesson: an OTP is not a verification step. It is the money. And screen sharing is handing over the keys.

3. One text message, Rs 34.8 lakh gone

On 26 May 2025 at 3:53 pm, Santosh Kumar Chaudhary received an SMS from a sender identified as "The Alert." It looked routine. He tapped the link. Nothing seemed to happen.

By morning, multiple unauthorised transactions had emptied accounts at Nepal Bank Limited and Laxmi Sunrise Bank. Investigators confirmed his ConnectIPS credentials had been captured through phishing. Total loss: Rs 3,482,377.

Thirteen people were charged under Section 249 of the Muluki Criminal Code, which carries up to seven years in prison. All thirteen were absconding (Techpana).

The lesson: you will not feel the theft happen. There is no alarm. The notification arrives after the money has left.

4. The lost SIM card

Six years after a SIM card registered to Kanchi Lama was lost, two men — Roshan Pahadi, 26, of Bhaktapur, and Subash Ojha, 25, of Lalitpur — used that same number to activate mobile banking at Kumari Bank. From there they pulled money out of accounts belonging to other people, routing it through eSewa, Khalti and ordinary bank transfers. Police recovered Rs 24,47,528 (Ratopati).

No AI, no deepfake. Just a lost SIM, a reactivated number, and a bank that did not check.

The lesson: if you lose a SIM, blocking it is not optional. That number is a key to every account linked to it.

5. The scammers who became the Cyber Bureau

In May 2026, a group of four people did something almost poetic in its audacity: they made the words "Cyber Bureau" appear on Truecaller when they called their victims.

Police arrested Deepak Limbu, 30, of Sangurigadhi, Dhankuta; Saurav Bhujel, 21, and Sajal Rai, 28, both of Dharan; and Srijan Thapa, 24, of Inaruwa. They had been using fear, intimidation and enticement to extract money while impersonating the very agency that investigates them. Earlier, two men from Sunsari — Manish Kumar Mehta and Indrajit Yadav — were arrested as money mules in a scam that sent fake emails signed with the name of DIG Tek Prasad Rai and falsely claiming links to the Central Investigation Bureau and the National Cyber Security Centre (Kathmandu Post).

The lesson: authority is now a costume anyone can wear. Uniforms, logos and Truecaller names prove nothing.

---

Notice what is missing from all five cases: a robot. Four of the five required no artificial intelligence at all. That distinction matters, because it tells you where the real danger is heading.

Where the AI actually enters the picture

Everything above is fraud conducted over a phone. AI scams in Nepal turned genuinely frightening the moment the forgery became good enough to fool a newsroom. If you want the plain-language version of what actually changed in the technology itself, start with our explainer on agentic AI.

Now the part that is genuinely new. In July 2026, a verified Facebook page called "Paulo Battista" posted a paid advertisement aimed squarely at users in Nepal.

The video looked like a podcast clip. In it, Nepal's richest man, Binod Chaudhary, sat with podcaster Sanjay Silwal Gupta and discussed an investment platform. The pitch: the Government of Nepal had launched a platform where Rs 38,318 today would return Rs 535,500 every week, with the first payment landing in your bank account the next day.

It was fake from the first frame. Techpana's fact-check desk confirmed the video was a manipulated edit of a real one-hour-57-minute podcast that contains no such discussion. Moderation firm Hive rated it 99.9% AI-generated. The link led to a cloned copy of The Kathmandu Post, complete with the paper's logo, fake journalist bylines and fabricated reader comments, promoting a platform called "Prime Aura" that supposedly had investment from Nepal Oil Corporation. Neither the platform nor the investment exists (Techpana).

The CG Group has publicly warned that Binod Chaudhary's image and voice are being misused in deepfake scam videos.

Nepal's deepfake election

Nepal got an early, unwanted demonstration during the run-up to the 5 March 2026 national election.

A video showing Rabi Lamichhane, Balen Shah and Kulman Ghising walking side by side set social media alight, with speculation that a new political alliance had formed. It was fabricated (SCMP). A deepfake audio clip placed Swarnim Wagle in a private conversation with India's Prime Minister — and was deliberately circulated in Hindi and English to widen its reach (South Asia Monitor). A fabricated image showed Pushpa Kamal Dahal weeping over a photograph of a civil-war "martyr." To a digitally fluent user it was obviously fake; to an older citizen it was real, and it worked (myRepublica).

The most unsettling case cut both ways. A viral video appeared to show Balen Shah aggressively shoving his own party workers in Damak. His team claimed it was a deepfake. Even AI experts could not conclusively determine whether it was manipulated or authentic (myRepublica).

This is not only a Nepal problem — it is the global pattern. Australia's regulator ASIC removed a record 19,400 online scams in one year, up 182%, with the prime minister, opposition leader and mining billionaires among the most-impersonated faces (ABC News). In India, a 69-year-old man lost ₹2.11 crore after being lured by an AI-generated video impersonating the Union Finance Minister (The Hindu).

When a country's best-known businessman can be cloned into an advertisement, "I saw it with my own eyes" stops being evidence of anything.

Why your ears and eyes no longer protect you

For decades, we defended ourselves with instinct. Bad spelling. A strange email address. A voice that didn't sound quite right. Every one of those defences is now obsolete.

The numbers are brutal:

• Three seconds of clear audio is enough to clone a voice with an 85% match; a few more clips push it to 95% (McAfee).
• 77% of people who receive a convincing AI-cloned voice call end up losing money.
• Fewer than 5% of victims ever file an official report — so the true scale is far larger than any statistic.
• A University College London study found listeners identified deepfakes correctly only about 73% of the time; training improved that by just 3.84%. When researchers pooled 56 similar studies, human detection landed close to chance.
• The NSA, FBI and CISA jointly concluded back in 2023 that automated tools scanning for visual or audio artefacts can no longer be relied on to detect tampering.

And the economics have collapsed. A single person can now build a polished, convincing scam operation in hours, for around $60 a month. Criminal networks sell "Scam-as-a-Service" kits bundling voice cloning, deepfake video, fake website generators and targeted messaging into ready-made products. AI now writes the scripts, builds the personas and optimises the messages (Trend Micro).

The cautionary tale is the Arup case: a Hong Kong engineering firm's finance employee joined what looked like a routine video call with the CFO and colleagues. Every face and voice was AI-generated. He authorised 15 transfers totalling $25.6 million. No one has been arrested. The money was never recovered.

The family-emergency version is simpler and closer to home. An American mother, identified only as Rachel, received a call that showed her daughter's real name, photo and number. She heard her child crying, saying she had been in an accident. The voice was exact — "the inflection, everything." She was two hours into wiring money when her real daughter happened to call on a second line (InvestigateTV). In September 2026, students at Dhaka University were targeted the same way, with parents paying out after hearing cloned voices of their sons claiming arrest (The Business Standard).

Nepal has not yet produced a widely reported voice-clone kidnapping case. That is not reassurance. Every ingredient is already here: a huge diaspora whose voices sit in WhatsApp voice notes and Facebook reels, families used to urgent calls from abroad, and eSewa, Khalti and IME Pay moving money in seconds.

Nepal is a target — and a launchpad

There is a second, less discussed reality: Nepal is not only where the victims are. It is where the operations run.

Nepal sits on the FATF grey list, and the reason is partly digital. In April 2025 the Central Investigation Bureau arrested 21 people across 11 districts for laundering Rs 17.86 billion through digital wallets including Sajilo Pay and Paywell Nepal — cash disguised as remittance from migrant workers in Malaysia, Qatar, Saudi Arabia and the UAE (Nepal News). A Nepal Rastra Bank official admitted the gap plainly: "We've focused heavily on traditional banks and neglected the fast-growing digital payments sector."

Meanwhile, Nepal has repeatedly served as the operating base for scams aimed at India: Chinese-run instant-loan call centres where local staff were hired under the guise of promotional work and then forced to abuse Indian borrowers and morph their photographs for blackmail; a Rs 10.40 crore stock-fraud operation run from a Nepali hotel room; a Nepalese national known as Mahesh who opened mule accounts feeding a Rs 23 crore syndicate; a Rs 6 crore fraud accused caught fleeing across the border at Raxaul. Open borders, cheap connectivity and jurisdictional friction make the country convenient for operators and hard for investigators.

What the state is doing — and where it is losing

Credit where it is due. Nepal Police are preparing an Anti-Cyber Scam Centre under the Cyber Bureau, with integrated command centres at federal, provincial and district level, pulling in Nepal Rastra Bank, the Nepal Bankers' Association, the Telecommunications Authority and internet service providers. The draft Information Technology and Cyber Security Bill 2082 proposes up to five years in prison and a Rs 1 million fine for obstructing national cyber systems, and for the first time adds provisions on AI misuse. Nepal Rastra Bank now requires licensed payment providers to integrate AI and machine-learning fraud detection, and has identified the three routes most fraud travels: tricking you into authorising the transfer yourself, stealing your passwords, PINs and OTPs, and getting onto your device through remote-access or screen-sharing apps (Law in Partners).

One legal provision works in your favour and almost nobody knows it: Section 52 of the Electronic Transaction Act directs that money obtained by computer fraud be recovered from the offender and returned to the victim. Restitution is written into the offence itself (KG Law).

Now the honest part. 579 complaints resolved out of 6,684 registered. Police themselves say syndicates based abroad build apps that capture OTPs automatically and are "quite difficult to arrest." In the World Cup case, money crossed ten accounts and left the country before anyone could act. In the Chaudhary case, all thirteen accused were still absconding when charges were filed. Nepal's deepfake prosecutions currently lean on Section 47 of the ETA and the defamation provisions of the Muluki Criminal Code — statutes written before any of this existed.

The state is not losing because it is careless. It is losing because the money moves faster than the paperwork.

The 10-minute family playbook

Do this tonight, with the people you live with. It takes ten minutes and it is the only defence that does not depend on detecting a fake.

• Agree on a family code word. One odd phrase, never written in any message, never posted online.

  laliguras

  .

  chatamari

  . Something no algorithm has ever seen. A cloned voice cannot answer a question it was never trained on.
• Verify through a different channel. Hang up and call the person back on the number already saved in your phone. Never redial the number that called you, and never verify through the platform that contacted you — if that account is compromised, you are calling the scammer.
• Never share an OTP, PIN, password or screen. Not with a bank, not with police, not with eSewa, not with anyone. No legitimate institution on earth needs it.
• Treat urgency and secrecy as the alarm. "Don't tell your father." "The police will arrive in five minutes." "This must be done in ten minutes." A real emergency survives a phone call to another relative. A scam requires isolation.
• Lock down where your voice lives. Restrict who can see your Facebook and TikTok videos, especially ones where your children are speaking. Three seconds is all they need.
• Never install an app from a link. Not for a refund, not for a bonus, not for a World Cup, not for an eKYC. Official stores only.
• Set a wallet limit. Keep your daily eSewa/Khalti transfer limit low. It will not stop a determined thief, but it caps the damage while you sleep.
• Report even small losses. Under-reporting is why the official numbers look smaller than reality, and it is how patterns get traced.

If the money is already gone: the first 60 minutes

Speed is the only variable you still control. Money reported within the first hours has a real chance of being frozen in transit; money reported next week usually does not.

1. Call your bank or wallet provider immediately on the official number from your card or app — not any number from the message. Ask them to freeze the receiving account and flag the transaction.
2. File a complaint with the Cyber Bureau at cyberbureau.nepalpolice.gov.np, by email at cyberbureau@nepalpolice.gov.np, by hotline on 9851286770, or in person at Bhotahiti, Kathmandu.
3. Preserve everything. Screenshots of the chat, the caller ID, the transaction slip, the SMS, the sender's number, the account the money went to. Do not delete the original messages — metadata matters.
4. Also file with Nepal Rastra Bank's grievance channel at

   gunaso.nrb.org.np

   , or through the central bank's main site at nrb.org.np.
5. Tell your family the same day. Not for sympathy — because the same script is almost certainly running against them right now.

Quick answers

Is this really AI, or just old fraud in new clothes?

Both, and the blend is the problem. The OTP calls, the SMS links and the lost-SIM tricks are old-school social engineering that needs no AI at all. What AI has changed is the polish — perfect grammar, professional-looking clones of real news sites, and voices that are indistinguishable from your family. Expect the boring scam to arrive wearing a flawless costume.

Someone called using my child's exact voice. What do I do?

Ask for the code word. If they cannot produce it, hang up and call your child on the number saved in your contacts. Then report the number. Do not debate with the caller — every second on that line is a second they are working on you.

I saw a video of a famous businessman endorsing an investment. Is it real?

Almost certainly not. The Binod Chaudhary deepfake was rated 99.9% AI-generated and ran as a paid advertisement on a verified page. If a public figure genuinely endorsed something, it would exist on their own verified channels. Check there, and check with the company directly.

How do I know if an investment offer is a scam?

If returns are guaranteed, if profits are extraordinary, if you were recruited through a WhatsApp group full of screenshots, or if withdrawal requires paying a "tax," "penalty" or "transfer charge" first — it is a scam. Real markets fluctuate. Fraud dashboards never do.

Will I get my money back?

Sometimes, rarely, and mostly if you report within hours. Of 6,684 registered complaints, 579 were resolved. Section 52 of the ETA does order restitution, and police do freeze accounts — but the money is usually layered across mule accounts and sent abroad within minutes. Plan for prevention, not recovery.

---

AI scams in Nepal are not a distant threat dressed up as news. They are 56 complaints a day, Rs 2 billion already gone, a cloned Kathmandu Post website, and the voice of the country's most famous businessman selling a government scheme that does not exist.

The old advice still works, because the psychology has not changed — only the forgery has. Hang up. Call back on a number you already trust. Never share an OTP. Never install an app from a link. And agree on a code word with your family tonight, before the phone rings.

The scammers have upgraded their tools. You do not need better technology to beat them. You need one word they do not know.