The WhatsApp stock market group scam follows a script. A stranger adds you to a group of "investors", free tips arrive, and sooner or later you are asked to install an app and pay money into an account that the real broker has never heard of. Four checks break it: the SEBI register, the broker, the UPI ID, and a flat refusal to install any APK file.
Short answerCheck the adviser's name in SEBI's register, and match the contact details, not just the name.Open your broker's app from the Play Store or App Store, never from a link in a chat.Pay only inside the broker's own app. A personal UPI ID is a scam.Never install an APK that arrives in a chat.
How the WhatsApp stock market group scam runs
It usually starts with being added to a group you did not ask for, or with an ad that promises free market training. The group looks active. Members post profit screenshots, thank the admin and ask when the next tip is coming. Most of them are fake accounts or hired hands, and the conversation is scripted.
The free tips are the bait. In some versions the early calls even turn out right, which is easy when a lot of calls go out and only the winners get pointed at later. Then comes the offer that is supposedly not for everyone: a VIP group, an "institutional account", a pre-IPO allotment at a discount, a block deal for selected clients. You are asked to move to a private chat, or to a second group on Telegram.
The next step is the app. You get a link, often a file ending in .apk, because the "special trading platform" is supposedly not on the Play Store. It shows a dashboard with growing profits. You add a small amount and watch it grow, so you add more. When you try to withdraw, there is a tax to pay, then a fee, then a "security deposit". The money was never invested anywhere. The dashboard was a picture.
Who the scammers pretend to be
The convincing versions borrow a real identity. They copy the name, photo and registration details of a genuine SEBI-registered adviser, or use a real broker's logo and a near-identical app name. A PDF "SEBI certificate" is easy to fake, and a group description that says "SEBI registered" costs nothing to type.
Registration is a fact about a person, not about the chat. The adviser in the register may be real and the account messaging you may be someone else using their name. That distinction is the whole trick, and it is why the first check below goes beyond the name.
The same group turns up on Telegram and on Discord with different branding. The platform changes, but the sequence of group, private chat, app and payment does not. If the way you were found is unclear, remember that every member of a WhatsApp group can see your number, which we cover in what strangers in a group can see about you.
How big the problem is
News reporting has repeatedly named fake investment and stock-tip groups among the biggest sources of money lost to cyber fraud in India. We are not quoting a rupee figure here. The published totals differ by source and by period, and none of them is clean enough to stand behind. What is consistent is the pattern: ordinary people, often first-time investors, losing savings in stages rather than all at once.
That staging matters. Each payment feels small and each one comes with a reason. People rarely lose money to a single bad decision. They lose it to a series of plausible ones.
Where the scam breaks
Check the adviser against the SEBI register
Go to sebi.gov.in yourself, by typing the address, and use the intermediaries section to look up the person under investment advisers or research analysts. Registration numbers for advisers start with INA and those for research analysts with INH. A name that is not in the register is the end of the conversation.
If the name is there, go one step further. Compare the phone number and email listed in the register with what the chat is using. Then contact the adviser through the listed details and ask whether they run this group. SEBI rules also do not allow registered advisers to promise guaranteed returns, so any such promise fails the test on its own.
Verify the broker and the app
Search for the broker on its official website, reached through a search engine or by typing the address, not through a chat link. Download its app only from the Play Store or App Store, and compare the developer name with what the broker publishes. A trading app that exists only as a download from a chat is not a broker's app.
Verify the UPI ID
A genuine broker takes your funds through its own app or website, into your trading account, and you can see where they land. If someone sends you a UPI ID, an account number or a QR code in a chat, treat it as theirs and not the broker's. Read the name that appears before you confirm any payment. A personal name for a "company" account is a stop sign.
Never install an APK
An APK from a chat bypasses the checks the Play Store at least attempts. It can request permissions to read your messages, which includes the OTPs your bank sends you. There is no investment opportunity that requires a file sent over WhatsApp. If you already installed one, remove it and read the next section.
If you have already paid
Call your bank's fraud line first and tell them it was a payment made under a scam. Then report it on the national cybercrime portal and helpline, and file a complaint through SEBI's SCORES system, which you can reach from the SEBI site. Keep the chat, the UPI ID, screenshots of the app and every transaction reference.
Expect a second wave. People who have lost money get contacted by "recovery agents" who want a fee to get it back, and this is another version of the same scam. Report the group inside the app too; the WhatsApp Help Centre explains how to report and block.
If you only do one thing
Before any money moves because of a chat, look the name up on SEBI's register and call the number the register lists. That single call defeats most of what is described above. For the general checks that apply to any group, not only investing ones, see the signs a group link is not what it claims, and for the basics of the links themselves, how group links work.