OTP theft, fake sellers, phishing wallets and investment scams — the fraud typology draining Nepali accounts, and the combined ETA, banking-offence and Penal Code remedies that recover and punish.
A texted OTP, a too-good Depot-listed phone, a 'double-your-crypto' group — digital fraud now touches every demographic, and the amounts aggregate into the country's largest property-crime category. Recovery odds decay by the hour as funds layer across wallets and accounts, so remedy knowledge must be instant, not researched after the fact.
The scam typology
OTP and KYC-update phishing harvesting wallet and bank credentials; fake marketplace sellers collecting advances for non-existent goods; impersonation of officials, banks and even relatives demanding transfers; Ponzi-style investment groups paying early 'returns' from later deposits; and sextortion pivoting from embarrassment to extortion. Each leaves distinct traces — and distinct charging options.
The combined legal arsenal
Computer fraud under the ETA (up to 2 years + NPR 100,000) anchors most filings, stacked with Penal Code cheating (up to 7 years, 10 for state-linked fraud), Banking Offence Act charges where payment rails and accounts are abused, and organised-fraud framing for syndicates. Complaints go to the Cyber Bureau within 35 days with transaction IDs, URLs, chat exports and account details; bank-side freezing requests run in parallel through the concerned institutions.
Recovery mechanics
Criminal conviction brings compensation orders, but faster money comes from freezing (same-day bank and wallet-operator requests with complaint references), chargeback and dispute rails where cards were used, and civil suits with attachment against identified fraudsters. Document every rupee's path — layering diagrams persuade investigators, prosecutors and judges alike.
Prevention that actually works
No bank, wallet or police unit asks for OTPs or remote-access installation — that single rule defeats most phishing. Verify sellers through cash-on-delivery or escrow norms, distrust returns above market logic, and keep transaction alerts enabled. Businesses should rehearse payment-verification callbacks for any changed beneficiary details: vendor-impersonation fraud succeeds exclusively through skipped callbacks.
Key takeaways
- OTP phishing, fake sellers, impersonation and Ponzi groups dominate losses
- Stack ETA fraud + Penal cheating + Banking Act charges together
- Freeze first (same-day), complain within 35 days, diagram the money trail
- No legitimate institution ever asks for your OTP
General information for public awareness — not legal advice for your specific situation. Consult an advocate →
Frequently asked questions
I just sent money to a scammer. First three moves?
Call your bank/wallet operator for an immediate freeze with the transaction ID, preserve all chats and numbers untouched, and file with the Cyber Bureau the same day — hour-one action decides recovery.
Can mule account holders be prosecuted?
Yes — knowingly lending accounts for fraud draws abetment and conspiracy liability at half-to-full tariffs. 'I only lent my account' is an admission, not a defence.
Are investment groups promising monthly doubling illegal?
Structurally yes where payouts come from new deposits rather than real returns — pyramid schemes attract fraud, organised-crime and regulatory charges together.
References
- Electronic Transactions Act, 2063, Secs. 51–53 — computer fraud and abetment
- National Penal Code, 2074, Sec. 249 — cheating and fraud grades
- Banking Offence and Punishment Act, 2064 — payment-rail abuse
Verify current wording and commencement at the Nepal Law Commission (lawcommission.gov.np) before relying on any provision. Reviewed by a Nepal-qualified advocate in April 2026.