# Reporting Pathways for exch99 id Fraud - Note 159

Device Hygiene After Suspicious ClicksIf you opened a suspicious panel link or installed an APK, disconnect data, uninstall unknown apps, revoke SMS and accessibility permissions, and run a security scan. Change passwords for email and banking from a clean device and enable two-factor where offered. Preserve scam screenshots separately before deleting, since investigators may ask for them. Recovery-Agent Second ScamsAfter a loss, messages often arrive promising to recover funds for an upfront fee or a small verification deposit. These follow a known script and rarely return money. Verify any helper only through official bank or cyber-cell channels, and never share new OTPs or install remote-access apps at a stranger's request.A short pause here helps: compare what you just read against screenshots or messages you received. Lookalike Domains and ClonesComplaints mention near-identical domains with one letter changed, copied logos, and login pages that harvest passwords. Some clones display borrowed odds to appear active while settling unfairly. Type addresses manually, inspect certificate details, and avoid links forwarded with urgent language. Saving the exact URL and screenshots helps if you later need to report. Bonus and Credit TrapsLarge joining bonuses, loss refunds and credit lines sound generous but often lock withdrawals behind turnover conditions or informal approval. Some users report being asked to deposit more to unlock earlier balances. Treat any condition requiring fresh payment to release your own funds as a reason to stop and preserve evidence. FAQsHow can families help. Discuss messages openly, set rules against OTP sharing and unknown APKs, and review statements together.Are there safer cricket options. Yes: official broadcasts, stats apps, free quizzes and coaching need no staking.What about data already shared. Change passwords from a clean device, revoke app permissions, and watch for impersonation. Additional Note: Weak Points in the Agent ModelUnlike registered platforms with KYC, automated statements and audit trails, agent handling relies on personal wallets and screenshots. If the agent changes numbers, disputes become hard to prove. Agents may also impose informal rules on minimum stakes or withdrawal timing that were never disclosed upfront. Without independent grievance redress, users hold little leverage. For file 159, relate this back to your own notes and keep verification steps in view.

## Additional Note: What To Do After Sending MoneyStop further transfers immediately, even if promised a refund on one more payment. Export chats, note UTRs, dates and numbers, and inform your bank's fraud team. File a report on cybercrime.gov.in or call 1930, and keep the acknowledgement number. Avoid recovery agents who demand upfront fees; they are often a second fraud layer. For file 159, relate this back to your own notes and keep verification steps in view.