Raksha Bandhan Scams: How Cybercriminals Are Exploiting the Festival Spirit

### Executive Summary CloudSEK reports a surge in Raksha Bandhan–themed scams that exploit shoppers and social-media users via phishing (email/SMS/WhatsApp), fake e‑commerce sites and ads, fraudulent delivery/payment requests, UPI collect/QR fraud, impersonation and support‑tech cons. Investigators uncovered multiple IoCs including phishing domains (e.g., rakshabandhanofer.xyz, rakshabandhanoffer.in.net/RakhiOff), a phishing kit (PM.zip/Giftcard), a scam UPI ID (34161FA82032*AA2D24E6B40@mairtel) and a suspected actor’s Facebook profile (shyam.saini.263528); the report also provides triage and mitigation guidance for shoppers, social media users and seniors.