The Telegram 'task job' scam in Nepal: how Rs 5,000 in and Rs 8,000 back turned into Rs 14.49 lakh

A man in Kanchanpur got a WhatsApp message from a foreign number last year offering part-time work. The handlers, who used the names Ely Reception and Lucas on Telegram, asked him to subscribe to 24 YouTube channels. Easy. Then came the business tasks: deposit Rs 5,000, receive Rs 8,000 back. He did, and the Rs 8,000 arrived. That was the hook. Over the following weeks, chasing a promised 30% bonus, he moved Rs 14,49,000 from his Siddhartha Bank account and his mother's Nabil account into a string of bank and eSewa accounts before the handlers went silent.

The case is now at Kanchanpur District Court with 15 defendants, all absconding, all account holders from a dozen districts. It is the clearest Nepali record of a scam that the Cyber Bureau has been logging by the thousand, and every stage of it was designed to feel reasonable at the time.

The ladder, stage by stage

The script barely varies between cases, which is useful: once you know the shape, the second message gives it away.

The Kathmandu Post's December 2024 account of a 27-year-old who answered a sponsored ad follows the same path: a coordinator posing as a Daraz subsidiary, a Rs 5,000 membership fee, Rs 1,000 paid after the first task, a month of escalating deposits, a request to recruit five more people, then a block. He lost Rs 25,000 he had saved for rent. The Kanchanpur charge sheet reported by TechPana describes the Rs 5,000 in, Rs 8,000 out stage in the prosecutors' own words: the fraudsters had him deposit Rs 5,000 and returned Rs 8,000 "to win his trust."

NRB's Financial Intelligence Unit, in its 2024 Strategic Analysis Report, defines the employment-fraud typology the same way: victims are made to pay "advanced payment for purchasing commodities to boost sales of a trading platform or a guarantee fee." The report also notes that 70% of individuals flagged for cyber-enabled fraud were aged 19 to 30, and that fraudsters test an account with a Re 1 debit before using it. A one-rupee transaction you did not make is a signal, not a glitch.

One stage reported from Indian cases has not shown up in a documented Nepali file: the "your account is frozen, pay the tax to withdraw" demand that follows a fake balance on a fake dashboard. Treat it as the same scam wearing a different jacket if it arrives.

How big this is

The Cyber Bureau's numbers are the only ones that exist, and they are large enough.

The FY 2081/82 figures are from the Kathmandu Post's July 2025 report, the FY 2082/83 totals from the Himalayan Times in August 2026, and the job-fraud counts from the Bureau's SP Dilip Giri in a June 2026 Nepalnews feature. The Telegram curve is the striking one: zero Telegram fraud complaints in FY 2022/23, 20 in FY 2023/24, 696 in the first five months of FY 2024/25. By Mangsir 2081 the CIB's spokesperson put Telegram-fraud complaints at the Bureau above Rs 23 crore. Police headquarters has since instructed the Bureau not to disclose loss totals, so there is no newer figure.

The dip in job-fraud complaints from 2,053 to 1,108 lines up with the Telegram block ordered on 18 July 2025 over "misuse of Telegram for online fraud and money laundering." Telegram applied to register in Nepal in August 2025, claiming about 1.1 million Nepali users; as of October 2025 the NTA said no decision had been taken to lift the block, and the carriers enforce it while most ISPs have quietly reopened it. The operators did not wait. SP Giri's description of the current script has the ad leading to WhatsApp accounts with names like "Dr. Sunny" and "Dr. Imran," and WhatsApp complaints tripled Telegram's in FY 2082/83. The platform is interchangeable. The ladder is the product.

Where the money goes, and why it does not come back

Every rupee the Kanchanpur victim sent went to a Nepali bank or eSewa account. The 15 people charged are those account holders, not the handlers, who were abroad. That is the structure of every one of these cases: the scam needs local accounts, and it rents them.

The same Facebook ads that recruit victims recruit mules. TechPana's investigation of the F1Soft theft found a Saptari man who answered "Earn thousands of rupees a day from home," joined a Telegram group, handed over his bank QR, and was promised Rs 500 for every Rs 3 lakh that passed through; a 16-year-old in Chitwan was paid Rs 10,000 a month while more than Rs 3 crore moved through his account. A fintech executive quoted in the same piece describes the mechanics: stolen money "first goes to a mule account. Within minutes, it moves through several layers and is finally cashed out." The Bureau's own count of fraud complaints went from 1,815 in FY 2079/80 to 7,728 in FY 2081/82, and its investigators are chasing SIM cards that were discarded the same day. What renting out your account actually makes you is the other half of this story, and it ends in the same charge sheet.

Recovery, honestly stated:

• The Bureau returned Rs 190 million to fraud victims in FY 2025/26, up from Rs 92.6 million the year before, against 7,379 fraud victims.
• For online-purchase fraud, the Bureau's former chief told the Post it has recovered money for only around 10% of complainants.
• Kailali district police logged Rs 8.53 crore in reported losses in FY 2025/26 and recovered Rs 40.9 lakh, under 5%. One Kailali victim of a Telegram investment ladder, Rs 5.17 lakh gone in sequential transfers in July 2025, had recovered nothing a year later.

There is also a second scam waiting for the first scam's victims. In May 2026 police in Dharan arrested four men for spoofing the Cyber Bureau's number on Truecaller and calling people who had already lost money on Telegram, offering to "resolve the case" for a fee. The Bureau does not call you for money. Nobody who can get your money back charges you upfront to do it.

The first hour

The window in which a transfer can be stopped is measured in minutes, because the layering is. Two things changed in 2026 that make a fast complaint worth more than it used to be. NRB amended its Integrated Directive so that a suspicious account can be frozen for a short period on the verbal order of an investigating officer, with banks required to staff a 24/7 freeze line and publish its number. And in October 2026 NRB ordered banks to designate 24-hour focal persons for the festival season, with police reporting 200 to 300 financial-fraud complaints a day.

So, in order:

1. Stop. No "one more deposit to unlock the balance." The balance on their dashboard is a picture.
2. Call the recipient bank or wallet. The account number you paid into is on your transfer record. Ask for the fraud line and a freeze on that account, and give them the transaction ID. eSewa and Khalti have the same process for wallet accounts.
3. File with the Cyber Bureau the same day. Bhotahiti, Kathmandu; email [email protected] with a copy of your ID and the evidence; outside the Valley, the District Police Office forwards it. Confirm the current phone numbers on the Bureau's own site, since the published ones have changed more than once.
4. Preserve, then leave. Screenshot the group, the handler profiles, every payout and every deposit with its transaction ID, before you exit or get removed. The OTP and phishing post has the evidence checklist, and it is the same one.
5. Check whether you were also used as a mule. If at any point you forwarded money for the group or shared your QR for "task payments," say so in the complaint. Being on the record as a victim first is far better than being found on a charge sheet later.

The law on your side is section 249 of the Muluki Criminal Code 2074, cheating, with up to seven years and a fine of up to Rs 70,000 plus restitution, which is what the Kanchanpur prosecutors asked for. Section 52 of the Electronic Transactions Act 2063 covers computer fraud with a fine of up to Rs 1 lakh or two years, and says the benefit obtained "shall be recovered from the offender and be given to the person concerned." The limitation period is one year, so a complaint filed in shame eighteen months later is a complaint filed too late.

What the wallet limits do and do not do

NRB's wallet caps are the one structural brake. Under the March 2025 Unified Directive, as Khalti publishes them, wallet-to-wallet transfers are capped at Rs 50,000 per transaction and per day and Rs 5 lakh a month, wallet-to-bank at Rs 2 lakh a day, and the overnight wallet balance at Rs 50,000. That is why the Kanchanpur transfers went mostly through bank accounts: a scam that wants Rs 14 lakh cannot get it through a wallet in a week. If a handler steers you from eSewa to a bank transfer "because the limit is reached," that is the scam outgrowing the brake, and it is the moment to stop. The full set of wallet limits and KYC tiers is worth knowing for the same reason.

The limits do nothing on the way in. The Rs 8,000 that arrives at stage four is well inside every cap, and it is the only part of the scheme the operators ever pay for.

What you actually need to know

• Paying to work is the scam. A membership fee, a prepaid task, a deposit to unlock a bonus: no employer in Nepal or anywhere else charges you to do a job. The Rs 8,000 you receive on a Rs 5,000 deposit is the only money that will ever come back.
• The accounts you pay into belong to people like you. Rented for Rs 500 per Rs 3 lakh, emptied within minutes, and the first names on the charge sheet. Never share your QR for "task payments," and if you have, say so when you report.
• The first hour is the whole game. Freeze request to the recipient bank, complaint to the Cyber Bureau, screenshots of everything, all the same day. Recovery runs around 10%, and the 10% are the people who moved fast.

If a group has you one deposit away from a bonus and you are not sure, email [email protected] with a screenshot before you send it. The answer is almost always the same, but it is free.

This post is part of the Nepal Money Basics guide — the protect what you've saved section.