Recent reports from Calangute of an escort service turning into a cyber
heist is less a lurid outlier than a snapshot of a parallel economy that has
been allowed to entrench itself across Goa: escort rackets that operate
openly enough to feel normal, yet invisibly enough to evade meaningful
accountability. What is most alarming is not merely the existence of sex work-adjacent
services — an old reality in most tourist destinations — but the way these
outfits have evolved into sophisticated, tech-enabled fraud operations that can empty
bank accounts as efficiently as they can exploit vulnerability, shame, and silence.
Escort services in Goa are no longer confined to whispered referrals or seedy corners.
They are marketed like mainstream consumer offerings. The pitch is designed to feel frictionless
and safe — “discreet,” “premium,” “cashless,” “doorstep” — but the underlying
business model increasingly resembles a scam funnel. The customer is not just buying a
service; he is being profiled, pressured, and monetised at multiple points, often without
realizing that the “escort” is only the bait and the real product is his money and data.
The innovation lies in how these scams blend social engineering with digital payments.
The first step is usually a small “booking” or “verification” fee, framed as a
security deposit, ID check, or anti-police precaution. Once the customer pays, the
demands escalate: a “refundable” deposit, a “hotel entry” charge, a “driver” fee, a
“membership” upgrade, a “cancellation” penalty. Each payment is presented as the
last hurdle before the promised service arrives. The customer, already invested and
often acting in secrecy, is nudged into the sunk-cost trap — paying more to avoid
losing what he has already paid.
Then comes the cyber-heist layer. Links are sent for “payment confirmation” that
lead to phishing pages. QR codes route money to mule accounts. Screen-sharing
apps are pushed under the pretext of “helping” with payment, allowing scammers
to access banking apps and OTPs. In some cases, victims are coaxed into installing
remote-access tools, turning a one-time transaction into a full compromise of the
phone. The fraudsters understand that embarrassment is a weapon: many victims
will not go to the police, will not tell family, and will not contest transactions quickly.
That silence is the scammer’s insurance policy.
This is why the problem is rampant: it is low-risk, high-reward crime. The perpetrators
can operate from anywhere, rotate numbers, delete chats, and rebrand overnight.
Even when a victim reports, the trail often runs through layers of intermediaries —
prepaid SIMs, rented bank accounts, payment gateways, and disposable devices. The
“escort” persona may be entirely fictional, with stolen images and scripted voice notes.
Law enforcement’s response, as the public perceives it, oscillates between sporadic
crackdowns and prolonged inertia. Part of this is capacity: cybercrime investigation
requires trained personnel, rapid coordination with banks and platforms, digital
forensics, and time-bound action to freeze funds. Part of it is prioritisation: when
police stations are stretched, cases that carry social stigma and low reporting rates
are easy to deprioritise. And part of it is the uncomfortable reality that any sprawling
illicit market tends to develop protective ecosystems — informal arrangements, tipoffs,
selective enforcement, and the quiet understanding that certain activities are
“managed” rather than eliminated.
Goa’s tourism sector, already struggling with seasonality, infrastructure stress, and
the long shadow of “party destination” stereotyping, pays the reputational price.
When visitors associate Goa with predatory rackets — whether drugs, extortion,
or escort scams — the destination brand shifts from carefree to risky. Families and
higher-spending tourists do not just avoid unsafe places; they avoid places that feel
lawless. Even those who never engage with such services absorb the ambient narrative:
that Goa is a place where scams are normal and authorities are absent.
There is also a deeper civic cost. A state that cannot convincingly police a highly
visible, digitally advertised fraud ecosystem sends a message about governance itself.
If scammers can run customer-acquisition campaigns in plain sight, what does
that imply about the enforcement of other regulations? The damage is cumulative:
each viral story of a tourist being fleeced becomes free advertising for the scam
economy and negative advertising for Goa.
What is needed is not moral panic but competent, modern enforcement and prevention.
Cyber cells must be staffed and empowered to act fast: immediate liaison
with banks to freeze suspect accounts, dedicated teams to trace mule networks, and
systematic takedowns of repeat numbers and domains. Payment platforms and telecom
providers must be compelled to tighten KYC and respond to law-enforcement
requests within strict timelines. Public advisories should focus on fraud mechanics
rather than shaming victims, because stigma is what scammers rely on. And the
tourism department cannot pretend this is “not our domain” when the state’s brand
is being actively sabotaged.
How discreet servicesdiscreetly empty bank accounts
