After the ₹5-crore scam: proving your agency is legitimate

In May 2026, a Noida-based outfit selling fake Dubai and Singapore luxury packages collected roughly ₹5 crore from more than 100 customers before the operation was exposed. Professional website, branded brochures. None of it real.

Every time a story like this makes national news, it doesn't just burn the 100 families who lost money. It makes the next enquiry that lands on your WhatsApp a little more suspicious. Your clients read the same headline. Now they're quietly asking themselves whether your agency is genuine before they ask you anything about the itinerary.

You can't control the news cycle. You can control how fast and how convincingly your agency answers "how do I know you're not a fraud?" This post is a checklist for doing exactly that, plus the scripts to use when a client asks you outright.

What the Noida case actually tells you

The agency looked legitimate on the surface: a working website, branded collateral, and packages priced to feel like a real luxury deal. Cases like this typically fall apart because the operator has nothing a customer can independently verify: no traceable company registration, no accountable GST trail, no third-party record of past trips actually delivered. The scam worked because "looks professional" and "is verifiable" are two different things, and most customers only check the first one until it's too late.

That's the gap this checklist closes. Every item on it is something a client (or a nervous parent, or a corporate HR head booking an offsite) can check themselves in under two minutes, without taking your word for it.

The trust-signal checklist

Copy this into your onboarding SOP or client-facing FAQ page. Each line is something you either already have or can set up this week.

• GST number printed on every invoice and quotation. Not just your final invoice, the quotation too. A GSTIN is checkable on the GST portal in seconds, and a client who sees it before paying anything is a client who trusts you more at the point of decision, not after. If you haven't registered yet, the ₹20 lakh threshold rules are worth reading first.
• Company registration a client can look up independently. If you're a Private Limited or LLP, your CIN/LLPIN is searchable on the MCA portal. If you're a proprietorship or partnership, say so plainly rather than implying a corporate structure you don't have. Overclaiming reads as more suspicious than a modest but honest structure.
• Ministry of Tourism approval status, stated clearly. Whether you have it or not, tell clients. If you do, the national portal lets anyone search approved Travel Agents and Tour Operators by name. Link to your own listing on your website footer.
• Payment into a business current account, never a personal UPI ID. A scam that routes client money through someone's personal Google Pay is a red flag every savvy traveller now recognises after this news cycle. Your bank details on an invoice should match your registered business name.
• Written booking confirmation for every payment. A PDF voucher or confirmation email with the itinerary, hotel names, dates and amount paid, sent the same day money changes hands. Verbal confirmations on a phone call are the first thing a fraud victim says they never got.
• A visible, verifiable review footprint. Google Business Profile reviews with client names, not just a five-star badge on your homepage. A review trail built up over months is far harder to fake than a testimonial slider. Scripts for asking clients for reviews make this easier to keep up.
• Physical office address, not just a WhatsApp number. Even a small office listed on Google Maps with photos does more for trust than a phone number alone. It signals you're not a website that vanishes overnight.
• Terms and conditions a client can actually read before paying. Cancellation policy, refund timeline, what happens if a supplier fails. Fraud outfits rarely publish terms because terms create accountability they don't intend to honour. An India-ready terms and conditions template is a faster start than drafting one from scratch.

Careful: Don't just tick these boxes internally and assume clients notice. Most won't go looking. Put the GSTIN, MoT status (if held) and a link to your Google reviews directly on your quotation and your website's About page, where the anxious client actually is at the point of deciding.

Is Ministry of Tourism approval worth it for a small agency?

Ministry of Tourism approval is worth pursuing if your clients are the type who Google "is this agency genuine" before paying, which after a headline like the Noida case, most now are. The Ministry runs a voluntary approval scheme for Travel Agents and Tour Operators, and approved agents show up on a public, searchable national portal.

It's voluntary, not mandatory, so plenty of legitimate small agencies operate without it. But for the specific problem this post is about, being on a government-run public list is the single strongest trust signal available to a small operator, because it's a claim a client can verify without trusting you at all.

Applications typically route through your state tourism department, and the document list and processing time vary by state, so confirm the current requirements with your state office rather than assuming they match a neighbouring state's process. If you're weighing whether the paperwork is worth the payoff for a small team, the fuller breakdown of costs and who should bother is worth reading before you commit time to it: Govt-approved travel agent: is MoT recognition worth it?

Scripts for "How do I know you're not a fraud?"

Post-Noida, expect this question more often, sometimes politely, sometimes bluntly. Don't get defensive. A confident, specific answer builds more trust than the question itself damaged.

CLIENT (blunt): "How do I know you're not one of those fake agencies?
I read about the Noida thing."

YOU: "Fair question, glad you asked before paying rather than after.
Three things you can check yourself right now: our GST number is
[GSTIN], you can verify it on the GST portal. We're registered as
[company name/CIN if applicable], searchable on the MCA site. And
you can read verified client reviews on our Google Business listing
[link]. Payment goes only into our current account under [business
name], never a personal number. Want me to send the quotation with
all three details on it before you decide anything?"

CLIENT (soft): "This all looks great, just want to be careful given
the news."

YOU: "Totally understand, that Noida story worried a lot of people
and it should. Here's what we do differently: every booking gets a
written confirmation the same day you pay, with the hotel, dates and
amount on it. We're listed on the Ministry of Tourism's approved
agents portal [if applicable] and our office is at [address] if you
ever want to drop by. Happy to send references from past groups too."

CLIENT (via WhatsApp, one-liner): "Genuine agency?"

YOU: "100%. GSTIN [number], office at [address], reviews here
[Google link]. Send this to anyone checking us out."

Keep these saved as WhatsApp quick replies. The client asking this question is often seconds away from paying, and a slow, vague answer loses the booking faster than a competitor's price.

Common questions

How do I know if a travel agent is genuine in India?

Check three things independently of what the agent tells you: their GSTIN on the GST portal, their company registration on the MCA site if they claim to be a Pvt Ltd or LLP, and whether they appear on the Ministry of Tourism's approved-agents portal. A genuine agency will hand these over without hesitation and put them on the quotation itself.

Does Ministry of Tourism approval cost money?

Costs and document requirements vary by state, since applications route through your state tourism department rather than a single central fee. Confirm the current process and any charges directly with your state's tourism office; treat any number you hear secondhand as unverified until the department confirms it.

What's the fastest trust signal to set up this week?

Put your GSTIN on every quotation, not just the final invoice, and link your Google Business reviews from your website footer. Both take an afternoon and both are things a client can verify without calling you.

The short version

• A Noida agency took roughly ₹5 crore from 100+ customers with fake Dubai and Singapore packages in May 2026. Every headline like it makes your genuine clients more cautious.
• Print your GSTIN on quotations, not just final invoices, so clients can verify you before they pay.
• Make your company registration (CIN/LLPIN, or honestly stated proprietorship) checkable, never implied.
• Take payment only into a business current account, never a personal UPI ID.
• Send written booking confirmations the same day money changes hands.
• Build a visible Google review footprint over months, it's harder to fake than a homepage testimonial slider.
• Ministry of Tourism approval is voluntary but puts you on a public, government-run searchable list, the strongest third-party trust signal available to a small operator.
• Save the fraud-question scripts above as WhatsApp quick replies. The client asking is often seconds from paying.