Verify a Come APK. Then plan your Dream11 captain.

India context

The legal and payment facts every Indian fantasy-cricket player should know

Two facts are repeatedly misunderstood in this category. First, the regulatory framework — which applies to apps, not guides. Second, how money actually moves inside the app — which applies to your bank statement. Get these wrong and the rest of the decision framework is wasted.

State-by-state: fantasy cricket sits inside a 158-year-old law

The Public Gambling Act, 1867 (Central Act) is the starting point. Section 3 criminalises running or being in charge of a "common gaming house", and most Indian states have either adopted it or replaced it with a state-level equivalent. Several states — Andhra Pradesh, Telangana, Tamil Nadu, Karnataka (with carve-outs for skill-based contests), Odisha, Assam, Sikkim, and Nagaland — have additional restrictions on paid fantasy-cricket contests.

In 2021 the Supreme Court of India observed in Varun Gumber v. Union of India that fantasy sports involve "skill, judgment, and discretion" and are generally protected as games of skill under Article 19(1)(g). That distinction is what allows paid contests in most states. It does not override a state-level prohibition. A paid contest hosted from a state that bans it remains illegal for residents there, regardless of the platform's national position.

This is why the publisher's terms explicitly restrict access from certain states and require an OTP tied to a verified Indian mobile number. Verify that your state is currently on the allowed list before depositing. If it isn't, the safest move is to skip paid contests until either your state's law or the platform's allowed list changes — not to attempt a workaround with a borrowed number or a VPN.

Money in: which rail the app uses

Indian fantasy-cricket apps accept deposits through UPI (Unified Payments Interface). The deposit screens typically show three options: a UPI app you already have installed (Google Pay, PhonePe, Paytm, BHIM, Amazon Pay, WhatsApp Pay, Cred, and so on), a UPI deep-link from the app's website, or — less commonly — a direct debit to a linked bank account.

When you confirm a deposit, the UPI app on your phone will display the merchant name (typically the publisher's legal entity, not the consumer-facing brand), the exact amount, and a UPI handle ending in something like @ybl, @okhdfcbank, @paytm, or @axl. The handle does not prove the publisher is the same company that runs the app — only that the merchant account is registered to the entity shown. If you see a different name than what the publisher's own page lists, cancel the deposit and contact the publisher through their in-app help route.

Money out: KYC and the wallet trail

Withdrawals from Indian fantasy-cricket apps are bound by the same KYC requirements as any other regulated financial product. The platform must record the PAN (Permanent Account Number) of the account holder, verify a bank account or UPI ID in the account holder's name, and complete a one-time identity verification (Aadhaar, PAN, or in-app video KYC, depending on the platform). These checks are mandatory under the platform's own regulatory obligations and are not optional. A platform that asks for a PAN card scan at withdrawal time is following its KYC obligation; a platform that does not ask is one you should question.

The wallet trail (deposit → contest entry → winnings → withdrawal) must reconcile against the same PAN. Do not deposit from one person's UPI and expect to withdraw to another. The platform is required to flag mismatches, and a flagged withdrawal is the most common cause of "my withdrawal is stuck" complaints. The fix is straightforward: keep the bank or UPI ID in your own name and verify it before your first withdrawal request, not after.

30-Second Pre-Deadline Checklist

Confirm, don't discover

Most avoidable mistakes happen in the last 30 seconds. The captain is locked, the team is set, and you realize one slot is wrong or the deadline already passed. Run this list before you tap Join— it exists so the deadline catches you confirming a decision, not making one.

1. 01

   Deadline is real, not 'about to'

   Toss-locked rooms close when the coin lands. Live rooms close at first ball. If you can't see the countdown in the room card, the room is not the one you think it is.

2. 02

   Captain slot is the role, not the name

   Pick the player whose role (top-order anchor, death bowler, all-rounder) fits the format and pitch. Reputational captains lose small leagues; role-fit captains win them.

3. 03

   All 11 slots are filled with the right role caps

   Wicketkeeper 1–4, Batsmen 1–8, All-rounders 1–8, Bowlers 1–8. Empty a role and you'll hit the cap check at submission — by which time the room may be full.

4. 04

   Entry fee matches your confidence

   If you wouldn't enter this exact team in a small league, don't enter it in a mega contest at 10× the entry fee. The room size doesn't change the math.

5. 05

   Prize split, not just prize pool

   A ₹50 lakh pool that pays the top 0.1% is harder than a ₹5 lakh pool that pays the top 10%. Read the rank payout before you commit.

6. 06

   Toss update is in

   If the room is toss-locked, your team assumes the announced XI. A late toss flip that swaps a bowler for a batter can collapse a side built on death-overs bowling.

For the full prediction workflow (how to read toss news, when to switch captain, what to do when the announced XI changes), see the decision checklist or the team generation framework.

Captain-by-Format Matrix

The captain slot rewards a different role in every format

A T20 captain who wins you a small league will underperform in an ODI. A Test bowler captain on a green top is a different bet from a wrist-spinner captain on a dry fifth-day pitch. The format sets the captain meta before the form does.

Read the role-by-role reasoning in the captain & vice-captain selection guide, or jump straight to the format-specific lineup logic in prediction — captain by role.

Scam patterns fantasy-cricket players actually see

Three messages that target the decision moment, not the install

Scammers do not waste time on people who have not yet deposited. They watch for the post-deposit window — the 30 minutes after a UPI transfer has settled but before a withdrawal is requested — because the player is most invested in recovering the round trip. The three patterns below show what each one actually looks like, what it costs you if you respond, and where the legitimate support route is.

Pattern #1 — "Your withdrawal needs a release fee"

You request a withdrawal of ₹2,400 to your PhonePe handle. The in-app screen says the withdrawal is "pending verification". Within minutes, a WhatsApp message arrives from a number whose profile photo is the publisher's logo:

“Sir, your withdrawal of ₹2,400 is on hold for KYC re-verification. Please send a release fee of ₹499 to UPI handle [name]-release@axl to unlock. Fee is refundable with withdrawal.”

What's actually happening: the publisher has never charged a release fee, ever. The UPI handle resolves to a personal account, not the publisher's merchant entity. The ₹499 is gone the moment you approve it. The original ₹2,400 withdrawal is unaffected — it was already in "pending" because KYC re-verification is a real platform requirement, not a third-party service. The right path is to open the app, go to Menu › My Account › Withdrawal History, and check whether the entry says "KYC re-verification required" with an in-app link to upload your PAN. If it does, complete it inside the app. If it does not, contact the publisher only through the in-app Help route.

Pattern #2 — "Modified APK with auto-redirect UPI"

A Telegram group advertising "Dream11 Hack 2026 — 100% winning predictions" shares a file labelled dream11-prediction-tool.apk. The icon matches the official app and the package name is one letter off.

“Bhai, install karo, last week 12k jeeta. [Telegram username removed] se link le lo, iOS users ko bhi mil jayega.”

What's actually happening: the modified package requests the Accessibility permission at install time. Once granted, it reads your screen during the next UPI deposit, substitutes the merchant UPI handle with the attacker's handle in the confirmation popup, and you approve a payment to the wrong entity. Your deposit balance in the real app never updates because the publisher never received it. The correct defence is the source-check framework on the come-apk page: every APK from a Telegram group fails the publisher check, fails the package cross-reference, and fails the update history check.

Pattern #3 — "VIP tipster WhatsApp group"

An Instagram comment on the publisher's official post reads: "DM for VIP cricket tips, 90% accuracy, join our WhatsApp group for ₹1,999/month." The account has a blue tick, a follower count in the high five figures, and a recent post of the CEO at a tournament.

“We are an authorised partner of [publisher]. Send ₹1,999 to [UPI handle] and we will share our AI model outputs every match day. Refund if no win in 30 days.”

What's actually happening: the publisher does not authorise, partner with, or share customer data with any paid tipster service. The blue tick and follower count are bought through follower farms. The "refund" never happens because the small print makes the 30-day window start only after your first winning tip, which the scammer can withhold indefinitely. The pattern is not unique to fantasy cricket — it has been running across sports, crypto, and stock-tipping categories since Instagram opened up paid partnership tags. There is no publisher-sanctioned paid tip channel. Anyone offering one is operating outside the publisher's terms and outside the law on paid fantasy-game advice.

Scope

This guide is intentionally cricket-first