Bank Vishing Call Fraud — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: CRITICAL | View Full Scam Details

Bank Vishing Call Fraud in India 2026: How Scammers Steal Your Money Using Fake ‘Bank Official’ Calls

Bank vishing call fraud is a rising cybercrime threat in India in 2026, where scammers impersonate bank officials to trick you into sharing sensitive banking details, leading to serious financial losses.

What Is the Bank Vishing Call Fraud?

Bank vishing is a type of voice phishing scam where fraudsters call victims pretending to be bank employees or officials from regulatory bodies like the Reserve Bank of India (RBI). Their goal is to extract sensitive information such as KYC details, One-Time Passwords (OTP), debit/credit card numbers, or Aadhaar-linked data by gaining the victim’s trust.

In India, bank vishing has grown rapidly over recent years, especially with increased smartphone and mobile banking adoption. Scammers specifically target individuals with active bank accounts, often filtering potential victims based on age and perceived economic status by purchasing personal information from the dark web. Using local numbers and caller ID spoofing technology, these calls appear extremely convincing.

Both insured and uninsured accounts are vulnerable. The government and cybersecurity bodies like CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have issued advisories warning people to stay vigilant against such scams, highlighting the critical nature of bank vishing as a top priority cyber threat with a risk score of 9/10.

How This Scam Works — Step by Step

1. Obtaining Personal Data: Scammers buy databases containing names, phone numbers, ages, and sometimes partial financial information from dark web sources. These lists help them zero in on prospective victims likely to have bank accounts.

2. Initial Contact — Phone Call or WhatsApp Message: The scammer calls using a spoofed number that displays the bank’s name or RBI on your caller ID. Sometimes, they send a WhatsApp message with brief instructions, warning of an urgent issue with the victim’s bank account.

3. Building Trust: The caller introduces themselves as a bank official or RBI representative. They often mention recent suspicious transactions or KYC irregularities to create urgency and legitimacy.

4. Request for Sensitive Info: The fraudster asks the victim to confirm personal details such as Aadhaar number, bank account number, or PAN. They then instruct the victim to reveal OTPs sent via SMS under the pretext of ‘verifying transactions’ or ‘fixing issues.’

5. SIM Swap or Account Takeover: In some cases, scammers may trick victims into downloading malicious apps giving access to bank accounts or facilitating a SIM swap by contacting mobile operators pretending to be the victim.

6. Money Transfer: With the OTP and access, they initiate fraudulent UPI transactions or bank transfers. Victims often realize the loss only when checking their accounts.

Real Warning Signs to Watch For

• Unexpected calls claiming to be from your bank or RBI asking for OTP or KYC details.
• Caller ID showing a local number but claiming to be an official helpline.
• Pressure to share sensitive info immediately, citing urgent ‘freeze’ or ‘security’ needs.
• Requests for Aadhaar or PAN details without a verifiable reason.
• WhatsApp messages promising quick resolution to banking issues without official logos or contacts.
• Instructing you to download unknown apps or software.
• Assurance that money transfers are ‘safe’ or ‘reversible’ — RBI or banks never promise instant reversal over calls.

What Happens to Victims

Victims often lose significant amounts of money directly from their bank accounts or UPI wallets. Because the scam uses real OTPs, banks generally treat these as authorized transactions, making refund or reversal difficult. An Aadhaar misuse may lead to further identity theft or fraudulent loans.

Emotionally, victims experience stress, anxiety, and loss of trust in digital banking platforms. Elderly and less tech-savvy users are particularly vulnerable, sometimes leading to hesitation in using online banking altogether.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) regularly issues alerts advising customers never to share OTPs, PINs, or passwords with unknown callers, even if they claim to be bank officials. RBI helpline numbers (such as 1800 425 3800) are publicly available for users to verify suspicious calls.

CERT-In and I4C have flagged vishing scams as a major cyber threat and urge users to report incidents via the national cybercrime portal at cybercrime.gov.in or the 1930 cybercrime helpline dedicated to India’s public. Both bodies emphasize that banks or regulators will never demand sensitive info over unsolicited calls or messages.

How to Protect Yourself

1. Never share OTPs, PINs, Aadhaar, or bank details over the phone.
2. Verify the caller independently by contacting your bank’s official customer care number.
3. Ignore WhatsApp messages from unknown numbers claiming urgent banking issues.
4. Do not download any app or provide access to control your phone when requested over calls.
5. Enable two-factor authentication (2FA) on your banking and UPI apps.
6. Register your mobile number with your Aadhaar to prevent unauthorized SIM swaps.
7. Regularly check your bank and UPI account statements for any suspicious transactions.

What to Do If You've Been Targeted

1. Immediately call your bank’s official helpline to freeze or block your debit/credit cards and accounts.
2. Change your UPI PIN and bank account passwords.
3. Report the incident on the national cybercrime portal at cybercrime.gov.in.
4. Contact the 1930 cybercrime helpline for assistance and guidance.
5. File a complaint at your nearest police station if the loss is significant.
6. Inform your mobile operator if you suspect a SIM swap.
7. Keep a record of all communications and transactions related to the fraud for future reference.

Frequently Asked Questions

Q: Can my bank refund money lost in a vishing scam?
A: Usually, if the bank can prove that you shared OTPs or passwords willingly, refunds are difficult as transactions are treated as authorized. Early reporting improves chances of recovery but prevention is better.

Q: How can I confirm if a call is really from my bank?
A: Hang up and call your bank’s official customer care number, which is available on bank passes or the official website. Do not use the number provided in the suspicious call.

Q: What should I do if I receive a WhatsApp message about banking issues?
A: Do not reply or click any links. Forward the message to your bank’s official support number for verification or check with BharatSecure.app to validate suspicious messages.

Stay alert and protect yourself from bank vishing scams in India in 2026. Verify suspicious messages or calls before responding — visit BharatSecure.app to learn more and report fraud attempts.