Bombay HC directs BoB to remit Rs 18.79 lakh to senior citizen in SIM swap fraud case — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 25, 2026

Severity: MEDIUM | View Full Scam Details

Bombay HC Orders BoB to Refund Rs 18.79 Lakh to Senior Citizen in 2026 SIM Swap Fraud Case: Important Lessons for India

SIM swap fraud is a growing threat in India, with senior citizens increasingly targeted for financial theft. The recent Bombay High Court ruling against Bank of Baroda (BoB) highlights this risk and the urgent need for awareness.

What Is the Bombay HC Direction to BoB in the Rs 18.79 Lakh SIM Swap Fraud Case?

In early 2026, the Bombay High Court directed Bank of Baroda to refund Rs 18.79 lakh to a senior citizen victim after he lost the money through a SIM swap fraud. This case is significant because it underscores how banks are being held accountable for lapses in protecting their customers from sophisticated cyber scams targeting mobile banking and UPI transactions.

The victim, an elderly individual unfamiliar with complex technology, had his mobile number fraudulently transferred to another SIM card by scammers. Using this SIM swap, the fraudsters accessed his bank accounts and executed multiple unauthorized transactions. Despite the victim’s prompt complaint, the bank initially refused to refund the stolen amount, leading to legal intervention.

SIM swap frauds have become increasingly widespread in India, especially affecting vulnerable groups like senior citizens who rely heavily on mobile phones for banking. The Consumer Protection Act and RBI’s customer protection guidelines are clear that banks must reimburse victims if fraud occurs without negligence from the customer. The Bombay HC’s ruling reinforces this principle and sends a warning to other banks to strengthen security controls. CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have issued advisories warning citizens to remain vigilant against SIM swap and OTP-based frauds.

How This Scam Works — Step by Step

1. Reconnaissance via Social Media or Phishing: Scammers gather personal information from victims’ Facebook, WhatsApp, LinkedIn profiles, or through phishing emails pretending to be from telecom operators or bank officials. They collect the victim’s phone number, Aadhaar details, and sometimes bank account info.

2. Contact Pretending to Be Customer Care: The fraudster calls the victim, impersonating a customer service executive from the telecom or bank. They claim there is an urgent issue with the mobile number or bank account needing immediate verification or update.

3. Psychological Manipulation: Using fear and urgency, the scammer convinces the victim to share OTPs or personal codes sent via SMS, claiming it’s for security verification.

4. SIM Swap Request: With the victim’s mobile details and some personal data, the scammer contacts the telecom company’s customer care—sometimes bribing or exploiting insider access—to get the victim’s SIM deactivated and activated on a new device.

5. Account Takeover: Once the SIM is swapped, all OTPs for banking and UPI transactions go to the scammer’s phone. They then log into the victim’s bank account or UPI apps and transfer money out.

6. Loss Realised & Reporting: Victims usually notice unauthorized transactions on their bank statement or receive alert messages. However, by this time, the money is moved out to different accounts, making recovery hard.

Real Warning Signs to Watch For

• Unexpected calls or SMS asking to share OTPs or personal details.
• Sudden loss of mobile network or calls unable to be made (could be your SIM swapped).
• Alerts of SIM activation or number porting you did not initiate.
• Messages about Aadhaar or bank account updates you didn’t request.
• Requests for remote access to your phone or installation of suspicious apps.
• Calls stressing urgency and threatening account suspension.
• Multiple UPI or bank debit alerts for transactions you didn’t make.

What Happens to Victims

Victims face immediate financial loss as scammers swiftly steal funds using UPI apps like Google Pay, PhonePe, or BHIM, often moving money to fictitious accounts. Due to the risk of Aadhaar-SECC misuse in identity verification, scams cause more damage than just stolen cash—victims suffer emotional trauma and fear of identity theft.

In many cases, banks delay refunds citing customer negligence, leaving victims helpless. Considering most transactions happen in seconds, quick action is critical but difficult. The emotional impact on senior citizens can be severe, affecting trust in digital services.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has issued specific guidelines for banks to strengthen two-factor authentication and has mandated prompt compensation for victims of unauthorised electronic transactions when customer liability is absent. RBI also warns against sharing OTPs and PINs with anyone.

CERT-In, India’s cybersecurity agency, regularly issues alerts about SIM swap frauds, urging users to keep their Aadhaar and bank details confidential and verify all suspicious communications. The Ministry of Home Affairs has set up the 1930 cybercrime helpline to assist victims immediately.

I4C coordinates with law enforcement to track such scams and advises citizens to avoid clicking unknown links or sharing OTPs.

How to Protect Yourself

1. Never share your OTP or banking PINs with anyone, even if they claim to be from the bank or telecom provider.
2. Register for mobile number verification through your telecom provider (DND service) to prevent unauthorized SIM swaps.
3. Regularly update your phone and apps with security patches.
4. Use biometric or multi-factor authentication on banking and UPI apps instead of only OTPs.
5. Monitor bank and UPI transaction alerts promptly.
6. Link your Aadhaar carefully and opt for restrictions if possible on its use in authentication.
7. Inform your bank and telecom provider immediately if your phone loses network or you receive alerts of unknown SIM activations.

What to Do If You've Been Targeted

1. Immediately call your bank’s customer care and request to block the suspicious transaction account.
2. Contact your telecom provider to block your SIM and request a re-issue with proper verification.
3. Lodge a complaint with cybercrime.gov.in, India’s official cybercrime portal.
4. Call the 1930 national cybercrime helpline for assistance.
5. File a complaint with the local police cyber cell, especially if a large amount is stolen.
6. Keep all transaction screenshots, SMS, and call recordings as evidence.
7. Follow up persistently for compensation as per RBI guidelines.

Frequently Asked Questions

Q: How do scammers get my mobile number SIM swapped?
A: Scammers exploit weak verification by telecom operators or bribe insiders to deactivate your SIM and activate it on another device, often after tricking you into sharing personal data or OTPs.

Q: Can banks refuse to refund money lost in a SIM swap fraud?
A: Banks may delay or refuse refunds if they prove customer negligence. However, RBI rules mandate compensation if the customer has been careful and the fraud is due to lapses in bank or telecom systems.

Q: How quickly can I recover money lost in SIM swap fraud?
A: Recovery is difficult once fraudsters transfer money to multiple accounts, but early reporting and following RBI and police procedures increases chances of fast refunds.

SIM swap fraud is serious but preventable. Always be alert to suspicious calls, protect your OTP, and verify communication before sharing any info. If you get any strange messages or calls, immediately verify their authenticity at BharatSecure.app — stay safe and scam-proof in 2026!