EPFO Account Frozen Scam: Payment or Link for Reactivation — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: HIGH | View Full Scam Details

Beware the EPFO Account Frozen Scam in India 2026: Payment Demand and Fake Reactivation Links

Millions of Indian workers are targeted by a rising cybercrime called the EPFO Account Frozen Scam, where fraudsters trick you into paying money or sharing sensitive information through fake EPFO reactivation requests.

What Is the EPFO Account Frozen Scam: Payment or Link for Reactivation?

The Employees' Provident Fund Organisation (EPFO) is a trusted government body that manages provident fund savings for millions of Indian employees. Unfortunately, scammers exploit this trust by sending fake messages or WhatsApp texts claiming your EPFO account has been frozen due to some suspicious activity or verification failure. These messages urge you to either pay a reactivation fee or click on a link to reactivate your account immediately.

This scam primarily targets salaried employees who regularly check their EPFO accounts to track pension and retirement savings. Since EPFO accounts link directly to your Universal Account Number (UAN), Aadhaar, and bank accounts, the fraudsters use official-sounding language and forged email IDs or phone numbers to create a sense of urgency and legitimacy.

The scam is widespread across India, especially in metro cities with large working populations like Delhi, Mumbai, Bengaluru, and Hyderabad. The Indian Computer Emergency Response Team (CERT-In) and the Indian government’s Indian Cyber Crime Coordination Centre (I4C) have issued warnings in recent years about increasing phishing attempts via WhatsApp and SMS to steal EPFO-related credentials. The Reserve Bank of India (RBI) also advises users to be wary of unsolicited requests for payment or sensitive data linked to government accounts.

How This Scam Works — Step by Step

1. Initial Contact: You receive an SMS, WhatsApp message, or sometimes a phone call that says your EPFO account has been frozen due to some irregularity or pending verification. The message often looks official, using terms like “EPFO,” “UAN verification,” or “government order.”

2. Urgent Demand: The message warns that you must reactivate your account immediately to avoid loss of benefits or permanent blocking. You are asked to either pay a small “processing fee” via UPI/NetBanking or click on a provided link to reactivate online.

3. Phishing Link: If you click the link, it takes you to a website designed to look almost identical to the official EPFO portal. This fake site asks for your UAN number, Aadhaar number, bank account details, mobile number, and even OTPs received via SMS.

4. Data Theft: Once you fill in details, the scammers collect your sensitive personal information. With your UAN and Aadhaar details, they can access more government or financial services fraudulently.

5. Financial Loss: If you made a payment (usually small, ₹100-₹500 via UPI), that money is lost. Worse, with your bank and OTP details, scammers can conduct wider financial frauds — like initiating unauthorized UPI transactions or SIM swap attacks.

6. Account Misuse: Over time, these stolen details may be sold on dark web markets or used to file fraudulent claims, affecting your lifelong EPFO savings.

Real Warning Signs to Watch For

• Unsolicited messages or calls claiming EPFO account frozen without any prior notification.
• Requests for upfront payment or “processing fees” to reactivate your EPFO account.
• Links in messages that don’t match official government URLs (e.g., epfindia.gov.in).
• Poor grammar, spelling mistakes, or unofficial email addresses (like Gmail or Yahoo) used in communication.
• Urgent demands with threats of permanent account blocking or loss of benefits.
• Requests for sensitive information such as Aadhaar number, bank details, or OTPs.
• Pressure to complete steps quickly without time to verify with official EPFO helpline or website.

What Happens to Victims

Victims of this scam face financial and emotional damage. The immediate loss includes payments made to scammers — often via irreversible UPI or bank transfers. Because attackers may have collected victims’ Aadhaar and UAN details, they can open fraudulent bank accounts or misuse government subsidies linked to these IDs. SIM swap fraud can enable scammers to bypass OTP security and drain accounts via UPI transactions.

Victims often experience stress and helplessness, as reclaiming stolen funds is difficult due to the digital and anonymous nature of these frauds. Reversals through banks or UPI are only possible if reported immediately, and many victims lose time and money when they delay reporting. Misuse of Aadhaar and EPFO details also means victims face identity theft risks long-term.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) warns users against clicking unknown links or sharing OTPs under any circumstance and issues guidelines to always verify the authenticity of payment requests. RBI’s Consumer Education website and helpline (Toll-free: 1800 22 1911) explicitly instruct victims never to share banking details in unsolicited messages.

CERT-In actively issues advisories on phishing attacks targeting government portals, emphasizing that EPFO never requests payments outside official channels, nor does it communicate through WhatsApp or personal emails. CERT-In’s 24/7 cybercrime response teams also guide users on how to report such frauds through cybercrime.gov.in or their local police.

The Indian Cyber Crime Coordination Centre (I4C) runs helplines like 1930 (Centralized Cyber Crime Reporting Portal) to assist victims and facilitate fast action against cyber scams, which includes frauds impersonating government bodies like EPFO.

How to Protect Yourself

1. Never trust unsolicited messages or calls about your EPFO account status.
2. Always check the official EPFO website (epfindia.gov.in) or mobile app for account info.
3. Do not click on links from unknown WhatsApp or SMS messages claiming EPFO problems.
4. Never share OTPs, UAN, Aadhaar, bank details, or passwords with anyone claiming to be EPFO officials.
5. Verify any payment request by calling official EPFO helpline numbers before proceeding.
6. Use multi-factor authentication on your bank and UPI apps for additional security.
7. Report suspicious messages immediately to the CERT-In and your bank’s fraud departments.

What to Do If You've Been Targeted

• Immediately stop any transactions if you suspect fraud.
• Change your UAN and bank account passwords and register for two-factor authentication.
• File a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in.
• Call the 1930 cybercrime helpline for guidance on next steps.
• Inform your bank and request to block or monitor your account for unusual activity.
• Lodge a complaint with EPFO through their official contact channels and verify your account activity.
• Consider contacting your mobile operator to secure your SIM against swap fraud.

Frequently Asked Questions

Q: Can EPFO ask me for payment to reactivate my account?
No, EPFO does not ask for any payment for account reactivation. Any such request is a scam. EPFO account services are free and managed through official government portals only.

Q: What should I do if I accidentally shared my UAN or Aadhaar details on a suspicious website?
Immediately change your EPFO and associated bank account passwords, notify your bank, and file a complaint with cybercrime.gov.in. Monitor your accounts closely for unauthorized transactions.

Q: How do I verify if an EPFO message or call is genuine?
Always cross-check by visiting the official EPFO website or calling their verified helpline numbers. Do not rely solely on links or contact details provided in unsolicited messages or WhatsApp texts.

If you receive any suspicious messages claiming your EPFO account is frozen, do not pay or click links without verifying. Protect your hard-earned savings by confirming every communication on BharatSecure.app — India’s trusted digital fraud awareness platform. Stay alert, stay safe!