eSIM Porting Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: CRITICAL | View Full Scam Details

Beware the eSIM Porting Scam in India 2026: How Fraudsters Hijack Your Mobile Number

The eSIM Porting Scam is an alarming new cyber fraud threatening mobile users across India in 2026, allowing criminals to steal your mobile number and access your digital life.

What Is the eSIM Porting Scam?

The eSIM Porting Scam is a sophisticated variation of the traditional SIM swapping fraud, which has now evolved with the growing use of electronic SIM cards (eSIMs) across India. Unlike physical SIM cards that you insert into your phone, an eSIM is a digital SIM embedded in your device, making the porting process faster but also vulnerable to new attack methods. This scam targets mobile users irrespective of age or region but especially those using eSIM-enabled phones from popular telecom operators like Airtel, Jio, and Vodafone Idea.

In India, where UPI transactions, Aadhaar-linked services, and WhatsApp banking verification are tied closely to mobile numbers, stealing your phone number can lead to severe financial and privacy losses. The scam has quickly gained traction due to the increasing adoption of eSIM technology and lack of widespread awareness. CERT-In (India’s Computer Emergency Response Team) and I4C (Indian Cyber Crime Coordination Centre) have both issued warnings about rising SIM swap and eSIM frauds as these scams pose critical risks to personal data and banking security.

How This Scam Works — Step by Step

1. Unsolicited Call or Message: Fraudsters initiate contact pretending to be telecom customer care representatives from Airtel, Jio, or Vodafone Idea. They often claim there is an urgent problem with your mobile number, such as service suspension or security compromise.

2. Creating a Sense of Urgency: The scammer pressures you to ‘verify’ your number to prevent disconnection or fraud, claiming you need to share an OTP (One Time Password) sent via SMS or scan a QR code to activate a ‘new eSIM profile’.

3. OTP or Malicious QR Scan: Once you share the OTP or scan the QR code, the fraudsters activate a duplicate eSIM profile on their device, effectively porting your number to their phone.

4. Loss of Network: Your phone will suddenly lose mobile network connectivity while the scammer’s device gains access to your mobile number.

5. Account Takeover and Fraud: With your number active on their device, scammers intercept OTPs from banks, UPI apps (Google Pay, PhonePe, Paytm), WhatsApp verification codes, and Aadhaar-linked service verifications — enabling them to conduct unauthorized transactions, steal money, or access personal data.

Real Warning Signs to Watch For

• Unsolicited calls claiming to be from telecom operators asking for OTP or QR code scans.
• Pressure to act immediately or threat of losing your mobile service.
• Requests to share SMS OTP codes over phone, which legitimate telecom companies never ask for.
• Receiving OTPs on your phone without initiating any transaction or verification.
• Sudden loss of mobile network connection or inability to make calls.
• Fraudulent QR codes sent via SMS or WhatsApp messages.
• Verification requests stating “new eSIM activation” without your initiation.

What Happens to Victims

Victims of the eSIM Porting Scam face both financial and emotional distress. Financially, criminals exploit stolen mobile numbers to receive OTPs for UPI and net banking transactions, draining bank accounts without easy reversal. While RBI guidelines protect consumers against unauthorized electronic fund transfers, recovering lost money can be time-consuming and stressful.

Emotionally, victims often feel violated and helpless as their Aadhaar-linked services, WhatsApp, emails, and social media accounts become vulnerable. Many experience identity theft and reputational damage. In India’s fast-digitalising landscape where your mobile number is a key to your digital identity, losing control over it means losing control over much more than calls and messages.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has repeatedly cautioned customers about SIM swapping frauds, urging vigilance when sharing OTPs or personal information over calls. RBI’s Digital Payment Security Guidelines emphasize that banks and payment providers should have robust authentication but also call on users to protect their mobile numbers strictly.

CERT-In and the Indian Cyber Crime Coordination Centre (I4C) classify SIM swap and eSIM porting scams as critical cyber threats and advise users to report incidents promptly to cybercrime authorities. The National Cyber Crime Reporting Portal (cybercrime.gov.in) and the 1930 Cyber Crime Helpline have been set up for immediate assistance.

How to Protect Yourself

1. Never Share OTPs: Do not share SMS OTPs with anyone, including those claiming to be telecom staff.
2. Reject Unsolicited Calls: Avoid calls claiming urgent service issues; independently verify by calling official customer care numbers.
3. Do Not Scan Unknown QR Codes: Only scan QR codes from trusted sources, never those received unexpectedly.
4. Enable Mobile Lock Features: Use telecom services' mobile number lock or secret PIN services to prevent unauthorized SIM changes.
5. Use App-based Authentication: Prefer app-based verification or biometrics over OTPs where available.
6. Regularly Check Bank and UPI Transaction Alerts: Set up SMS/email alerts and immediately report suspicious transactions.
7. Register Complaints: If you suspect any fraud attempts, report to your telecom operator, the cybercrime portal, and the 1930 helpline promptly.

What to Do If You've Been Targeted

1. Immediately call your telecom operator’s customer care and request to block any unauthorized eSIM activations or number porting.
2. Change passwords on all important accounts linked to your mobile number—especially bank, UPI, email, and social media.
3. Contact your bank or UPI provider to freeze or safeguard your accounts.
4. File a complaint on India’s National Cyber Crime Reporting Portal (cybercrime.gov.in) with full details.
5. Call the 1930 Cyber Crime Helpline for assistance and counselling on next steps.
6. Inform Aadhaar helpline if you notice misuse linked to your Aadhaar number.
7. Keep records of all communications and steps taken for future reference or legal action.

Frequently Asked Questions

What is an eSIM and how is it different from a physical SIM?
An eSIM is an embedded SIM card inside your device that can be activated on-demand digitally without swapping a physical card. It offers convenience but can be targeted remotely unlike physical SIM swapping.

Can my mobile operator activate an eSIM without my consent?
No legitimate operator will activate or port your eSIM without your explicit consent and proper authentication. If you receive unexpected activation messages or calls, it’s likely a scam.

If I lose mobile network suddenly, does it mean I’m a victim of eSIM porting scam?
Not always. Network issues happen, but if it follows suspicious calls or OTP requests, treat it as a red flag and act quickly to check with your operator.

Your mobile number is the key to your digital world. Always verify suspicious calls, messages, or QR codes before sharing any codes or personal info. Stay safe and check doubtful alerts instantly at BharatSecure.app — your trusted partner in digital fraud awareness.