Fake RBI Lottery SMS Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 25, 2026

Severity: HIGH | View Full Scam Details

Beware the Fake RBI Lottery SMS Scam in India 2026: Don’t Let Scammers Steal Your Money via UPI and WhatsApp

Millions of Indians are targeted daily by the Fake RBI Lottery SMS Scam, a high-risk cyber fraud that tricks people into sharing UPI PINs and personal data through WhatsApp and text messages.

What Is the Fake RBI Lottery SMS Scam?

The Fake RBI Lottery SMS Scam is a dangerous fraud where scammers pretend to be from the Reserve Bank of India (RBI) or other government bodies, claiming that you have won a “lottery” or cash prize. These messages often arrive as SMS or WhatsApp texts, promising large cash rewards credited directly into your bank account. Targets are mostly everyday Indians—often those who are active on social media, show financial need online, or are listed in outdated databases that fraudsters acquire illegally.

In India, where many people trust official-sounding messages linked to RBI or government schemes, this scam has become widespread. The scammers try to exploit this trust to steal your money and personal information like UPI PINs, Aadhaar details, or bank credentials. The scam has been officially warned against by RBI and CERT-In—the Indian government’s cybersecurity agency. CERT-In urges people not to respond to unsolicited lottery or prize messages, especially those asking for financial details or payments upfront.

How This Scam Works — Step by Step

1. Initial Contact via SMS or WhatsApp: You receive a message from an unknown number, claiming you won a big cash prize from a lottery supposedly run by the RBI. The message uses official logos and language, making it look real.

2. Follow-Up Contact: Scammers contact you again via WhatsApp or social media messages, often using fake government employee profiles to gain your confidence.

3. Request for Personal Details: You’re asked to provide your full name, bank account details, and sometimes Aadhaar number, pretending it's needed to transfer the prize money.

4. UPI/Banking Details and Verification: Next, they ask you to enter your UPI PIN or share an OTP (One Time Password) sent by your bank for “verification.” They may also ask you to install a remote access app to “help you receive the prize.”

5. Money Transfer: Once scammers have your UPI PIN and OTP, they initiate unauthorized fund transfers from your bank account via UPI apps like Google Pay, PhonePe, Paytm, etc.

6. Blocking Communication: After stealing money, scammers block you and may make it hard to trace them.

Real Warning Signs to Watch For

• The message claims you won a “lottery” or prize without any prior contest entry.
• It claims to be from RBI or government agencies but comes from random phone numbers, not official channels.
• The message urges you to share bank details, UPI PIN, OTP, or Aadhaar info immediately.
• You are pressured to act fast or pay a “processing fee” or “tax deduction” for the prize.
• The messages mix English with poor spelling and grammar.
• Scammers ask you to download suspicious apps or click unknown links.
• You receive follow-up WhatsApp messages from unknown or new contacts reinforcing the claim.

What Happens to Victims

Victims often lose thousands or lakhs of rupees in fraudulent UPI transactions that cannot be easily reversed. Unlike credit card frauds, UPI transactions happen in real time, and banks find it difficult to refund money once transferred with valid OTPs. Your Aadhaar details might be misused to open fake accounts or take loans in your name, leading to long-term financial trouble. Victims also face SIM swap frauds, where their mobile number is hijacked to approve transactions or reset passwords. Emotional distress and loss of trust in online financial services are common fallout.

What RBI and CERT-In Say

The Reserve Bank of India has issued repeated warnings advising people not to share UPI PINs, OTPs, or Aadhaar details with anyone, even if they claim to be from RBI or government agencies. RBI emphasizes that it does not conduct lotteries or distribute money this way.

CERT-In races against time to track these scams and advises users to report suspicious messages immediately to the 1930 Cybercrime helpline or through their state police cybercrime cells. General guidance from these agencies includes verifying any claims with official RBI websites or BharatSecure.app, ignoring unsolicited messages, and never installing unknown apps sent by strangers.

How to Protect Yourself

1. Ignore lottery or prize messages from unknown numbers, especially if you didn’t enter any lottery or contest.
2. Never share your UPI PIN, OTP, or Aadhaar number via SMS, WhatsApp, or phone calls.
3. Verify all government or RBI-related claims by visiting official websites or calling RBI helpline (022-22661602).
4. Do not click on links or download apps sent through unsolicited WhatsApp or SMS messages.
5. Keep your mobile number secure; avoid sharing SIM details and report immediately if your SIM is lost or swapped.
6. Use UPI apps’ built-in fraud detection features and regularly check bank statements.
7. Install and update antivirus software on your phone and enable multi-factor authentication for all financial apps.

What to Do If You've Been Targeted

1. Immediately block and report the scammer’s number on WhatsApp and your messaging platforms.
2. Contact your bank customer care and report the fraudulent UPI transactions. Request to block your UPI ID temporarily.
3. File a complaint with the nearest cybercrime police station or online at cybercrime.gov.in. Use the 1930 Cybercrime helpline for guidance.
4. Change all your digital banking passwords, UPI PIN, and Aadhaar-linked mobile number OTP passwords.
5. Inform your mobile operator to check for any unauthorized SIM swap attempts.
6. Keep all scam-related messages saved as proof for investigations and bank complaints.

Frequently Asked Questions

Q: Can RBI send me a lottery prize SMS or WhatsApp message?
No. RBI does not run any lotteries or prize programs via SMS or WhatsApp. Any such message claiming to be from RBI is a scam.

Q: What should I do if I gave my UPI PIN or OTP to a scammer?
Immediately block your UPI ID through your bank’s app or customer service and report the theft to your bank. File a police complaint and contact the 1930 cybercrime helpline.

Q: How can I verify if a message about winning money is genuine?
Do not trust unsolicited messages. Always verify by visiting official RBI or government websites directly—never call numbers or click links sent in the suspicious message.

If you receive any suspicious SMS or WhatsApp messages claiming you’ve won an RBI lottery or prize, do not respond or share your details. Always verify suspicious claims at BharatSecure.app before taking any action to protect your money and identity. Stay alert, stay safe.