Haryana Police implements double OTP system to prevent cyber fraud — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 25, 2026

Severity: MEDIUM | View Full Scam Details

Haryana Police’s Double OTP System Scam in 2026: How Cyber Crooks Exploit Trust in India

Cybercriminals in India are now targeting innocent people with a fake “double OTP” scam that pretends to be a new security measure by Haryana Police aiming to prevent fraud.

What Is the Haryana Police Double OTP Scam?

In 2026, reports have surfaced across India, especially in Haryana, about cyber fraudsters impersonating police officials claiming a “double OTP system” has been introduced to prevent cyber crimes. This scam targets mostly elderly and less tech-savvy individuals who are active on WhatsApp and other messaging apps. The fraudsters convince victims that to safeguard their bank accounts against fraud, they must share two separate OTPs (one supposedly sent by the police, another from their bank or UPI app).

This scam is a new twist in India’s ongoing OTP fraud landscape, which the Reserve Bank of India (RBI) and the Indian Computer Emergency Response Team (CERT-In) have repeatedly warned against. OTP (One Time Password) fraud remains a significant threat nationally since OTPs are the most common method for authenticating online transactions through UPI, internet banking, and mobile wallets. The scam exploits public trust in official bodies like Haryana Police and uses increasing awareness of cybercrime prevention systems to manipulate victims.

The Indian government’s cybercrime coordination centre, I4C (Indian Cyber Crime Coordination Centre), has noted a spike in such impersonation scams where fraudsters hijack the goodwill of police efforts to prevent fraud as a lure to get sensitive information.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or Call: The scam begins when the fraudster sends a WhatsApp message or calls the victim, posing as a Haryana Police official. They claim cybercriminals have targeted the victim’s bank account or Aadhaar-linked services, and a “double OTP” system has been implemented for extra protection.

2. Creating Urgency: The fraudster tells the victim that if they don’t comply immediately, their funds will be stolen or their Aadhaar details leaked. This urgent tone pressures victims to act quickly, overriding caution.

3. Request for OTPs: The victim is told two OTPs will be sent shortly—one from the police system for verification and one from the bank or UPI app for transaction confirmation. The fraudster assures the victim these OTPs must be shared over the call or WhatsApp for “security checks.”

4. Victim Shares OTPs: The victim receives two OTP messages on their mobile device and forwards both to the scammer. Unaware, the victim believes this is a legitimate protective step.

5. Funds Transferred: Using the second OTP (sent by the bank or UPI), the fraudster quickly completes unauthorized transactions, transferring money out of the victim’s account via UPI apps or net banking.

6. Victim Realizes Loss: By the time the victim suspects fraud and contacts their bank, the money is already gone. Reversals or refunds through UPI are difficult and time-consuming.

Real Warning Signs to Watch For

• Police or bank officials never ask for OTPs or passwords over phone or WhatsApp.
• Messages referencing a “double OTP system” for fraud protection are not officially announced by any Indian police department.
• Unsolicited calls or messages claiming urgent Aadhaar or bank verification.
• Requests to share more than one OTP via chat or call.
• Poor grammar, misspellings, or inconsistent official-sounding messages.
• Pressure tactics demanding immediate action or threatening consequences.
• Requests to download unknown apps or share screenshots of bank details.

What Happens to Victims

Victims often suffer immediate financial loss as crooks drain bank accounts or wallets using stolen OTPs. For elderly victims, the emotional toll is considerable—feelings of betrayal, shock, and helplessness are common. Moreover, the misuse of Aadhaar-linked details can lead to identity theft or fraudulent loans.

In India, recovering funds via UPI is difficult once payments are authorized. Banks sometimes deny reimbursement, citing customer negligence. Victims may also face SIM swap frauds, where crooks take over their mobile number to intercept OTPs, worsening the financial and privacy damage.

What RBI and CERT-In Say

The RBI has continuously warned customers to never share OTPs, PINs, passwords, or CVV numbers over calls or messages. It reminds users that no genuine institution would ask for OTPs to “secure” accounts.

CERT-In advocates awareness and caution, urging users to report any suspicious OTP requests or social engineering attempts promptly. The Indian Cyber Crime Coordination Centre (I4C) recommends verifying all unusual messages with official police or bank customer service numbers.

Victims can reach the RBI helpline or the national cybercrime helpline at 1930 to report fraud. CERT-In encourages filing complaints online at cybercrime.gov.in for swift government action.

How to Protect Yourself

1. Never share OTPs, passwords, or PINs with anyone, even if they claim to be police or bank officials.
2. Ignore any messages or calls mentioning “double OTP systems” or similar unverified security measures.
3. Verify suspicious calls by directly contacting your bank’s official customer service numbers or police stations.
4. Activate mobile number protection features offered by your mobile operator to prevent SIM swaps.
5. Regularly update your mobile apps and operating system to patch security vulnerabilities.
6. Set transaction limits on UPI and net banking apps to minimise potential loss.
7. Educate elderly family members about never sharing OTPs and recognising scam tactics.

What to Do If You've Been Targeted

1. Immediately block your bank card and change UPI app PINs.
2. Inform your bank about the unauthorized transaction to initiate complaints and possible partial recovery.
3. File a complaint with the police cyber cell and register it on India’s official cybercrime portal at cybercrime.gov.in.
4. Call the national cybercrime helpline at 1930 to report the incident and seek guidance.
5. Inform your mobile operator about suspicious activity to prevent SIM swap or further misuse.
6. Keep records of all scam-related messages, calls, or payment details for evidence.

Frequently Asked Questions

Q: What is a “double OTP system” and is Haryana Police really implementing it?
A: There is no official double OTP system introduced by Haryana Police or any Indian authority. It is a scam tactic used by criminals to trick victims into sharing multiple OTPs.

Q: Can my bank reverse transactions if I share OTPs with scammers?
A: UPI and net banking transactions authorized with OTPs rarely get reversed. Banks typically hold users responsible for OTP sharing, making recovery difficult.

Q: How can I verify if a call or message about cyber security from the police is genuine?
A: Always call official police helpline numbers or check government websites. Do not trust phone numbers or messages sent from unknown or unverified contacts.

Stay alert, protect your OTPs, and always verify unexpected security messages. If you receive suspicious messages or calls about double OTPs or similar scams, verify them first at BharatSecure.app — your trusted Indian digital fraud awareness platform.