ISP Billing Suspension Tech Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 30, 2026

Severity: HIGH | View Full Scam Details

Beware the ISP Billing Suspension Tech Scam in India, 2026: Protect Your UPI and WhatsApp Safety

A rising cyber fraud trend targeting Indian internet users uses fake ISP billing alerts to steal money via UPI and WhatsApp phishing.

What Is the ISP Billing Suspension Tech Scam?

The ISP Billing Suspension Tech Scam is an alarming cybercrime pattern targeting broadband and mobile internet users in India. Fraudsters pose as representatives of major internet service providers (ISPs) such as Jio, Airtel, or BSNL to trick users into believing they have unpaid bills or face imminent disconnection. This scam creates a false sense of urgency, pressuring victims to act quickly without verifying the legitimacy of the call or message.

According to public complaints shared with cybercrime authorities, this scam is spreading rapidly across India, affecting both urban and rural internet subscribers. Scammers commonly use WhatsApp messages and phone calls, often spoofing official ISP numbers, to add credibility. The scam is particularly dangerous because it exploits platforms widely used by Indians — WhatsApp, UPI payment apps, and mobile phones connected to internet service plans.

CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have noted an increase in such complaints in 2024 and issued general advisories urging users to verify any billing-related claims directly through official ISP channels. The Reserve Bank of India (RBI) also warns consumers to always authenticate UPI payment requests independently to avoid falling prey to phishing attempts linked with such scams.

How This Scam Works — Step by Step

1. Initial Contact: The victim receives a WhatsApp message, SMS, or cold call allegedly from their ISP’s customer service. The caller ID or WhatsApp sender ID may appear to be an official number or use spoofing techniques.

2. False Billing Warning: The caller or message claims the victim has not paid recent internet or broadband bills and that service suspension or disconnection will happen within hours unless payment is made immediately.

3. Sense of Urgency & Pressure: The scammer uses psychological pressure, insisting on urgent payment. They may warn of severed internet connection, which often causes panic for daily internet users.

4. Phishing Link or UPI Payment Request: The victim is asked to click on a link sent via WhatsApp or SMS, which directs them to a fake ISP payment portal or share their UPI ID for “quick payment”. Sometimes, the scammer asks for Aadhaar or PAN details to “verify identity”.

5. Data or Money Theft: If the victim shares personal details, the scammers harvest this sensitive data. If a UPI transaction is made, money is instantly transferred to the fraudsters’ bank accounts. In some cases, victims unknowingly approve UPI mandates authorizing recurring withdrawals.

6. Further Exploitation: The scammer may follow up with additional messages appearing as “support” to regain trust, requesting more payments or data, or they may attempt SIM swapping by convincing telecom operators using stolen information.

Real Warning Signs to Watch For

• Calls or messages insist on immediate payment under threat of disconnection without prior official billing reminders.
• The caller ID or WhatsApp contact looks like a known ISP number but is actually spoofed or differs subtly.
• Requests for Aadhaar, PAN, or UPI PIN under the guise of “verification” or “payment confirmation”.
• Payment links redirect to websites with suspicious URLs not matching your ISP’s official domain.
• Unsolicited messages come via WhatsApp or SMS instead of official ISP billing emails or app notifications.
• Pressure tactics that create panic, urging you not to verify details before paying.
• UPI payment requests for unrecognized IDs or unfamiliar apps/platforms.

What Happens to Victims

Victims suffer financial losses often ranging from a few hundred to thousands of rupees as money disappears via UPI transfers that are difficult to reverse. Emotional distress is common, with many feeling violated or helpless, especially when personal identity data like Aadhaar or PAN is compromised. This creates risks of further exploitation via SIM swap fraud or identity theft.

UPI transactions authorized under fraudulent contexts may require victims to lodge complaints with banks and the National Payments Corporation of India (NPCI) for dispute resolution, but reversal is not always guaranteed. Victims also face long waits and complex processes with telecom providers to recover lost phone numbers or accounts after data misuse.

What RBI and CERT-In Say

The RBI has repeatedly highlighted the importance of secure UPI usage and warned against sharing UPI PINs or authorizing payment requests that seem suspicious. Their helpline provides guidance on reporting unauthorized transactions.

CERT-In and I4C have tasked themselves with monitoring phishing and spoofing attacks related to telecom and ISP fraud, recommending that internet users only trust direct, verified communication channels. They advise reporting suspicious calls or messages immediately via the national cybercrime reporting portal, cybercrime.gov.in, and using the 1930 Cybercrime Helpline for assistance.

How to Protect Yourself

1. Verify ISP Communications: Always cross-check billing messages or calls by contacting the official ISP customer service number found on your bill or the ISP’s real website.
2. Never Share UPI PIN or OTP: Do not share your UPI PIN, OTP, or any login credentials with anyone over the phone or WhatsApp.
3. Check URLs Carefully: Avoid clicking on payment links from unknown or unofficial sources. Visit ISP websites by typing URLs directly.
4. Use Official Apps: Make payments only through verified banking apps, the official ISP app, or trusted UPI platforms.
5. Ignore Pressure Tactics: Take your time to confirm details, and do not give in to threats or urgent demands for payment.
6. Enable Mobile Security: Use SIM lock and two-factor authentication on your devices and payment apps.
7. Report and Block: Immediately block suspicious numbers/accounts and report the incident to cybercrime authorities.

What to Do If You've Been Targeted

• Stop all communication with the caller or sender immediately.
• Contact your bank and UPI provider to flag unauthorized transactions and request blocking or freezing of payment mandates.
• Report the fraud with details on cybercrime.gov.in or call the 1930 Cybercrime Helpline.
• Inform your ISP if you suspect misuse of your account information or SIM swapping.
• File a police complaint with the local station including the scam’s details and any evidence you have.
• Track any fraud-related bank statements and Aadhaar-linked services regularly to detect unusual activity.
• Consider professional help for identity restoration if Aadhaar or PAN data was compromised.

Frequently Asked Questions

Q: Can I reverse a UPI payment sent to scammers in this scam?

A: UPI payments are generally instantaneous and irreversible once accepted. However, if you detect fraud quickly, contact your bank and NPCI immediately to initiate a complaint. Reporting to cybercrime authorities can increase chances of recovery but is not guaranteed.

Q: How can I confirm if a call about my ISP bill is genuine?

A: Always cross-verify any billing-related call by calling your ISP’s official customer care number listed on bills or the official website. Do not trust caller ID alone, as scammers often spoof numbers.

Q: Are instant messaging platforms like WhatsApp safe for billing notifications?

A: ISPs typically send official bills via email, SMS, or through their app, not via WhatsApp messages unless previously opted-in. If you receive billing requests on WhatsApp unexpectedly, verify through official channels before taking action.

Take charge of your online safety. Verify suspicious ISP or billing messages at BharatSecure.app and immediately report potential frauds to the 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.