Micro-Deposit Layering in Jan Dhan Accounts — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: HIGH | View Full Scam Details

Micro-Deposit Layering Scam Targets Jan Dhan Accounts in India — Beware in 2026

A rising number of Jan Dhan account holders are falling victim to a dangerous micro-deposit layering scam spread through WhatsApp, putting their money and personal data at serious risk.

What Is the Micro-Deposit Layering in Jan Dhan Accounts?

Micro-deposit layering is a sophisticated fraud technique increasingly reported in India, especially targeting Jan Dhan accounts opened under the Pradhan Mantri Jan Dhan Yojana (PMJDY). These accounts serve millions, mainly in rural and low-income urban areas, promoting financial inclusion. Unfortunately, the very ease of access and less tech-savvy users make these accounts vulnerable to emerging cyber threats.

This scam involves fraudsters making tiny deposits—typically a few rupees—into Jan Dhan accounts to test active banking status and phase multiple transactions cleverly to avoid detection by automated monitoring systems. According to reports filed with cybercrime units linked to the Indian Cyber Crime Coordination Centre (I4C) and advisories from CERT-In, this layering is often a prelude to larger fraud such as unauthorized fund withdrawals, data theft, or manipulation of UPI transactions linked to these accounts.

WhatsApp acts as the common platform for scammers posing as bank representatives or government officials. They lure victims with fake “bonuses for active usage” or “special offers,” enticing them to respond and share personal banking details or Aadhaar-linked information, unwittingly opening doors to fund siphoning.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp: Victims receive unsolicited WhatsApp messages impersonating their bank’s customer service or PMJDY officials, often with urgent claims like “You have earned a bonus for account activity” or “Complete verification to avoid account suspension.”

2. Small Micro-Deposits: Without the victim’s knowledge, fraudsters transfer tiny amounts (₹1-₹10) into the victim’s Jan Dhan account. These micro-deposits act as “test transactions” to confirm the account is active and can receive funds.

3. Victim Engagement and Data Harvesting: Upon responding, the victim is directed to share OTPs, Aadhaar numbers, or UPI PINs under false pretenses such as “verification” or “claiming the reward.” The scammers may also ask victims to install apps or click on links that compromise device security.

4. Layering of Transactions: Multiple small deposits and withdrawals occur in quick succession, creating a “layer” of activity designed to make tracing the source difficult and to exploit per-transaction limits in Jan Dhan accounts.

5. Unauthorized Withdrawals or Transfers: Once access credentials are compromised, larger withdrawals or UPI transactions drain the account balance, often using linked mobile numbers or fraudulent SIM swaps to intercept OTPs.

6. Money Laundering via Multiple Accounts: In some cases, the accumulated funds are swiftly moved through a network of Jan Dhan accounts, complicating recovery and detection by authorities.

Real Warning Signs to Watch For

• Unsolicited WhatsApp messages claiming to be from your bank or PMJDY office offering bonuses or rewards.
• Requests to share OTPs, UPI PINs, Aadhaar details, or download unknown apps.
• Small unexpected credits (₹1-₹10) appearing in your Jan Dhan account.
• Pressure tactics creating a false sense of urgency to act quickly.
• Links or attachments in messages that seem suspicious or come from unknown senders.
• Multiple small withdrawals or payments that you did not authorize.
• Calls or messages asking for verification of bank or Aadhaar details outside official channels.

What Happens to Victims

Victims often experience not only financial loss but significant emotional distress. Jan Dhan accounts typically hold limited funds, and losing this savings can be devastating, particularly for low-income families relying on government benefits or subsidies.

In many cases, victims find it difficult to reverse transactions because UPI payments are often instantaneous and irreversible once completed. Fraudsters might also misuse stolen Aadhaar information to commit identity theft or perform unauthorized KYC updates, further complicating victims’ financial lives.

Furthermore, victims may face complications from SIM swap fraud, where attackers transfer mobile service to a new SIM to intercept OTPs and control banking services, making recovery more challenging. Many affected have reported difficulties in contacting banks or telecommunication providers promptly due to the unfamiliar nature of cyber fraud.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) consistently warns customers about protecting personal banking credentials and not sharing OTPs or PINs with anyone. RBI’s guidelines underscore that banks will never ask for sensitive details over calls or messages.

CERT-In (Indian Computer Emergency Response Team), operating under the Ministry of Electronics and Information Technology, has issued advisories highlighting the rising trend of WhatsApp-based financial frauds and urges users to verify suspicious messages and report immediately.

The Ministry of Home Affairs’ I4C initiative runs a dedicated cybercrime helpline at 1930 for reporting such frauds. RBI’s customer complaint portal and the central cybercrime reporting platform at cybercrime.gov.in encourage victims to lodge complaints promptly to enable quick redressal.

How to Protect Yourself

1. Never share OTPs, UPI PINs, or Aadhaar details over WhatsApp or phone calls, even if the caller claims to be from the bank or government.
2. Ignore messages offering cash bonuses or rewards linked to your Jan Dhan account without independent verification.
3. Regularly monitor your account for small unexpected credits or debits and report discrepancies immediately.
4. Use only official bank apps downloaded from trusted sources like Google Play Store or Apple App Store for financial transactions.
5. Do not click on links or download attachments from unknown or unsolicited WhatsApp messages.
6. Register for SMS alerts with your bank to receive real-time transaction notifications.
7. Report suspicious activity or messages to your bank and cybercrime authorities through official channels.

What to Do If You’ve Been Targeted

• Immediately contact your bank’s customer care to freeze your Jan Dhan account or block UPI transactions.
• Change all your banking and UPI passwords from a secure device.
• File a complaint at the nearest cybercrime police station or online at cybercrime.gov.in.
• Call the 1930 cybercrime helpline to report the incident and get guidance on next steps.
• Inform your mobile service provider if you suspect SIM swap attempt to prevent further interception of OTPs.
• Keep records of all suspicious messages, calls, and transactions for police and bank investigations.
• Consult a trusted family member or legal advisor if you need help navigating recovery.

Frequently Asked Questions

Q1: Can small deposits in my Jan Dhan account really be a sign of fraud?
Yes. Micro-deposits of small amounts like ₹1 or ₹5, especially if they occur without your knowledge, are often used by fraudsters to test active accounts before executing larger fraudulent transactions.

Q2: How can I verify if a WhatsApp message claiming to be from my bank is genuine?
Never trust unsolicited messages asking for personal or banking details. Always verify by calling your bank’s official customer service number found on bank statements or official websites. Do not use the contact numbers or links provided in the suspicious messages.

Q3: What protections exist for Jan Dhan account holders against such scams?
Banks implement transaction limits on Jan Dhan accounts and have fraud detection systems in place. The RBI and CERT-In provide awareness campaigns. However, vigilance by account holders in safeguarding OTPs, PINs, and Aadhaar data is crucial for protection.

For any suspicious messages or doubts, always verify first at BharatSecure.app and report fraud and cybercrime promptly via the 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.