Missed Call OTP Forwarding Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: MEDIUM | View Full Scam Details

Missed Call OTP Forwarding Scam in India 2026: What You Must Know to Stay Safe

The Missed Call OTP Forwarding Scam is a new phishing threat putting millions of Indian mobile users at high risk of financial fraud in 2026.

What Is the Missed Call OTP Forwarding Scam?

This scam is a rising cybercrime pattern targeting Indian smartphone users who rely heavily on mobile banking and UPI payments. Fraudsters impersonate delivery agents or customer care representatives from well-known courier or service companies, claiming an urgent problem with a parcel delivery or account issue. They then pressure victims into using special phone codes that forward calls from their phone to scammers, allowing interception of sensitive OTPs.

Because OTPs (One Time Passwords) play a crucial role in authenticating UPI transactions, bank logins, and Aadhaar-linked services, this scam’s impact can be financially devastating. The technique exploits common trust in missed call notifications and WhatsApp messages, making it widespread across urban and rural India.

According to advisories from CERT-In and reports logged with I4C (Indian Cyber Crime Coordination Centre), this method has surged recently. The Reserve Bank of India (RBI) has also warned users about unauthorized OTP sharing and call-forwarding risks. Given India’s rapid adoption of digital payments, this scam’s potential to cause harm remains high.

How This Scam Works — Step by Step

1. Initial contact: The scam typically begins with an unsolicited phone call or message on WhatsApp, where the caller claims to be from a well-known courier service or customer support team. They say there is an urgent issue with a parcel delivery or your account.

2. Creating urgency: The caller insists you must act quickly to resolve the problem. They ask you to dial certain USSD or secret codes on your phone like 21, 61, 67, or 401. One common ruse is to say, “Please give a missed call using this code.”

3. Call forwarding setup: When you dial these codes, your phone starts forwarding incoming calls to a number controlled by the scammer. You may not notice this change immediately.

4. Intercepting OTPs: Since many banks and UPI apps use voice calls or missed calls to deliver OTPs or transaction verification codes, scammers receive these directly. They can now approve fraudulent transactions or change your account settings.

5. Financial theft: Using the intercepted OTPs, scammers authorize money transfers from your bank accounts or UPI-linked wallets, leaving victims unable to reverse the damage quickly.

Real Warning Signs to Watch For

• You receive calls or messages asking to urgently dial secret codes or give missed calls.
• The caller pressures you to act immediately without time to verify.
• Messages or calls claim to be from delivery agents or support teams but the contact details seem unofficial.
• You notice sudden unknown call forwarding or missed calls you didn’t make.
• OTPs or transaction alerts are received without you initiating payments.
• Your phone shows unexpected dialing or service interruptions.
• You are asked not to share OTPs or PINs, but the request is made verbally over a call.

What Happens to Victims

Victims can lose thousands or even lakhs of rupees within minutes as scammers exploit OTPs and call forwarding to bypass two-factor authentication on UPI and banking apps. Unlike some fraudulent UPI transactions, which can sometimes be reversed by the bank with a complaint, call forwarding scams often leave little trace for quick recovery.

Besides financial loss, victims face emotional distress from invasion of privacy and helplessness. Their Aadhaar-linked services and mobile SIM cards can also be compromised if scammers coordinate SIM swaps alongside call forwarding. This can lead to prolonged fraud and difficulty in regaining control over digital identities.

What RBI and CERT-In Say

The Reserve Bank of India regularly issues advisories warning customers never to share OTPs or PINs and to avoid following instructions from unknown callers to dial USSD or secret codes. RBI helpline (Toll-free: 14567) can assist with suspicious transaction queries.

CERT-In has highlighted the rising incidence of OTP forwarding and phishing techniques. They recommend verifying caller identity through official channels before taking any action and report cybercrime on the national portal (cybercrime.gov.in). The Ministry of Home Affairs’ 1930 helpline is also available for victims of cyber fraud.

How to Protect Yourself

1. Never dial any call forwarding or secret USSD codes given by unsolicited callers, no matter how urgent they sound.
2. Always verify calls with official customer care numbers listed on company websites before acting.
3. Do not share OTPs, passwords, or PINs with anyone, even if the caller claims to be from your bank or courier.
4. Regularly check your phone’s call forwarding settings and disable any unknown forwarding immediately.
5. Set up app-level or phone-level security to block unauthorized access, such as SIM lock or multi-step verification.
6. Install and update security apps recommended by CERT-In to detect suspicious activity.
7. Stay informed about current scams by visiting trusted portals like BharatSecure.app.

What to Do If You’ve Been Targeted

• Immediately contact your bank or UPI provider to freeze or block your accounts linked to the compromised phone number.
• Change all related passwords and PINs on banking and Aadhaar-linked apps.
• Report the fraud to the local police cybercrime unit and file a complaint at cybercrime.gov.in with full details.
• Call the 1930 national cybercrime helpline for guidance on next steps and support.
• Notify your mobile service provider to check for any unauthorized SIM swaps or call forwarding.
• Monitor your bank statements closely for unauthorized transactions and escalate the issue quickly.

Frequently Asked Questions

Q: Can dialing a missed call or USSD code really share my OTP?
Yes. Dialing codes like 21 sets up call forwarding, which can redirect OTP calls or missed calls containing transaction verification codes directly to scammers.

Q: How can I check if my phone’s call forwarding is active without my knowledge?
You can check forwarding by dialing *#21# or looking in your phone settings under call or call forwarding options. If unfamiliar numbers appear, disable forwarding immediately.

Q: What should I do if I shared the code and OTP accidentally?
Contact your bank and mobile operator immediately to block accounts and SIM cards. File complaints with police cyber cells and report on the national cybercrime portal. Acting fast improves chances of limiting losses.

If you receive suspicious messages or calls asking for call forwarding actions, verify them at BharatSecure.app and report any fraud attempts to India’s 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.