OTP Capture During Fake eSIM Process — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: CRITICAL | View Full Scam Details

Beware in 2026: OTP Capture Scam During Fake eSIM Process Targets Airtel Users Across India

A new wave of fraud is threatening the digital wallets and personal data of Airtel subscribers in India—scammers are capturing your OTP during a fake eSIM upgrade process to steal money via UPI and WhatsApp.

What Is the OTP Capture During Fake eSIM Process?

This scam involves fraudsters pretending to help Airtel customers convert their physical SIM to a digital eSIM. The eSIM technology is legitimate and growing in India, allowing users to activate mobile service on their phones without a physical SIM card. However, scammers have found a way to exploit this legitimate process by intercepting One-Time Passwords (OTPs) required for verification.

The scam specifically targets Airtel subscribers because of the large user base and increased adoption of eSIM by Airtel customers. Fraudsters reportedly acquire personal contact details through data leaks or by purchasing information on the dark web. Over recent months, several complaints have been reported to law enforcement and cybercrime cells in metropolitan areas like Delhi, Mumbai, and Bengaluru. While CERT-In has not issued a specific advisory on this scam yet, the increasing complaints align with RBI’s ongoing warnings about protecting UPI credentials and OTPs from phishing and social engineering.

Victims include a broad demographic—any Airtel user who has upgraded to or requested an eSIM. The scam’s reach is growing, raising critical concerns about phone-based KYC (Know Your Customer) procedures and the security of mobile wallet transactions.

How This Scam Works — Step by Step

1. Initial Contact: You receive an unexpected call from a number appearing to belong to Airtel’s customer service or a reputed helpline. The caller claims you need to convert your existing SIM to an eSIM for better service or security.

2. Urgency and Pressure: The caller uses high-pressure tactics, warning that failure to upgrade immediately will cut off mobile or internet services. They may also claim this is mandated by new government regulations or RBI guidelines.

3. Request for Personal Details: You are asked to confirm personal information such as your registered mobile number, Aadhaar-linked mobile SIM details, and sometimes your bank and UPI app info.

4. OTP Request: The caller asks you to share OTPs received on your phone—for “verification” or “activation” purposes—particularly the OTPs sent by your bank for UPI transactions or WhatsApp verification.

5. OTP Capture and Fraud: Once you share the OTP, scammers use it to authorize UPI payments or take control of your WhatsApp account linked to banking apps, enabling them to initiate fraudulent money transfers or steal further personal data.

6. Loss Realisation: Victims typically realize the fraud only after money is debited from their bank accounts or they lose access to WhatsApp, impacting both financial and social communication.

Real Warning Signs to Watch For

• Calls coming from numbers that seem similar to Airtel’s helpline but with slight variations or unusual country codes.
• Unsolicited requests for OTPs, especially for transactions or account verifications you did not initiate.
• High-pressure tactics demanding immediate action without time to verify or consult anyone.
• Requests for personal identity information beyond basic confirmation, such as Aadhaar details or UPI PIN.
• Promises of service upgrades with vague or inconsistent information that does not match the official Airtel or government announcements.
• Fake SMS or WhatsApp messages mimicking Airtel or RBI alerts urging urgent SIM changes.
• Any communication asking to share UPI or bank OTPs over calls or messages.

What Happens to Victims

Financially, victims face unauthorized withdrawals from their bank accounts via UPI payments, which are typically irreversible once completed. UPI fraud is especially damaging in India’s fast-moving digital payments landscape. Victims also risk losing access to WhatsApp, which many use for identification and communication in criminal and government procedures, impacting social and emotional wellbeing.

In some cases, Aadhaar misuse compounds the problem—simulate SIM swaps linked to one’s Aadhaar can cause identity theft beyond immediate financial loss. The cost of recovering accounts and bank verification can be overwhelming, especially for seniors or less tech-savvy people.

What RBI and CERT-In Say

RBI has consistently cautioned users not to share OTPs or e-wallet PINs with anyone, even if the caller claims to be from a bank or telecom provider. Official RBI advisories strongly recommend verifying any service requests through official channels and protecting UPI credentials with utmost secrecy.

CERT-In emphasizes awareness around SIM swap frauds and urges customers to report suspicious calls to telecom providers immediately. The Indian government’s I4C platform and cybercrime.gov.in recommend calling the 1930 cybercrime helpline for reporting such incidents.

The all-India cybercrime helpline number 1930 is a vital resource for immediate complaint registration and assistance. Users must also check with their banks and mobile operators for transactions or SIM activity anomalies.

How to Protect Yourself

1. Never share OTPs or UPI PINs with anyone over the phone, regardless of the caller’s claim.
2. Verify any eSIM or SIM-related request by contacting Airtel or your service provider directly using official numbers or apps.
3. Avoid clicking links or downloading attachments from unsolicited SMS or WhatsApp messages claiming to be from Airtel or banks.
4. Enable multi-factor authentication (MFA) on your UPI app and WhatsApp to prevent unauthorized access.
5. Regularly monitor your bank account and UPI transaction history for suspicious activities.
6. Register for your telecom provider’s ‘Do Not Disturb’ (DND) service to reduce spam calls.
7. Immediately inform your bank and telecom provider if you suspect your SIM or mobile number has been compromised.

What to Do If You've Been Targeted

• Immediately block your UPI payments by contacting your bank or disabling UPI apps.
• Report the incident to Airtel’s official customer service and request a temporary SIM or eSIM block.
• File a complaint online at cybercrime.gov.in or call the 1930 cybercrime helpline for police assistance.
• Inform the RBI helpline for financial fraud to alert your bank.
• Change WhatsApp and other app passwords and enable additional security features such as two-step verification.
• If Aadhaar details are involved, consider reporting to the UIDAI helpline and monitor your identity usage.
• Keep a record of all communications and transactions related to the fraud for evidence.

Frequently Asked Questions

Q: Can eSIM activation ever require sharing OTPs over the phone?
A: No legitimate eSIM activation or conversion process requires sharing your OTP or UPI PIN over a phone call. OTPs should never be shared verbally; they are meant for your use only.

Q: How can I differentiate between a genuine Airtel call and a scam call?
A: Genuine Airtel representatives will not pressure you for OTPs or personal banking details. Always verify by calling Airtel’s official customer care number directly, and avoid pressing buttons or following instructions from unknown callers.

Q: If money is stolen via UPI, can it be reversed?
A: UPI transactions are generally final and irreversible once completed. However, victims can report the fraud immediately to their bank and the police. In some cases, investigative authorities may recover funds, but prevention is crucial.

For any suspicious message or call, always verify with BharatSecure.app and report fraud promptly at the 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.