Paytm FASTag KYC Update Scam Call — How to Identify & Stay Safe
INDIA — By BharatSecure Threat Intelligence Team ·
Severity: CRITICAL | View Full Scam Details
🛡️ Want to check if you've received this scam?
Check This Scam on BharatSecure →Paytm FASTag KYC Update Scam Call — A Critical Threat in India 2026
Beware of scam calls pretending to be from Paytm about FASTag KYC updates — fraudsters are tricking vehicle owners across India and causing serious financial losses.
What Is the Paytm FASTag KYC Update Scam Call?
The Paytm FASTag KYC Update Scam Call is a rising cyber fraud targeting vehicle owners across India who use FASTag for toll payments on national highways. As FASTag is linked with digital wallets and UPI accounts, scammers exploit this digital ecosystem by calling unsuspecting users, pretending to be Paytm representatives or bank officials.
These fraudulent calls warn victims that their FASTag accounts will be deactivated unless urgent KYC (Know Your Customer) updates are completed immediately. To increase trust, callers often mimic local phone numbers and use official-sounding language. This scam, reported increasingly in 2026, leverages social media scraps, public directories, and SMS databases to identify individuals likely to own FASTag-enabled vehicles.
Authorities like CERT-In (Indian Computer Emergency Response Team) and the Indian Cyber Crime Coordination Centre (I4C) have flagged such scams under digital payment frauds, advising vigilance. The Reserve Bank of India (RBI) also repeatedly emphasizes caution while sharing personal or banking information over phone calls. As FASTag usage continues to grow in India—with over 70% penetration on toll plazas—this scam’s impact is felt widely, especially by daily highway commuters and commercial vehicle drivers.
How This Scam Works — Step by Step
Identifying Targets: Scammers compile lists of potential FASTag users using publicly available data and social media profiles where vehicle ownership is evident.
Initial Call: Victims receive a phone call from a number resembling their local area code. The caller claims to be a Paytm executive or from the linked bank’s FASTag department.
Urgent Warning: The caller informs the victim that their FASTag account is at risk of being blocked or deactivated due to incomplete KYC documentation that needs urgent updating to avoid disruptions.
Request for Personal Details: To “verify” identity, the caller asks for sensitive personal information, such as Aadhaar details, bank account numbers, or UPI PIN.
Sharing OTPs or UPI Authentication: The victim is persuaded to share one-time passwords (OTPs) received via SMS or approve UPI transactions under the pretext of completing KYC or reactivating FASTag services.
Money Transfer: Once the scammer succeeds in authorizing payments or linking their own accounts, the victim’s bank accounts or digital wallets are drained, often in multiple small transactions to avoid immediate detection.
Disconnection and Loss: The caller disappears, leaving the victim with frozen accounts or unauthorized deductions, often occurring without immediate suspicion until notified by the bank or wallet app.
Real Warning Signs to Watch For
- Callers demanding urgent KYC updates over phone with threats of account deactivation.
- Use of local area codes or numbers mimicking banks or Paytm but unsolicited calls.
- Request for Aadhaar details, UPI PIN, OTP, or QR code scanning over phone or WhatsApp.
- Messages or calls pressuring for immediate action without allowing time to verify.
- Requests to share screenshots or forward OTPs via WhatsApp or SMS.
- Unsolicited SMS or WhatsApp messages claiming to be from Paytm requesting personal info.
- Claims that the FASTag account is linked to a penalty or legal issue requiring instant KYC.
What Happens to Victims
Victims often suffer immediate financial losses as scammers exploit UPI’s instant payment system with stolen credentials and OTPs. Unlike credit cards, UPI payments cannot be reversed easily, and banking apps may take days to resolve disputes. Many victims face freezing of their digital wallets or linked bank accounts amid suspicious activity, causing disruption to daily financial transactions.
Emotionally, victims endure distress over loss of money and fear of identity misuse, especially with their Aadhaar and bank details compromised. SIM swap frauds have also been reported where scammers take control of the victim’s mobile number to continue fraudulent activities unhindered. This cascade of theft and manipulation compromises trust in digital payments for critical services like FASTag, affecting highway commuters and transport businesses heavily.
What RBI and CERT-In Say
The RBI regularly issues advisories urging Indians to protect UPI PINs, never share OTPs, and verify the identity of callers claiming to be bank representatives. CERT-In provides alerts on phone-call-based phishing and social engineering scams, recommending users remain skeptical of urgent KYC or payment-related requests via phone or WhatsApp.
India’s 1930 cybercrime helpline, managed by I4C, encourages victims to report payment frauds related to UPI and FASTag immediately to enable investigation and mitigation. While no specific advisory targets this exact scam, the general framework advises that KYC updates should only be done via official apps or websites, never through calls or WhatsApp messages.
How to Protect Yourself
- Do not share Aadhaar, PAN, bank account, or UPI PIN details over the phone.
- Ignore calls that claim urgent FASTag KYC updates and ask for OTPs or payments.
- Always verify FASTag or Paytm-related requests by logging into the official app or website.
- Do not approve UPI transactions initiated through unsolicited calls or messages.
- Use UPI app settings to enable transaction alerts and regularly check bank statements.
- Register your mobile SIM under the NDNC (Do Not Disturb) list to reduce scam calls.
- Report suspicious calls or messages to 1930 cybercrime helpline and block the number.
What to Do If You've Been Targeted
If you suspect you have fallen victim to the Paytm FASTag KYC Update Scam Call:
- Immediately block the scammer’s phone number and report it to your mobile operator.
- Notify your bank and digital wallet service about unauthorized transactions to freeze accounts.
- File a complaint with the cybercrime.gov.in portal and call the 1930 cybercrime helpline.
- Change your UPI PIN and check your bank statement for unusual transactions.
- If your Aadhaar or personal data was shared, report to UIDAI and consider placing an Aadhaar lock.
- Inform the local police and keep records of all calls and messages received.
- Stay alert for further phishing attempts or SIM swap fraud after the incident.
Frequently Asked Questions
Q: Can I update my FASTag KYC over a phone call from Paytm?
A: No, official FASTag KYC updates should only be done through the Paytm app, verified websites, or authorized centers. Do not share personal info or OTPs on calls.
Q: What should I do if I receive a call demanding my FASTag KYC details urgently?
A: Hang up immediately and verify any such requirements by logging into the official Paytm app or contacting their official customer care number.
Q: Is it safe to share my Aadhaar or bank details for FASTag verification?
A: Aadhaar and bank details should never be shared on phone calls or WhatsApp messages. Always use official, secure channels to complete KYC processes.
If you receive suspicious messages or calls about FASTag, verify their authenticity at BharatSecure.app and report fraud immediately by calling 1930.
Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.
Related Scams in Our Database
- Merchant Audio Payment Fakery — Severity: MEDIUM
- Social Media Fraud Using RBI 2FA Misinformation — Severity: MEDIUM
- Limited Police Access Hindering Aadhaar Fraud Probes — Severity: MEDIUM
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app.