SIM Swap Banking Fraud — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: HIGH | View Full Scam Details

SIM Swap Banking Fraud in India 2026: How Scammers Steal Your UPI & KYC Details

SIM Swap Banking Fraud is a rising cybercrime that targets your mobile SIM to hijack your bank accounts and UPI payments, causing serious financial loss and distress.

What Is the SIM Swap Banking Fraud?

SIM Swap Banking Fraud is a scam where fraudsters trick your mobile service provider into transferring your phone number to a new SIM card controlled by them. Once they control your number, they gain access to your banking apps, UPI transactions, and KYC-linked services, often leading to instant financial theft. The scam primarily targets smartphone users across urban and rural India who depend heavily on mobile banking and UPI payments.

In India, this cybercrime is increasingly common due to the widespread use of Aadhaar-based KYC and mobile OTPs (One-Time Passwords) for bank and payment app authentication. According to the Indian Computer Emergency Response Team (CERT-In), such fraud cases have surged, with losses accounting for crores of rupees, prompting RBI to issue multiple advisories warning users to stay alert. The government’s Inter-Departmental Committee on Cybercrime (I4C) has also stepped up efforts to track these fraudsters, considering the scam’s high severity with a risk score of 8/10.

How This Scam Works — Step by Step

1. Information Gathering: Scammers begin by collecting personal data about the victim. They may send phishing WhatsApp messages or emails posing as a government scheme to steal Aadhaar, bank details, or UPI PINs. Social media impersonation or data leaks further aid their efforts.

2. Contacting the Service Provider: Armed with your personal info, the fraudster calls your mobile operator pretending to be you. They claim the SIM is lost or damaged and request a replacement SIM card be issued.

3. SIM Activation: The mobile operator, after often limited verification, activates a new SIM for the fraudster, which now carries your phone number.

4. Hijacking Banking and UPI: With control of your phone number, the scammer requests OTPs for bank logins or UPI transactions via SMS. Since the OTPs come to the new SIM, the fraudster completes unauthorized fund transfers instantly.

5. Blocking Victim’s Access: The original SIM stops working, so the victim can no longer receive OTPs or alerts, delaying their realization of the fraud.

6. Money Disappears: Often large sums are withdrawn to unknown accounts or wallets, leaving victims financially devastated.

Real Warning Signs to Watch For

• Sudden loss of mobile network on your current SIM without explanation.
• Receiving SMS about SIM activation or mobile number porting you didn’t request.
• Unexpected OTP messages for transactions you did not initiate.
• Phone number-linked bank or UPI apps not working suddenly with "verification failed" messages.
• Calls or messages claiming your bank details or Aadhaar need urgent update via suspicious links.
• Requests for personal information or OTP over calls or WhatsApp from unknown or unverified contacts.
• Unusual transactions in your bank app or alerts of money debited without your action.

What Happens to Victims

Victims of SIM Swap Banking Fraud often face significant financial losses. Since most UPI transactions and bank logins rely on mobile OTPs for authentication, a fraudster controlling your SIM can quickly siphon off funds, often leaving victims bankrupt or struggling with frozen accounts. Immediate bank fund reversal requests are challenging once money moves through wallets or third-party accounts.

Besides monetary damage, victims endure stress, anxiety, and a loss of trust in digital payments. The misuse of Aadhaar or KYC details to commit further identity fraud is common, complicating the victim’s recovery. Given India’s heavy reliance on mobile banking, the emotional toll coupled with the difficulty of tracing cybercriminals makes this scam especially dangerous.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has issued public advisories urging customers to set strong PINs, use app-based authentication instead of SMS OTP where possible, and immediately report suspected SIM swaps to their bank and service providers. RBI’s helpline (1800-22-1911) offers support for fraud victims.

CERT-In also recommends vigilance with phishing links and urges telecom companies to strengthen KYC checks before SIM re-issuance. For reporting cyber incidents, the National Cyber Crime Reporting Portal (cybercrime.gov.in) and India’s 1930 cybercrime helpline provide dedicated channels for victims. The I4C is working closely with telecom firms and banks to prevent such frauds through technological and policy interventions.

How to Protect Yourself

1. Don’t share OTPs, UPI PINs, or Aadhaar details over calls, SMS, or WhatsApp.
2. Regularly monitor mobile network activity — report immediately if your phone loses signal unexpectedly.
3. Set a strong SIM card PIN with your mobile operator and request extra security checks for SIM re-issuance.
4. Enable app-based two-factor authentication (2FA) for your banking and UPI apps instead of SMS OTP.
5. Avoid clicking on suspicious links claiming to be from government schemes or banks—always verify from official sources.
6. Inform your bank immediately if you suspect someone else has control of your mobile number or app.
7. Use BharatSecure.app to cross-check suspicious messages or links before acting on them.

What to Do If You’ve Been Targeted

• Call your mobile service provider immediately to block the SIM and request a detailed activity log.
• Contact your bank’s fraud cell and freeze all associated accounts, especially those linked to UPI.
• Lodge a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) and call the 1930 cybercrime helpline.
• Report the fraud to RBI’s banking ombudsman or helpline (1800-22-1911) for support in fund recovery processes.
• Change all related passwords, UPI PINs, and Aadhaar-linked services once your number is restored.
• Keep detailed records of all communications and transactions for further investigations.
• Inform friends and relatives to watch out for suspicious messages sent in your name.

Frequently Asked Questions

Q: Can a SIM swap happen without my knowledge?
Yes. Scammers carefully impersonate you and trick your telecom provider into issuing a new SIM without your consent. Loss of network on your current SIM is often the first sign.

Q: Will banks refund money lost in a SIM swap fraud?
Banks may refund money if reported promptly and after investigation, but delayed reporting or negligence in safeguarding OTPs can reduce chances of recovery.

Q: How can I secure my mobile SIM against swap fraud?
Set a PIN with your telecom operator, use app-based authentication over SMS OTP, never share sensitive codes, and stay alert for unusual mobile network activity.

Stay vigilant and protect your digital identity. Whenever you receive suspicious messages or calls related to your phone number or bank, verify with BharatSecure.app before sharing any details or clicking links. Your security is our priority!