Social Media Minimum Age Scams — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: MEDIUM | View Full Scam Details

Social Media Minimum Age Scams in India 2026: How to Spot and Stop This Tricky Phishing Fraud

Millions of Indians are being targeted by Social Media Minimum Age Scams — a phishing trick that preys on users’ fears about complying with age rules on Facebook, Instagram, WhatsApp, and Snapchat.

What Is the Social Media Minimum Age Scam?

Social Media Minimum Age Scams are a rising cyber threat in India where fraudsters exploit platform age restrictions to steal personal data and money. Indian social networks and global giants like Instagram and Snapchat require users to be at least 13 or 16 years old, depending on policies or local laws. Scammers pose as social media officials or government agencies, claiming urgent "age verification" is mandatory to continue using the account. These fake messages often circulate via WhatsApp forwards, Facebook inboxes, or Instagram DMs, targeting teenagers, young adults, and even parents managing kids’ accounts.

The scam has become widespread in India, especially after regulatory bodies such as CERT-In (Indian Computer Emergency Response Team) and I4C (Indian Cyber Crime Coordination Centre) have noted increased phishing attempts linked to social media verification. Users receive alarming notifications asking them to confirm identity details like Aadhaar numbers, UPI PINs, or mobile SIM information under the guise of new guidelines supposedly issued by the National Anti-Scam Centre—a non-existent entity designed to sound official.

In 2025, RBI and CERT-In released advisories warning users not to share personal documents or OTPs for social media verification. Despite this, millions remain vulnerable because these scams tap into the fear of losing account access or breaking rules that could lead to penalties or permanent bans.

How This Scam Works — Step by Step

1. Initial Contact via Message or Friend Request:
   A user receives a friend request or direct message on Facebook, Instagram, Snapchat, or WhatsApp from an unknown account. The profile looks convincing—using official logos, similar usernames, and professional language.

2. Claim of Urgent Age Verification Required:
   The scammer claims that new government regulations require proof of age verification to comply with updated laws enacted by authorities like I4C or a "National Anti-Scam Centre." They warn that failure to verify immediately will result in account suspension or permanent ban.

3. Request for Personal Details:
   To "verify," they ask for Aadhaar card details, date of birth, mobile number linked with the account, or even UPI PINs under the pretext of linking verified mobile payments for secure user identification.

4. Sending a Link or OTP Request:
   Users may be sent a phishing link mimicking official portals or asked to share OTPs sent to their mobile phones. The link may look like a government or social media login page but actually collects login credentials or authorizes UPI transactions.

5. Data Theft and Financial Loss:
   Once scammers have personal data or OTPs, they quickly access your social media accounts or bank-linked UPI apps (like Google Pay or Paytm). They may transfer money, commit SIM swap fraud, or sell identity information on the dark web.

6. Account Compromise and Identity Misuse:
   Victims find their accounts locked or controlled by scammers. Stolen Aadhaar information can lead to further fraud, like fake loan applications or mobile connections opened in the victim’s name.

Real Warning Signs to Watch For

• Messages or friend requests from profiles that are new, have few friends/followers, or suspicious usernames mimicking official accounts.
• Urgent tone demanding immediate action to “verify age” or “avoid account suspension.”
• Requests for sensitive personal data like Aadhaar, OTP, passwords, UPI PINs, or bank details.
• Links that lead to unofficial websites with URLs that do not match official government or social media domains.
• Poor grammar, spelling mistakes, or overly formal language not typical of legitimate company communication.
• Threats about account suspension without clear official channels or contact information.
• Pressure tactics asking you not to consult family or official support before responding.

What Happens to Victims

Victims suffer both financial and emotional damage. Fraudsters may drain UPI-linked bank accounts by fooling victims into sharing OTPs or PINs. Since UPI payments are instant and irreversible without the recipient’s cooperation, recovering stolen INR can be difficult. Simultaneously, Aadhaar misuse can lead to identity theft scenarios where fake SIM cards or loans are opened in the victim’s name—causing legal and credit troubles.

Emotionally, losing access to social media profiles disrupts personal and professional life, especially for young users who rely on these platforms for schooling, work, or social connections. The fear of personal data exposure causes distress and longer-term trust issues in digital services.

What RBI and CERT-In Say

RBI has emphasized repeatedly that no legitimate entity will ask for UPI PINs or OTPs for any verification purpose. Their advisories clearly instruct users to never share sensitive banking credentials or one-time passwords with anyone. CERT-In and I4C have also issued alerts regarding phishing scams exploiting social media platforms to steal personal data. They encourage users to report suspicious activity immediately to cybercrime control centers.

For cybercrime reporting, the Indian government’s helpline is 1930, which connects victims to local police cyber cells. RBI’s customer helpline for banking fraud is reachable via respective bank numbers or the National Cyber Crime Reporting Portal.

How to Protect Yourself

1. Never share Aadhaar, OTP, UPI PIN, or passwords through messages or calls. Legitimate platforms do not ask for these details.
2. Verify official communications by checking social media companies’ verified pages or official websites directly.
3. Avoid clicking on links from unknown or suspicious contacts—even if they look official.
4. Use two-factor authentication (2FA) on all social media and banking apps for extra security.
5. Regularly review your privacy settings on social media platforms.
6. Do not accept friend requests from unknown people claiming to be officials.
7. Report any suspicious messages to your social media platform and forward phishing attempts to CERT-In at phishing@cert-in.org.in.

What to Do If You’ve Been Targeted

• Immediately change your social media and bank account passwords.
• Contact your bank or UPI app support to report unauthorized transactions and request freezing of accounts if necessary.
• File a complaint online at https://cybercrime.gov.in/ — the Indian government’s official portal for cybercrime reporting.
• Call the cybercrime helpline at 1930 for urgent support.
• Inform your mobile operator if you suspect SIM swap fraud, and ask for immediate SIM lock or replacement.
• Keep copies of all suspicious messages/screenshots as evidence to help investigations.

Frequently Asked Questions

Q: Can I trust messages that say they are from Facebook or Instagram about age verification?
No. Official social media companies rarely, if ever, send personal messages requiring Aadhaar or financial details for age verification. Always double-check by visiting the official website or verified app sections.

Q: What should I do if I’ve shared my Aadhaar or UPI PIN with someone claiming to be a social media official?
Change all linked passwords immediately, report to your bank and UPI app customer care, and file a cybercrime complaint with the police and CERT-In. Monitor your accounts closely for any unauthorized activity.

Q: Is it really necessary for social media platforms to ask for Aadhaar or mobile numbers for age verification?
No. While platforms may ask for date of birth or age confirmation at sign-up, they do not require Aadhaar details. The government hasn’t mandated social media age verification linked to Aadhaar as of 2026.

Social Media Minimum Age Scams are tricky but avoidable with vigilance. When in doubt, don’t click or share personal details—verify suspicious messages at BharatSecure.app, India’s leading platform to keep you safe from scams. Stay alert, stay secure!