Unsolicited Business Name Renewal and Company Review Notices — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 25, 2026

Severity: MEDIUM | View Full Scam Details

Beware the 2026 India Business Scam: Unsolicited Business Name Renewal and Company Review Notices

Thousands of Indian entrepreneurs are targeted each year by scammers sending fake business renewal and review notices to steal money and data.

What Is the Unsolicited Business Name Renewal and Company Review Notices?

This scam involves fraudsters sending fake messages or emails that look like official government or regulatory notices about urgent business name renewals or mandatory company reviews. The scam targets registered businesses across India—especially small and medium enterprises (SMEs) who receive these notices claiming their business registration or compliance is at risk unless they pay a fee immediately.

These messages typically appear to come from government bodies such as the Ministry of Corporate Affairs (MCA), Registrar of Companies (ROC), or regulatory agencies familiar to business owners. However, there is no such requirement for unsolicited renewal or review fees outside official MCA communication channels. Despite this, many Indian businesses, often unaware of official processes or under pressure, fall prey to these false demands.

In 2025-26, reports of this phishing activity have increased across India, with CERT-In and the Indian Cyber Crime Coordination Centre (I4C) issuing advisories to warn businesses. The scam not only causes financial loss but also risks exposing sensitive company documents, Aadhaar-linked data, and banking credentials.

How This Scam Works — Step by Step

1. Initial Contact: You receive an email, SMS, WhatsApp message, or even a phone call that looks like an official business notice. It warns that your business name registration will be canceled if immediate renewal or review fees are not paid.

2. The Official-Looking Document: The message includes a link or attachment purporting to be an official government form or invoice. This document often uses government logos and jargon to appear credible, sometimes referencing UDYAM registration or MCA Portal terms.

3. Urgent Payment Demand: The scam urges you to pay a "renewal fee" or "processing charge" using UPI, net banking, or even QR codes. The payment request often features unfamiliar bank accounts or digital wallet IDs.

4. Data Harvesting or Malware: Clicking the link can also lead to fake websites that ask for company details, Aadhaar numbers, PAN, and banking login information. Some links may install malware or spyware to steal credentials silently.

5. Loss Realized Too Late: Once payment is made or data shared, victims cannot reverse UPI or digital wallet transactions easily. Fraudsters may also use stolen Aadhaar or PAN details for identity theft, take over mobile numbers via SIM swap, or cause WhatsApp frauds linked to your company.

Real Warning Signs to Watch For

• The communication is unsolicited and pressures you to act "immediately" or "within 24 hours."
• Demand for payment via UPI apps or QR codes linked to unknown accounts, not official government payment gateways.
• Requests for sensitive data such as Aadhaar, PAN, or bank login credentials in emails or forms.
• Poor grammar, spelling mistakes, or inconsistent formatting in the notice.
• Sender email or phone number does not have official government domain (like @mca.gov.in).
• Threats of business cancellation or legal action that doesn’t match your previous MCA portal communications.
• Links that redirect to suspicious websites (check URL carefully before clicking).

What Happens to Victims

Victims often lose several thousand rupees due to phishing payments they cannot reverse—even when reported quickly. Since UPI transactions are instant and irreversible without the receiver’s cooperation, fraudulent recipients keep the money.

Beyond financial loss, fraudulent use of Aadhaar and PAN details obtained from victims can lead to identity theft. This increases risks of SIM swap frauds, where hackers take control of your mobile number to intercept OTPs, withdraw money, or hack WhatsApp business accounts linked to your SIM. The emotional toll—stress, distrust, and business disruption—can be severe, especially for small Indian entrepreneurs with limited recourse.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) repeatedly warns against phishing frauds and urges users to verify payment requests before proceeding. RBI’s official helpline and grievance portal assist victims in reporting UPI and net banking cyber frauds.

CERT-In recommends vigilance in identifying phishing emails and messages, emphasizing the importance of never sharing OTPs, Aadhaar, or banking credentials online unless via official portals. The Indian Cyber Crime Coordination Centre (I4C) encourages all cybercrime victims to file complaints on cybercrime.gov.in and report suspicious activity to the 1930 national cybercrime helpline.

How to Protect Yourself

1. Verify with MCA Portal: Always cross-check any business renewal notices by directly logging into the official MCA portal at mca.gov.in—never via emailed links or random messages.

2. Don’t Pay Unverified Fees: Official government fees must be paid through verified payment gateways or bank links found on government websites only.

3. Ignore Urgent Pressure Tactics: Scam messages try to rush decisions. Take your time to verify information through multiple official channels.

4. Don’t Share Sensitive Data via Email/SMS: Never provide Aadhaar, PAN, bank credentials, or OTPs through emailed forms or text messages.

5. Use Official Contact Numbers: Contact MCA, ROC, or your business consultant directly to confirm if any renewal or review is genuinely pending.

6. Check Email Domains: Government emails generally come from official domains like @mca.gov.in; avoid clicking links from unfamiliar or generic domains.

7. Report Suspicious Activity: If you suspect a scam message, submit a complaint on cybercrime.gov.in or call the 1930 cybercrime helpline immediately.

What to Do If You've Been Targeted

• Stop All Transactions: If you suspect fraud after a payment, immediately contact your bank and request a fraud investigation. While UPI transactions are fast, quick bank intervention can sometimes help.

• File a Police Complaint: Visit your nearest cybercrime or police station to file an FIR. Many states in India have specialized cyber units.

• Report to Cybercrime Portal: Go to cybercrime.gov.in and file a formal complaint under “Fraud/Phishing” category.

• Call 1930 Cybercrime Helpline: The national helpline offers support and guidance during cyber frauds.

• Freeze Your Mobile Number: Contact your mobile operator to check for and prevent unauthorized SIM swaps linked to your number.

• Protect Your WhatsApp and Bank Accounts: Inform your bank and set up additional authentication. Revoke WhatsApp business access if needed.

• Maintain Evidence: Save all messages, emails, payment receipts, and scam URLs for investigation.

Frequently Asked Questions

Q: Can the MCA send unsolicited renewal notices via WhatsApp or SMS?
No, official MCA communications typically come through their portal or emails from domains ending with @mca.gov.in. They do not send random SMS, WhatsApp, or email reminders demanding immediate payment.

Q: Is it safe to pay fees through UPI links sent in emails from government agencies?
No. Always complete fee payments directly through official government websites. Fraudsters often create fake UPI payment requests mimicking government agencies.

Q: What is the best way to verify if a business renewal notice is genuine?
Log in to the MCA portal with your credentials and check your company's status. If unsure, contact the Registrar of Companies office or a trusted business consultant directly.

If you receive suspicious renewal or company review notices, don’t fall for tricks—verify every message immediately. Protect your business from scams by checking all doubtful communication at BharatSecure.app. Stay safe and secure in 2026 and beyond!