Utility Bill Data Phishing (BWSSB) — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: HIGH | View Full Scam Details

Beware in 2026: Utility Bill Data Phishing Scam Hits BWSSB Customers in India

Millions of Bengaluru residents are at risk from a high-severity phishing scam that tricks you into paying fake utility bills under the guise of the Bengaluru Water Supply and Sewerage Board (BWSSB).

What Is the Utility Bill Data Phishing (BWSSB)?

Utility Bill Data Phishing targeting BWSSB customers is a cybercrime scam that has been spreading rapidly in Bengaluru and nearby regions. It exploits leaked customer details such as names, addresses, phone numbers — often obtained through data breaches or illegal trades on the dark web. Fraudsters use this information to send highly believable messages pretending to be BWSSB, warning about urgent water disconnection if immediate payment is not made.

This scam specifically targets BWSSB’s millions of customers who regularly pay water bills digitally through UPI apps, Google Pay, PhonePe, or net banking. The threat is severe because water supply is essential, and the scam creates a false emergency, pushing victims to pay quickly without verifying the source. Reports from Bengaluru residents and advisories by Indian cybersecurity agencies highlight an increasing trend in such phishing attempts.

The Indian Computer Emergency Response Team (CERT-In) and the Ministry of Home Affairs’ Indian Cyber Crime Coordination Centre (I4C) have issued general warnings against utility bill related phishing scams. As no official BWSSB payment communication will ever threaten immediate disconnection via SMS or WhatsApp with unofficial payment links, vigilance is critical.

How This Scam Works — Step by Step

1. Data Collection: Scammers get hold of BWSSB customer details — names, phone numbers, and addresses — from leaks or dark web purchases.
2. Phishing Message Sent: You receive an SMS or WhatsApp message that looks like it’s from BWSSB. This message warns you that your water supply will be disconnected immediately unless you pay an outstanding bill of INR 500-2000.
3. Fake Payment Link: The message includes a link to an unofficial payment site or a personal UPI ID. Sometimes, the link looks genuine but directs to a fake webpage to capture payment or UPI details.
4. Victim Pays Quickly: Believing the threat is real and urgent, you click the link or scan the QR code and make the payment.
5. Loss of Money: Once the payment goes to the scammer’s UPI or bank account, it becomes difficult to reverse it because these payments mimic trusted utility transactions. Victims may also unknowingly share UPI PIN or Aadhaar details when attempting to “update” their account.
6. No Service Restored: Despite payment, the scammers disappear, and no water connection restoration or official communication happens.

Real Warning Signs to Watch For

• The message comes from an unknown or unverified phone number instead of official BWSSB contact numbers.
• Urgent threats of disconnection, demanding immediate payment to avoid service cut-off.
• Payment links or QR codes directing to suspicious, non-BWSSB URLs.
• Requests for payment via personal UPI IDs instead of official BWSSB portals or apps.
• Messages received on WhatsApp or SMS without prior official email or postal notice.
• Spelling mistakes or unusual language in the message, which official BWSSB communications rarely have.
• Pressure tactics urging you not to delay or verify the details.

What Happens to Victims

Victims often suffer financial loss ranging from a few hundred to several thousand rupees. Since UPI payments are instant and usually irreversible once confirmed with the UPI PIN, chances of refund are minimal. Some victims have faced further risks like SIM swap fraud, where scammers use stolen mobile numbers to access banking OTPs or Aadhaar-related services.

This scam creates emotional stress, fear of disconnection, and frustration over losing money for a bill they never owed. It also shakes trust in digital payments, which many Indians depend on for everyday utilities.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has regularly advised customers to verify payment requests, never share UPI PINs, and use only official portals for bill payments. RBI’s helpline for banking fraud is available at 1800-11-7777.

CERT-In emphasizes awareness about phishing scams and encourages Indians to report suspicious messages immediately using the national cybercrime reporting portal at cybercrime.gov.in. The Ministry of Home Affairs (through I4C) has launched the 1930 cybercrime helpline for advice and reporting.

While there is no BWSSB-specific advisory yet, these agencies’ warnings about phishing and fake payment links are fully applicable here.

How to Protect Yourself

1. Never click on payment links or QR codes sent via SMS or WhatsApp without confirming their authenticity.
2. Check the sender’s phone number carefully. Official BWSSB messages come from verified numbers or communications channels.
3. Pay bills only via the official BWSSB website or recognized apps (e.g., BWSSB’s official portal, BHIM UPI apps with correct payee details).
4. Ignore urgent threat language — real BWSSB notifications provide a grace period and official notice formats.
5. Verify outstanding bills through BWSSB helpline numbers or office before making any payment.
6. Keep your UPI PIN confidential and never share OTPs or PINs with anyone.
7. Report suspicious messages to the 1930 cybercrime helpline or directly on cybercrime.gov.in.

What to Do If You’ve Been Targeted

• Stop any further payments immediately. Do not engage further with the scammers.
• Report the transaction to your bank or UPI app provider as a fraudulent payment. Some banks may assist in tracking or blocking accounts linked to fraud.
• File a complaint immediately with the National Cyber Crime Reporting Portal at cybercrime.gov.in.
• Call the 1930 cybercrime helpline for guidance on next steps and incident support.
• Inform BWSSB customer care so they can flag your account for unusual activity.
• Change your UPI PIN and mobile banking passwords as a precaution.
• If you suspect SIM swap or Aadhaar misuse, report it to your mobile operator and UIDAI.

Frequently Asked Questions

Q: How can I verify if a BWSSB bill message is genuine?
A: Always cross-check the outstanding amount on the official BWSSB website or through the authorized app before making a payment. Genuine messages come from verified numbers and will not use threatening language or unofficial payment links.

Q: What if I already paid through the fake link? Can I get my money back?
A: UPI payments are usually irreversible once confirmed. Contact your bank immediately to report the fraud and request help. You should also file a complaint on the cybercrime portal and inform BWSSB.

Q: Are these phishing messages only sent via SMS, or do they use other apps?
A: Scammers use both SMS and WhatsApp to reach victims. WhatsApp is popular since scam messages can seem more personal, but the fraud method is similar across both platforms.

Don’t fall victim to fraudulent BWSSB bill messages! Always verify suspicious payment requests on BharatSecure.app, India’s trusted digital fraud awareness platform. Stay informed, stay safe!