WhatsApp KBC Lucky Draw Lottery Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: CRITICAL | View Full Scam Details

Beware the WhatsApp KBC Lucky Draw Lottery Scam in India 2026: Protect Your Money and Data

The WhatsApp KBC Lucky Draw Lottery Scam is a rising cyber threat in India, tricking thousands into losing their money and personal data through fake lottery winnings linked to the popular Kaun Banega Crorepati show.

What Is the WhatsApp KBC Lucky Draw Lottery Scam?

This scam exploits the widespread popularity of the TV quiz show Kaun Banega Crorepati (KBC) and the extensive use of WhatsApp across India. Scammers send fake messages claiming you have won a big prize or cash reward from a supposed KBC lucky draw conducted via WhatsApp. These messages often appear very convincing, using official-looking logos of KBC, WhatsApp, and even the State Bank of India (SBI). The scammers pretend to be representatives from Mumbai or Delhi offices but often use international phone numbers, such as those starting with country code +1 (USA/Canada), to avoid tracking.

The scam targets anyone active on WhatsApp but often focuses on older adults and people who may be less familiar with digital fraud tactics. It is widespread in India, with multiple cases reported across states from urban metros to smaller towns. The Indian government’s cybercrime unit I4C (Indian Cyber Crime Coordination Centre) and CERT-In have repeatedly warned about these lottery scams using WhatsApp, especially due to their link with popular shows like KBC to gain trust quickly among victims.

How This Scam Works — Step by Step

1. Initial Message: The victim receives a WhatsApp message or forward claiming they have won a “big prize” in the KBC Lucky Draw Lottery 2024-2026. The message contains flashy images or PDFs with KBC and SBI logos to appear legitimate. The sender’s number might show a +1 country code but claim to be a Mumbai or Delhi office.

2. Verification Through WhatsApp Calls: The fake lottery message instructs the victim to use WhatsApp calls only, not regular calls or SMS, to confirm their prize. This prevents authorities or banks from tracing the scammers easily.

3. Personal Details Request: During the WhatsApp call, scammers ask the victim to share sensitive details to “verify identity.” This includes Aadhaar number, bank account details, UPI PIN, and sometimes One-Time Passwords (OTPs) sent via SMS.

4. Fake Processing Fees: Scammers demand a processing fee or GST payment (usually INR 2,000-5,000 or more) via UPI or bank transfer, claiming it is necessary to release the prize. Victims transfer money believing they will receive winnings later.

5. Repeated Fraud Attempts: Once the victim makes one payment, scammers continue to pressure them for additional “tax” or “legal charges” until the victim realizes it is a fraud or runs out of funds.

6. Loss of Money & Data: Victims lose the processing fees and sometimes suffer UPI fraud, SIM swap attacks, or Aadhaar misuse after sharing their personal details. The WhatsApp number they contacted disappears or blocks them once the scam is complete.

Real Warning Signs to Watch For

• Messages come from unknown international numbers with +1, +44, or similar country codes but claim to be Indian government offices.
• The message asks you to confirm winnings via WhatsApp calls only—never via regular phone calls or written communication.
• You are asked to pay “processing fees,” “taxes,” or “legal charges” upfront before you receive any prize.
• Requests for sensitive details such as Aadhaar number, bank account number, UPI PIN, OTPs, or net banking credentials.
• Official logos (KBC, SBI, WhatsApp) used in messages look slightly blurred or poorly formatted.
• Lack of official channels or website links for verification of the lottery announcement.
• Urgent or threatening language pushing you to act quickly or risk forfeiting the prize.

What Happens to Victims

Financially, victims lose thousands of rupees through fraudulent UPI transfers or direct bank payments. Since UPI transactions are instant and irreversible, reclaiming money is extremely difficult. Sharing Aadhaar and other personal documents can lead to identity theft, affecting loan applications, credit cards, and more. In some cases, SIM swap fraud results in attackers taking over victims’ mobile numbers, leading to further losses and harassment.

Emotionally, victims feel stressed, violated, and sometimes ashamed, making them hesitate to report the crime. The loss of trust in digital platforms like WhatsApp also impacts their willingness to use online banking or participate in legitimate lotteries.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has issued multiple warnings against sharing UPI PINs and OTPs, emphasizing that no genuine official or lottery organization will ever ask for these details. RBI’s helpline (dial 14567) is available for immediate assistance related to digital payment fraud.

CERT-In (Indian Computer Emergency Response Team) and I4C have advised the public to verify lottery claims independently through official websites of broadcasters or government portals. They recommend registering complaints on cybercrime.gov.in and calling the 1930 national cybercrime helpline for reporting WhatsApp and lottery scams.

How to Protect Yourself

1. Never trust unsolicited WhatsApp messages claiming lottery winnings, even if they appear official.
2. Avoid communicating via WhatsApp calls for financial or identity verification; insist on written and official channels.
3. Do not share Aadhaar details, UPI PIN, OTPs, or bank credentials with anyone over WhatsApp, phone, or SMS.
4. Verify lottery claims only through official broadcaster websites (Sony TV for KBC) or government portals.
5. Check sender numbers carefully; Indian government offices will not use international (+1) numbers.
6. Enable UPI transaction alerts and immediately report any suspicious debits to your bank.
7. If you suspect a SIM swap, contact your telecom operator immediately and lodge a complaint.

What to Do If You've Been Targeted

• Stop all communication immediately with the scammer on WhatsApp or phone.
• Contact your bank to freeze or block UPI transactions and report unauthorized payments.
• File a complaint at cybercrime.gov.in under ‘financial fraud’ or ‘identity theft.’
• Call the 1930 cybercrime helpline to get assistance with reporting and recovery.
• Notify your mobile operator if you suspect SIM swap or phone fraud.
• Report the scam to BharatSecure.app to help others stay safe.

Frequently Asked Questions

Q: Can KBC or any other lottery announce winners via WhatsApp?
No. Official KBC winners are announced through TV broadcasts and verified government or broadcaster portals. Legitimate lotteries do not ask for fees or personal info via WhatsApp messages.

Q: What should I do if I accidentally shared my UPI PIN or OTP?
Immediately contact your bank to block the UPI payment service and request reversal if possible. Change your bank and UPI PINs and monitor your accounts for suspicious transactions.

Q: Is it safe to click links or download attachments in such WhatsApp lottery messages?
No. These links or attachments often contain malware designed to steal personal data from your phone. Avoid clicking on unknown links or downloading files from unverified sources.

Stay alert and protect yourself from such scams in 2026 and beyond. If you receive suspicious WhatsApp messages claiming lottery winnings, do not respond or pay any fees—verify first at BharatSecure.app to safeguard your money and identity.