KBC/WhatsApp Lucky Draw Lottery Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: CRITICAL | View Full Scam Details

Beware the KBC/WhatsApp Lucky Draw Lottery Scam in 2026: A Rising Threat to Indian Internet Users

Millions of Indians are falling prey to a deadly WhatsApp lottery scam that falsely promises big KBC-style winnings, draining bank accounts and causing distress.

What Is the KBC/WhatsApp Lucky Draw Lottery Scam?

The KBC/WhatsApp Lucky Draw Lottery Scam is a widespread cyber fraud circulating across India in 2026, exploiting people’s dreams of sudden wealth. It falsely claims that the recipient has won a large cash prize in popular lotteries such as Kaun Banega Crorepati (KBC) or an "All India Sim Card" lucky draw. Scammers craft convincing messages, often including counterfeit images like fake cheque photos from SBI or posters mimicking official KBC winner announcements to create an illusion of authenticity.

This scam targets everyday WhatsApp users across India, often focusing on people who are less familiar with digital fraud, such as senior citizens and those in tier 2 and 3 cities. Reports from CERT-In (Indian Computer Emergency Response Team) and I4C (Indian Cyber Crime Coordination Centre) have repeatedly flagged this scam as critical (risk score 9/10), noting its rapid spread and severe financial damage caused. Given WhatsApp’s popularity as a communication tool in India, scammers find it easy to reach millions.

The scam’s growing prevalence has caught the attention of RBI and cybersecurity experts, who warn that victims can lose lakhs of rupees as fraudsters cleverly manipulate payment apps like UPI (Unified Payments Interface) and misuse Aadhaar-linked services.

How This Scam Works — Step by Step

This KBC/WhatsApp Lucky Draw Lottery Scam follows a carefully designed sequence:

1. Initial Contact via WhatsApp Message: Victims receive an unsolicited WhatsApp message congratulating them on winning a large lottery, often claiming it is from KBC or “All India Sim Card Lucky Draw.” The message contains eye-catching images such as fake SBI cheque photos or KBC winner posters.

2. Instruction to Call on WhatsApp Only: The message instructs the recipient to respond via WhatsApp calls, discouraging regular phone calls or SMS, which can be tracked more easily by authorities.

3. WhatsApp Call with “Customer Service”: When the victim calls, scammers imitate official customer care executives. They may use pre-recorded audio clips to make the process sound legitimate.

4. Verification Process: Scammers ask for personal details including full name, Aadhaar number, mobile number, and sometimes OTPs that come via SMS to “verify” the winner.

5. Request for Processing Fees or Taxes: Victims are told they need to pay advance fees or taxes to claim their winnings. These payments are requested via UPI transfers or other digital payment methods.

6. Loss of Money and Continued Pressure: Once the victim pays, scammers keep demanding more "fees" citing additional charges. Some victims have experienced SIM swap frauds after sharing their mobile details.

7. No Prize Delivered: Eventually, victims realize they haven’t won anything. The perpetrators vanish, and complaint resolution is difficult due to the scammer’s use of WhatsApp-only calls and fake identities.

Real Warning Signs to Watch For

• Messages claiming you’ve won a lottery without prior participation.
• Urgent instructions to communicate only via WhatsApp calls, avoiding regular numbers.
• Requests for advance payments or processing fees via UPI or bank transfers.
• Sending of fake official-looking images such as cheque copies, KBC posters, or logos.
• Demands for personal information like Aadhaar numbers, OTPs, or bank details.
• Poor grammar or unusual language in congratulatory messages.
• Pressure tactics to make you act quickly “before the offer expires.”

What Happens to Victims

Victims of this scam suffer serious financial losses, often running into lakhs of rupees. Because scammers exploit UPI’s instant payment system, many victims find it impossible to get refunds or block transactions after the money is transferred. Aadhaar misuse enables fraudsters to link stolen identities to other scams, including banking and SIM swap attacks, compounding the harm.

Emotionally, victims face stress and embarrassment, frequently feeling reluctant to report the fraud. In rural or less digitally literate communities, this can lead to a sense of helplessness. The financial burden is especially harsh for elderly victims who may be living on fixed incomes or small savings.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has issued alerts reminding consumers that no legitimate lottery or government scheme asks for advance payments. RBI’s helpline and banking ombudsman services help victims block suspicious transactions, although prevention is the best defense.

CERT-In recommends vigilance when receiving unsolicited messages claiming winnings and avoiding sharing OTPs or Aadhaar details over WhatsApp calls. The Indian Cyber Crime Coordination Centre (I4C) runs a 24x7 cybercrime helpline — dial 1930 — where victims can report such scams immediately.

How to Protect Yourself

1. Never Trust Unsolicited Lottery Messages: Legitimate lotteries never notify winners through WhatsApp messages or calls.

2. Do Not Share OTPs or Personal Information: Never reveal OTPs, Aadhaar, or bank details over WhatsApp, even if the caller sounds official.

3. Avoid Making Advance Payments: Genuine prize claims do not require processing fees or taxes upfront.

4. Verify Claims Independently: Use official KBC websites or verified government portals to confirm any lottery winnings.

5. Report Suspicious Numbers and Messages: Block and report scam contacts on WhatsApp immediately.

6. Keep Your Mobile Number Registered Only to You: Avoid SIM swap fraud by safeguarding your mobile service provider PIN/password.

7. Enable UPI Transaction Alerts and Set Limits: Monitor payments closely and set UPI transaction limits via your bank app.

What to Do If You’ve Been Targeted

1. Stop All Communication with the scammer immediately.

2. File a Complaint on the government cybercrime portal: cybercrime.gov.in.

3. Call the Cybercrime Helpline at 1930 for assistance and guidance.

4. Contact Your Bank or UPI Provider Right Away to block or reverse suspicious transactions.

5. Inform Your Mobile Service Provider to prevent SIM swapping.

6. Change All Online Passwords linked to your Aadhaar or bank accounts.

7. Report the Scam to CERT-In via their official channels to help track and take down such criminals.

Frequently Asked Questions

Q: Can I really win KBC or lottery prizes via WhatsApp?
A: No. Official KBC winnings and government lotteries do not notify winners by WhatsApp. All prize claims require verified communication from official channels, never WhatsApp messages or calls asking for payments.

Q: What if I already shared my Aadhaar or OTP with the scammer?
A: Immediately inform your bank and mobile operator. Change passwords and file a complaint with cybercrime authorities. Sharing OTP or Aadhaar details puts you at high risk for further frauds.

Q: How can I check if a message about lottery winnings is legitimate?
A: Always verify through trusted sources like official KBC websites or government lottery portals. If the message pressures you for payments or private data on WhatsApp, it’s a scam.

KBC/WhatsApp Lucky Draw Lottery Scams continue to trap innocent Indians every day. Before reacting to any “winning” message, pause and verify at BharatSecure.app — your trusted Indian digital fraud awareness platform. Stay safe, stay informed!