Your SIM, fraudsters control: How a ‘silent’ cybercrime emptying bank accounts — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: HIGH | View Full Scam Details

Your SIM, Fraudsters Control: How a ‘Silent’ Cybercrime Is Emptying Bank Accounts in India 2026

SIM swap fraud is rapidly emerging as one of India’s most dangerous digital threats in 2026, leaving victims’ bank accounts empty with frightening ease.

What Is the Your SIM, fraudsters control: How a ‘silent’ cybercrime emptying bank accounts?

SIM swap fraud is a sneaky cybercrime where fraudsters take over your mobile number by tricking your telecom provider into deactivating your SIM card and activating a new one under their control. Once they have your mobile number, they intercept all OTPs (One-Time Passwords) sent to you that banks and UPI apps use to verify transactions. This silent crime can drain your bank accounts without any obvious signs until it’s too late.

In India, this scam targets a wide range of people but especially those active on social media platforms like Facebook, Instagram, or WhatsApp. Fraudsters collect personal information from public profiles or through phishing messages, then impersonate the victim to the service provider. According to CERT-In and I4C reports, SIM swap fraud incidents have surged in recent years, with many victims losing lakhs of rupees from their UPI wallets and bank accounts.

The Reserve Bank of India (RBI) has issued multiple advisories highlighting the risks of OTP fraud and SIM-based attacks. With increasing reliance on mobile banking and UPI payments in India, SIM swap fraud remains a high-severity threat — rated 7 out of 10 on risk scales by BharatSecure.app — demanding urgent awareness among everyday users.

How This Scam Works — Step by Step

1. Fraudsters Collect Personal Data: Scammers search social media or steal data from breached databases to gather details like your full name, mobile number, date of birth, PAN, or Aadhaar-related info.

2. Impersontation of Victim: Using this info, the fraudster contacts your mobile service provider, claiming that your SIM card is lost or damaged, and requests a SIM replacement.

3. Social Engineering or Insider Help: Sometimes, fraudsters bribe or trick call center executives to approve the request without proper verification.

4. SIM Card Is Swapped: The telecom provider deactivates your original SIM and activates a new SIM with the same number in the fraudster’s phone.

5. OTP Interception and Account Access: All OTPs sent to your mobile number for UPI transactions, mobile banking, or any two-factor authentication now go directly to the scammer.

6. Bank Accounts and Wallets Drained: Fraudsters quickly initiate UPI money transfers, mobile wallet top-ups, or even credit card purchases using your accounts.

7. Victim Notices Only When It’s Too Late: Since the fraud can happen silently, victims typically become aware only after losing significant funds.

Real Warning Signs to Watch For

• Sudden or unexplained loss of mobile network or frequent “No Service” message on your phone.
• Receiving SMS or calls about SIM activation or number porting that you did not request.
• Failure to receive OTPs or delayed OTPs during banking or UPI transactions.
• Unexpected transaction alerts or multiple failed login attempts to your bank account.
• Calls from your mobile operator asking for verification details shortly before losing network connectivity.
• Friends or contacts report strange messages or requests sent from your WhatsApp or social media accounts.
• Receiving unsolicited calls or messages asking for your personal or banking details.

What Happens to Victims

The consequences of SIM swap fraud are severe. Indian victims often lose money directly from their linked bank accounts or UPI wallets like Google Pay, PhonePe, or Paytm. Unlike fraud on credit cards, where RBI mandates liability limits and chargebacks, UPI and mobile wallet money transfers usually cannot be reversed once confirmed. Victims suffer not only financial loss but also emotional distress, as their private communications and accounts get compromised.

Moreover, misuse of Aadhaar details combined with the SIM takeover makes identity theft easier, complicating recovery. Victims may face long delays from banks and telecom companies while dispute investigations proceed. The loss of trust in digital banking and a sense of vulnerability in everyday online transactions is a widespread impact across India.

What RBI and CERT-In Say

Both the RBI and CERT-In have warned consumers to be extra cautious about SIM swap and OTP theft scams. RBI guidelines urge banks and payment service providers to implement stronger multi-factor authentication beyond SMS OTPs. CERT-In advisories recommend users to:

• Avoid sharing personal data over phone or email unsolicited.
• Use app-based authenticators or biometric verification whenever possible.
• Immediately report suspicious SIM or banking activity.

For assistance, cybercrime victims in India can call the national helpline 1930. RBI also offers grievance redressal through their toll-free number 1800-115-567 for banking-related fraud. The Indian government’s I4C center collaborates closely with telecom providers to monitor and prevent SIM-related fraud waves.

How to Protect Yourself

1. Set a SIM lock PIN with your mobile operator: Ask your telecom to keep a secret PIN that must be provided before any SIM swap request is processed.

2. Limit personal data exposure on social media: Avoid sharing detailed DOB, phone numbers, or financial info publicly.

3. Use app-based OTP or biometrics: Shift from SMS OTPs to authenticator apps or fingerprint/face ID for banking and UPI apps.

4. Enable transaction limits and alerts: Set daily UPI transfer limits and activate instant SMS/e-mail alerts on every transaction.

5. Don’t share OTP, PIN, or password with anyone: No bank or official will ever ask you for this info via phone or SMS.

6. Regularly review mobile network status: If you suddenly lose mobile connectivity or cannot receive calls, immediately check with your service provider.

7. Register complaints quickly: At the first sign of trouble, call your bank, telecom operator, or the national cybercrime helpline (1930).

What to Do If You’ve Been Targeted

• Immediately inform your mobile operator: Request blocking your number temporarily or place a SIM block to stop further misuse.
• Freeze or block your bank accounts and UPI IDs: Contact your bank’s fraud helpline and disable online transactions.
• File a cybercrime complaint: Report the incident on the National Cybercrime Reporting Portal (cybercrime.gov.in).
• Call 1930 cybercrime helpline: Seek advice and official support to follow up on your complaint.
• Inform Aadhaar authorities: If Aadhaar misuse is involved, report it at UIDAI’s toll-free number 1947.
• Change passwords and secure accounts: Reset all online banking, e-wallet, social media, and email account passwords immediately.
• Keep documentation: Save all communications, SMS alerts, and complaint receipts for proof and legal use.

Frequently Asked Questions

Q: Can telecom operators transfer my number without my permission?
A: Legitimate telecom operators must verify your identity before swapping a SIM. However, fraudsters often bypass this by impersonation or insider help. Always request and use a PIN/passcode for SIM services to prevent unauthorized changes.

Q: Will banks refund money lost due to SIM swap fraud?
A: RBI guidelines require banks to investigate and resolve fraud claims quickly, but reimbursement depends on proving negligence or system failure. Victims must report incidents immediately and file FIRs to increase chances of refund.

Q: How can I tell if someone else has taken control of my SIM?
A: Loss of mobile network service without explanation, sudden inability to receive calls or OTPs, and unexpected transaction alerts or password reset messages are strong signs your SIM may have been swapped.

SIM swap fraud is a ‘silent’ menace growing in India’s digital age, but with awareness and swift action, you can protect yourself. Not sure about a message or call? Verify suspicious activity instantly only at BharatSecure.app — India’s trusted platform to fight digital fraud. Stay safe, stay vigilant!