Aadhaar-Linked Mobile Swap Deepfake Fraud

Verdict: Suspicious | Risk Score: 9/10 | Severity: critical

Category: UPI, KYC, OTP

How Aadhaar-Linked Mobile Swap Deepfake Fraud Works

Overview: Aadhaar-Linked Mobile Swap Deepfake Fraud is a fast-spreading scam exploiting Aadhaar-based KYC systems and mobile banking, with criminals using deepfake technology to change the registered mobile number tied to a victim’s Aadhaar without proper authorization. This enables control over OTPs, banking alerts, and digital wallets, exposing victims to unauthorized loans, new account openings, and UPI theft. How It Works: Scammers gather your Aadhaar and related details, then craft a convincing deepfake video to remotely satisfy the biometric KYC checks required for changing the mobile number in Aadhaar records. Once the number is altered, all future OTPs and crucial SMS notifications get directed to the scammer’s device. Using this access, fraudsters open new bank or UPI accounts, take out loans, or even drain your digital wallet funds without your awareness, as all alerts go to them. India Angle: Jamshedpur, Ahmedabad, and parts of Maharashtra have reported rising cases. Victims typically include urban professionals and elderly citizens less familiar with deepfake risks. The scam especially targets users of Aadhaar-linked bank accounts and digital payment apps like Paytm or PhonePe. Real Examples: - After getting a ‘number changed’ SMS, a Mumbai senior citizen finds his bank accounts inaccessible and several new loans taken in his name. - A Hyderabad homemaker is told her mobile number change was "approved remotely" via new KYC rules, yet she never made such a request. Red Flags: - SMS or email confirming Aadhaar-linked mobile number update that you didn’t initiate - Abrupt loss of access to banking or payment apps - Sudden stop in all OTP-related notifications - Unexpected new loan or UPI account alerts Protective Measures: - Routinely check your Aadhaar authentication records at UIDAI - Set up alerts for every KYC or mobile number update - Use strong Aadhaar account security PIN - Regularly verify your linked phone number with your bank If Victimised: - Call 1930, notify UIDAI and your banks - File a cybercrime FIR and freeze affected accounts - Follow up until mobile number is reverted Related Scams: - SIM swap attacks - UPI registration fraud - EMI loan fraud via stolen KYC

How This Scam Works — Detailed Explanation

Scammers behind the Aadhaar-Linked Mobile Swap Deepfake Fraud often leverage popular platforms like WhatsApp to find and approach their victims. They may create fake profiles or use social engineering tactics to establish a rapport with individuals who might trust them. Through these platforms, they may ask for personal information, particularly Aadhaar-related details, offering app-based conveniences or government assistance as bait. Their initial approach can seem harmless, often posing questions about UPI payments or seeking help with Aadhaar registrations, leading victims to unknowingly disclose sensitive information.

Once the scammers have your Aadhaar and associated details, they exploit psychological tricks to manipulate their targets. They may conduct an elaborate charade, claiming the need for verification due to a system upgrade or fraud detection measure. By creating a sense of urgency or fear, they push victims into hastily sharing additional sensitive information. These manipulative tactics can also include promises of monetary benefits or high returns for minimal personal involvement, placing victims in a bind to comply without caution.

The aftermath for victims can be distressing and swift. Once the scammers have executed a mobile number swap linked to the victim's Aadhaar, they gain control over the victim's bank account and UPI transactions. For example, a victim may suddenly find that they no longer receive OTPs from their bank even as unauthorized loans are processed in their name. Reports from across India indicate that victims have seen sudden deductions from their bank accounts, with some losing upwards of ₹5 crore collectively. Scammers then use the victim's information to create new UPI ID’s to drain their funds or manipulate existing accounts, building upon the confusion until complete chaos breaks loose.

The impact of this fraud is staggering, with experts estimating that over ₹2,000 crore has been lost due to similar Aadhaar-linked scams across India in recent years. Given the Government of India's initiative to digitize the banking system, the number of scams exploiting UPI, Aadhaar, and digital wallets have surged. Reports from agencies like the Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI) underline the urgency to safeguard these identification systems. Cybersecurity agencies like CERT-In continue to issue advisories on remaining vigilant against this escalation of fraud, emphasizing the seriousness of protecting one's personal information.

Spotting this scam involves understanding the normal communication protocols from your bank and comparing them against red flags. Legitimate communication from service providers never suddenly requires you to change your registered mobile number without prior consent or intimation. If you receive an SMS regarding a number change you did not request, it's crucial to contact your bank immediately. Sudden loss of access to your banking app or failure to receive OTPs should warrant immediate vigilance. Always verify any changes concerning your music accounts through trusted channels, and remember that legitimate transactions will always come with prior alerts and confirmations.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Aadhaar-Linked Mobile Swap Deepfake Fraud Target?

General public across India

Red Flags — How to Identify Aadhaar-Linked Mobile Swap Deepfake Fraud

  • Aadhaar-linked number change SMS you didn’t request
  • Sudden loss of banking app access
  • No longer receiving OTPs or balance alerts
  • Unusual loans or UPI transfers in your name

What To Do If You Encounter Aadhaar-Linked Mobile Swap Deepfake Fraud

  1. Report the scam immediately to the cybercrime helpline at 1930 or visit cybercrime.gov.in.
  2. Contact your bank's customer service (SBI: 1800-11-1109, HDFC: 1800-202-6161) to report unauthorized activities.
  3. Freeze or lock your Aadhaar-linked mobile number to prevent further misuse.
  4. Change your online banking passwords and enable two-factor authentication for added security.
  5. Monitor your bank statements and UPI transactions closely for any unauthorized activities.
  6. Educate your family and friends about this scam to prevent them from falling victim.

How to Report Aadhaar-Linked Mobile Swap Deepfake Fraud in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?
Immediately report this to your bank using their customer service helpline and change your online banking passwords. Consider filing a complaint at cybercrime.gov.in.
How can I identify the Aadhaar-Linked Mobile Swap Deepfake Fraud?
Be wary of unsolicited messages about mobile number change or OTP requests that you did not initiate, and look for sudden access issues to your banking app.
How do I report this type of scam in India?
You can report the scam through the cybercrime helpline at 1930 or visit cybercrime.gov.in to file a complaint. Also, inform your bank about the fraud.
How can I recover my money or protect my accounts after this scam?
Contact your bank immediately to report the unauthorized transactions. They may freeze your account. You also need to file a report with cybercrime authorities for further investigation.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.