Verified by BharatSecure.app Sources: Reserve Bank of India, Press Information Bureau, Ministry of Home Affairs, All India Radio (Prasar Bharati)

Bank KYC Update Vishing With Remote Access App Installation

INDIA — By BharatSecure Threat Intelligence Team ·

Dangerous Risk: 10/10 Severity: Critical BharatSecure Threat Intelligence

Category: phishing, tech_support, banking_fraud

Evidence & AI transparency

Automated assessment in progress. A pilot evidence decision exists in shadow mode and is not yet presented as a verification result.

This page includes AI-assisted analysis. AI assistance does not mean a person reviewed or approved this page.

Sources: 3 · Last automated validation: Not recorded

Evidence-backed facts: statements mapped to cited evidence by the automated validator. BharatSecure analysis: interpretation and safety guidance; it is not an official finding.

Automated analysis can contain errors. Confirm important information and decisions with official authorities.

Report an error or suggest a correction

Verdict Summary

Bank KYC Update Vishing With Remote Access App Installation is a confirmed scam. Do not engage — block the sender and report to 1930 (National Cyber Crime Helpline) immediately.

Risk score: 10/10 · Severity: Critical · Verdict: Dangerous

Scam Intelligence: Bank KYC Update Vishing With Remote Access App Installation

Proprietary signals from BharatSecure's scam-tracking database.

Last reportedSep 14, 2026
First documentedSep 14, 2026

How Bank KYC Update Vishing With Remote Access App Installation Works

  1. Call the victim posing as staff from HDFC, ICICI, SBI, or another bank.
  2. Use a pretext such as KYC update, account block, or suspicious activity alert.
  3. Ask for card numbers, CVV, expiry date, NetBanking credentials, or OTPs.
  4. Tell the victim to install a remote-access app and share the code.
  5. Use live device access to read OTPs, view screens, and complete fraudulent transfers.

How This Scam Works — Detailed Explanation

Scammers often use data harvested from social media platforms, online directories, or even the dark web to find potential victims in India for their vishing scams, particularly focused on bank KYC updates. They initiate contact through phone calls, impersonating bank representatives from prominent institutions like HDFC, ICICI, or SBI. The criminals tend to target individuals who have previously engaged in banking activities or those known to have a significant balance in their accounts. With a perceived urgency, they approach victims claiming that immediate action is necessary due to KYC requirements or suspicious activities detected on their account.

The tactics employed by these scammers are both psychological and technological. They often create a sense of panic or urgency, claiming that the victim's account will be frozen or blocked unless immediate action is taken. This emotional manipulation is designed to bypass rational thinking, pushing victims to respond quickly without taking time to verify the caller's legitimacy. They may use familiar bank terminology and procedure, presenting themselves as legitimate bank personnel, which can further deceive unsuspecting victims. By presenting themselves as authority figures, they make convincing social engineering calls, increasing their chances of success.

Victims typically follow a series of steps, often leading to significant financial loss. Initially, the victim may receive a call stating that an urgent KYC update is needed, after which the fraudster will ask for sensitive information like OTPs, account numbers, or CVV details. Once this information is provided, they instruct the victim to download a remote-access application like AnyDesk or TeamViewer, under the guise of needing remote assistance to complete the KYC process. After installing the app, the victim unknowingly gives the scammer full control over their device, enabling them to transfer funds directly from the victim’s bank account into their own.

The impact of these scams in India is grave. A significant report from the Ministry of Home Affairs noted that cyber fraud reached record amounts, with losses exceeding ₹18,000 crore in 2022 alone, primarily from scams involving financial transactions. According to the Reserve Bank of India (RBI) and CERT-In, phishing and vishing scams are among the most reported forms of cybercrime, resulting in thousands of complaints yet inadequate recovery rates for victims. The psychological toll and financial burden this places on individuals can lead to long-lasting impacts, from anxiety about banking security to severe financial distress.

To differentiate between genuine communications and potential scams, there are certain indicators to recognize. Legitimate banks will never request sensitive information such as OTPs, passwords, or card details over the phone. Additionally, they do not instruct clients to install remote-access applications. Recipients of such calls should remain skeptical, especially when the caller cites urgency. Always independently verify claims by contacting your bank through official helplines like SBI’s 1800-11-1109 or HDFC’s 1800-202-6161 before taking any action.

Who Does Bank KYC Update Vishing With Remote Access App Installation Target?

Bank customers across India, especially those reachable by phone and less familiar with remote-access tools

Red Flags — How to Identify Bank KYC Update Vishing With Remote Access App Installation

  • Call claims urgent KYC or account verification needs
  • Request for OTP, PIN, password, or card CVV
  • Instruction to install AnyDesk, TeamViewer, or similar app
  • Caller asks for a screen-sharing or access code
  • Threats of account freeze or immediate blocking

What To Do If You Encounter Bank KYC Update Vishing With Remote Access App Installation

  1. Report the scam immediately by calling the cybercrime helpline 1930 or visiting cybercrime.gov.in.
  2. Do not share OTPs, passwords, or any sensitive information over the phone.
  3. Contact your bank's official customer service to verify any claims made during the call.
  4. If you've already installed a remote access app, uninstall it immediately and change your banking passwords.
  5. Monitor your bank statements for any unauthorized transactions and report them to your bank.
  6. Educate friends and family about this scam to prevent them from becoming victims.

How to Report Bank KYC Update Vishing With Remote Access App Installation in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a phishing scam?
Immediately contact your bank and inform them of the situation. You can reach SBI at 1800-11-1109 or HDFC at 1800-202-6161. Also, consider visiting cybercrime.gov.in for further assistance.
How can I identify this specific scam?
This scam often begins with a call claiming urgent need for KYC updates, asking for sensitive information or instructing you to install a remote access app.
How to report this type of scam in India?
You should report it by calling the cybercrime helpline at 1930 or visiting cybercrime.gov.in. Additionally, inform your bank immediately.
How to recover money or protect accounts after this scam?
Contact your bank to report any unauthorized transactions. They may assist in blocking the account and initiating wrongful transaction recovery. Ensure to follow up with a report to cybercrime authorities.
🛡️

How This Scam Works — BharatSecure AI

Spreading fast

A plain-language breakdown based on 500 real reported scams of this type.

How they reach you Reported primary channels are phone calls, WhatsApp, video calls, email, and social media DMs, often using spoofed numbers or AI-cloned voices/deepfake video to impersonate trusted figures such as fam
How they gain your trust Trust is established by convincingly impersonating a known or authoritative person using AI voice cloning or deepfake video, often reinforced by scraped personal data, official-sounding language, or s
How they take your money Observed rails include UPI transfers, QR code payments, bank wire transfers to mule accounts, cryptocurrency, and gift cards; corporate variants route
Who they target Documented targets include finance and accounts staff in businesses (BEC/CEO fraud), elderly individuals, job seekers on LinkedIn/WhatsApp, and emotionally vulnerable relatives subjected to distress/k
How they manipulate you
  • authority bias (impersonation of officials/executives)
  • urgency and panic (fabricated emergencies, time pressure)
  • affinity/familiarity trust (cloned voices of loved ones)
Warning signs
  • Urgent, high-pressure requests for money or OTPs framed around emergencies or confidentiality
  • Unexpected voice or video calls from executives, officials, or relatives requesting transfers
  • Requests to move funds to new/unknown accounts, crypto wallets, or via QR/UPI/gift cards
  • Threats of arrest, legal action, or account suspension demanding immediate verification
  • Deepfake-quality calls impersonating trusted figures combined with instructions not to verify independently

Status: Verified by BharatSecure.app

This type of scam is documented by the credible published sources listed below. That does not independently verify every detail on this page.

Official guidance on this type of scam

These sources document this kind of scam in general. They are not evidence about the specific details, names or numbers on this page.

References

Page-specific source research is pending.

Full guide: Fake KYC update messages and OTP/UPI PIN theft - what this type of scam is, warning signs and where to report it.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.