Call-Merging OTP Theft Banking Scam

How Call-Merging OTP Theft Banking Scam Works

Overview: The call-merging OTP theft scam is a cunning fraud pattern uniquely adapted to India's mobile-centric banking landscape. Scammers target ordinary bank customers — especially those with active UPI apps and phone-linked accounts. The scam is particularly dangerous because it manipulates official banking systems, making fraudulent transactions appear authorized and often leaving victims without any recourse or refund possibilities. How It Works: The scam begins with a friendly phone call, often from someone pretending to be a mutual acquaintance, a relative, or a well-intentioned helper. The fraudster convinces the victim to merge the call with another number, under some believable pretext — such as needing to verify something with a 'bank official' or pass along information to a 'friend.' Unbeknownst to the victim, the second number connects to a real bank IVR (interactive voice response) system, which prompts for OTP verification. The scammer creates urgency, manipulating the call so that the victim enters the OTP during the merged call. This input is captured by the legitimate bank system, enabling the scammer to complete unauthorized transactions. The victim may not even realize money has been stolen until after the fact. Banks, seeing a valid OTP entry from the customer’s phone, often deny liability. India Angle: This technique is especially prevalent in cities where UPI and digital banking are widespread, including Mumbai, Delhi, Bengaluru, and Hyderabad. Fraudsters use WhatsApp and normal mobile calls, exploiting India’s high trust in voice communication and the growing number of mobile-first bank users. Anyone with a digital banking account can be a target, but older adults and less tech-savvy users face particularly high risk. Real Examples: - "Namaste, I am Ravi, your cousin’s friend. I need your help with a quick verification—can you merge my call with the bank and enter the OTP?" - "Sir, I am from your bank’s technical team. Please merge calls to update your account security—just enter your OTP when IVR asks." Red Flags: - Pressure to merge calls or confer with unknown numbers. - Being asked for OTPs outside of regular banking processes. - Requests to act quickly or in secrecy. - Callers representing themselves as both a friend and a bank official. - Unfamiliar numbers claiming urgency regarding your bank account. Protective Measures: Never merge calls unless you are absolutely sure of all participants. Banks never ask you to join calls with others or merge calls for verification. Never share or enter OTPs during calls, unless you personally initiated contact with your bank’s official helpline. Enable instant app transaction alerts, and always verify the caller’s identity by independently calling your bank if you receive unusual requests. If Victimised: Immediately call 1930 and file a cybercrime complaint at cybercrime.gov.in. Inform your bank and ask for a transaction freeze. Report the incident to RBI’s ombudsman through your branch or online. Related Scams: - Social engineering scams asking to merge WhatsApp/Google Meet calls. - Delayed payment frauds impersonating relatives or officials.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Call-Merging OTP Theft Banking Scam Target?

General public across India

Red Flags — How to Identify Call-Merging OTP Theft Banking Scam

• Asked to merge a call with an unknown number
• Pressured to input an OTP during a call
• Caller claims to be both a friend and a bank contact
• Urgent tone, demands secrecy
• Instructions to enter OTPs into a phone IVR you didn’t call

What To Do If You Encounter Call-Merging OTP Theft Banking Scam

1. Do not click any links or share personal information
2. Block and report the sender immediately
3. Report at cybercrime.gov.in or call 1930
4. Inform your bank if financial details were shared

How to Report Call-Merging OTP Theft Banking Scam in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Call-Merging OTP Theft Banking Scam?

Overview: The call-merging OTP theft scam is a cunning fraud pattern uniquely adapted to India's mobile-centric banking landscape. Scammers target ordinary bank customers — especially those with active UPI apps and phone-linked accounts. The scam is particularly dangerous because it manipulates official banking systems, making fraudulent transactions appear authorized and often leaving victims without any recourse or refund possibilities. How It Works: The scam begins with a friendly phone call

How does Call-Merging OTP Theft Banking Scam work?

Overview: The call-merging OTP theft scam is a cunning fraud pattern uniquely adapted to India's mobile-centric banking landscape. Scammers target ordinary bank customers — especially those with active UPI apps and phone-linked accounts. The scam is particularly dangerous because it manipulates official banking systems, making fraudulent transactions appear authorized and often leaving victims wit

How to protect yourself from Call-Merging OTP Theft Banking Scam?

Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared

How to report Call-Merging OTP Theft Banking Scam in India?

Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.