Call-Spoofed Customer Care MNP Fraud
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict Summary
Call-Spoofed Customer Care MNP Fraud shows strong scam indicators common in fraud targeting Indian users. Do not share OTPs, passwords, or payments — verify the source independently.
Risk score: 9/10 · Severity: Critical · Verdict: Suspicious
Scam Intelligence: Call-Spoofed Customer Care MNP Fraud
Proprietary signals from BharatSecure's scam-tracking database.
| Last reported | Apr 24, 2026 |
How Call-Spoofed Customer Care MNP Fraud Works
Overview: This advanced scam combines phone call spoofing and phishing to trick Indians into leaking sensitive information during fake mobile number porting attempts. Targeted mostly at smartphone users with digital wallets, the scam is especially dangerous because it can bypass multiple security checks and lead to rapid theft from UPI and banking accounts. How It Works: 1. Scammer calls the victim, imitating telecom customer care, sometimes using technology to spoof official numbers. 2. The victim simultaneously receives a fake SMS, apparently from their telecom, about an active or pending port. 3. The scammer directs the victim to "confirm" porting with a PIN or biometric/OTP details during the call. 4. This information is instantly used in a port-out request executed at a physical SIM card retailer or through online channels. 5. Once ported, the scammer takes full control of the victim's mobile number, intercepting all SMS including one-time passwords for bank or UPI logins. India Angle: Spoofed customer care calls have higher success rates in urban areas with heavy phone number dependence—Delhi, Pune, Bengaluru, and growing in Tier-2 cities. Criminals target working professionals, students, and business owners, often referencing local retail shops. Real Examples: - Caller: "Hello madam, we are calling from Jio. There's an active port-out request for your number. Please give your port PIN to cancel immediately." - SMS: "Vi Customer: Your MNP is being processed. Share PIN on call with Vi executive." Red Flags: - Calls from numbers spoofing known telecom helplines, but with subtle differences. - Fake urgency and discomfort if you question their identity. - Request for live PIN or OTP sharing over the phone. - Reluctance to let you call back on an official toll-free line. Protective Measures: - Hang up and dial your telecom operator’s verified helpline (official app or bill). - Never give your port PIN, OTP, or biometric details on live calls. - Use TRAI's portal to lock your number for porting if you are not intending to switch providers. - Block and report any suspicious numbers to Truecaller and local authorities. If Victimised: - Immediately report to 1930 or visit cybercrime.gov.in. - Notify your financial institutions to freeze accounts temporarily. - Request telecom assistance to revert SIM control and block unauthorized requests. - Inform TRAI on 1909 about the impersonation case. Related Scams: - Missed Call Bank Phishing - SIM Swap with Document Forgery - Fake Bank Customer Care Scams
How This Scam Works — Detailed Explanation
Scammers often set their sights on unsuspecting victims through various avenues, primarily by leveraging social media and online forums to find individuals who are likely to be vulnerable. They may access personal data shared publicly on platforms like Facebook, Instagram, and Twitter to target smartphone users who possess digital wallets and are active UPI users. Once they identify potential victims, they execute a detailed scheme, calling from spoofed numbers that mimic legitimate telecom customer care lines. This tactic creates an illusion of trust and urgency, prompting the victim to lower their guard and comply with requests for sensitive information, such as PINs or OTPs.
In this elaborate fraud, the scammers employ psychological tactics to manipulate their victims. They often start by calling and claiming there is an issue with the victim's mobile number, suggesting that it's necessary to port the number for security reasons. To further establish credibility, they may refer to details unique to the victim’s account that they have gathered through social engineering or data breaches. This tactic plays heavily on fear and confusion, as victims are often led to believe they are protecting their finances by complying with the request. Additionally, if the victim questions the legitimacy of the call, scammers may escalate the situation by becoming aggressive or frustrated to intimidate the victim into compliance.
Once the victim provides the required information, the scam unfolds rapidly. Victims might receive simultaneous SMS alerts indicating suspicious activity on their account — but by this time, it is already too late. The information provided to the scammers can lead to immediate siphoning of funds from UPI-linked accounts or direct banking accounts. Real cases have emerged where victims reported losses of ₹10 lakh or more in a single incident. For example, a victim from Bangalore shared that their Aadhaar-linked bank account was emptied within hours after they divulged the OTP during a fake call. Their frustration grew as they discovered their complaint was difficult to address with the bank, resulting in unexpected losses and emotional distress.
The impact of such scams in India has been staggering. According to recent reports from CERT-In, cybercriminals have orchestrated fraudulent activities resulting in losses totaling over ₹250 crore in the last fiscal year alone. This alarming growth in digital fraud cases has drawn the attention of authorities such as the Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI), which have issued guidelines to strengthen the security around digital payments and customer awareness. As a result, victims are often left feeling vulnerable and betrayed, with many still navigating the complicated complaints process to retrieve their lost funds.
Spotting a call-spoofed customer care scam is critical for safeguarding yourself from potential loss. The first indicator of a scam is an insistence on disclosing urgent PIN or OTP — legitimate companies will never ask for this information over the phone. Additionally, if you receive a suspicious SMS about porting activity simultaneously while on a call with customer care, it is a major red flag. Genuine customer service calls should allow you to verify any claims independently. If at any point the caller becomes agitated or insists that you cannot check back with another source, that is further evidence of deceit. Always remain cautious and verify the authenticity of such communications proactively.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Call-Spoofed Customer Care MNP Fraud Target?
General public across India
Red Flags — How to Identify Call-Spoofed Customer Care MNP Fraud
- Customer care calls demanding urgent PIN or OTP sharing
- Simultaneous SMS about suspicious port activity
- Callers become agitated if you question their legitimacy
- Refusal to let you independently verify the request
What To Do If You Encounter Call-Spoofed Customer Care MNP Fraud
- Report the incident immediately by calling the cybercrime helpline at 1930 or visiting cybercrime.gov.in.
- Contact your bank's customer service (e.g., SBI at 1800-11-1109, HDFC at 1800-202-6161) to freeze your accounts temporarily.
- Monitor your bank statements and UPI transactions for any unnoticed activities.
- Change your UPI PIN and passwords for digital wallets to enhance security.
- Notify your mobile service provider about the suspicious call for further investigation.
- Stay engaged with community awareness programs regarding cybersecurity threats and scams.
How to Report Call-Spoofed Customer Care MNP Fraud in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately contact your bank using their helpline (SBI at 1800-11-1109 or HDFC at 1800-202-6161) to report the situation and follow their instructions.
- How can I identify a call-spoofed customer care scam?
- Be wary of calls demanding urgent PIN or OTP sharing, especially if you receive simultaneous texts about suspicious activity.
- How do I report this type of scam in India?
- You can report it through the cybercrime helpline at 1930 or online at cybercrime.gov.in. Ensure that you also inform your bank about the scam.
- How can I recover my money or protect my accounts after this scam?
- Contact your bank immediately to freeze your accounts and file for any unauthorized transactions. Monitor your finances closely for further signs of fraud.
How This Scam Works — BharatSecure AI
Spreading fastA plain-language breakdown based on 100 real reported scams of this type.
| How they reach you | Observed primary contact occurs via unsolicited phone calls, WhatsApp/SMS messages, and social media/dating platforms, where fraudsters impersonate bank officials, customer support, government agents, |
| How they gain your trust | Trust is reportedly established through impersonation of authority (banks, RBI, PM-Kisan, army officers) or emotional bonding (love-bombing, family/friend impersonation), often reinforced by AI deepfa |
| How they take your money | UPI is the dominant rail across all records, primarily via disguised 'collect/request money' notifications tricking victims into entering their PIN, d |
| Who they target | Documented targets span the general population but concentrate on the elderly and digitally inexperienced (often via caregiver dependency), urban professionals, students, homemakers, small business ow |
- authority bias (impersonating banks/government/officials)
- urgency and scarcity (account frozen, limited-time offer, emergency)
- trust/reciprocity exploitation (familiar voices, love-bombing, small initial payouts)
- Receiving a UPI 'collect/request money' notification and being asked to enter your PIN to 'receive' funds (PIN is never needed to receive money)
- Unsolicited calls/messages claiming account freeze, KYC expiry, or suspicious transaction, pressuring you to share OTP, UPI PIN, or click a link
- Requests to install remote-access/screen-sharing apps (AnyDesk, TeamViewer) for 'support' or 'refund' assistance
- Mismatched or misleading recipient names/VPAs (e.g., 'Verified Merchant', 'Bank Refund Dept') or slightly altered UPI IDs
- Pressure via emotional urgency, deepfake voice/video of familiar people, forged payment screenshots, or too-good-to-be-true offers (free recharge, prizes, grants, loans, high-return investments)
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.