eSIM Activation Phishing Scam

ई-सिम एक्टिवेशन फिशिंग स्कैम

INDIA — By BharatSecure Threat Intelligence Team ·

Verdict: Dangerous | Risk Score: 9/10 | Severity: MEDIUM

Category: Phishing

How eSIM Activation Phishing Scam Works

  1. Step 1: Scammer calls or sends SMS/WhatsApp pretending to be telecom customer care (Airtel, Jio, Vi) claiming urgent eSIM activation or network upgrade needed
  2. Step 2: They send malicious eSIM activation link or ask victim to generate QR code using 32-digit e-ID through provider's official app
  3. Step 3: Victim clicks link or shares QR code, which instantly converts their physical SIM to eSIM on scammer's device
  4. Step 4: Victim's original SIM deactivates immediately, losing network signal while scammer gains control of the phone number
  5. Step 5: Scammer intercepts all OTPs, resets banking passwords, makes UPI transactions, withdraws FDs, or takes loans using victim's hijacked number

How This Scam Works — Detailed Explanation

The eSIM Activation Phishing Scam is a rising threat in India, targeting mobile users who have recently switched to or are interested in eSIM technology. Scammers pose as telecom representatives and contact victims through unsolicited phone calls or WhatsApp messages. They claim that there is an urgent need to activate the victim’s eSIM to avoid disconnection or network issues, often asserting that the SIM will be deactivated unless immediate action is taken. Using pressure tactics, they create a false sense of urgency that tricks many into cooperating without questioning the legitimacy of the call.

To proceed, scammers ask victims to click on suspicious links or scan QR codes, which appear to be related to eSIM activation. These links lead to fake websites designed to steal sensitive information such as Aadhaar details, mobile number verification codes (OTPs), or bank credentials linked to UPI and mobile banking apps. Sometimes, the scammer directly requests victims to share OTPs received on their phones, pretending it is part of the eSIM activation process. Once they obtain these details, fraudsters can misuse the mobile number for SIM swaps, unauthorized bank transactions, or WhatsApp account hijacking.

In many cases, victims discover the fraud too late after their mobile number has been cloned or their bank accounts drained. Since many essential services in India, including Aadhaar-based authentication, UPI payments, and mobile banking, rely heavily on mobile OTPs, losing control of the mobile number can lead to severe financial and identity theft problems. The scam is particularly dangerous because it exploits the growing popularity of eSIMs and the trust people place in official-looking communications from telecom providers.

Telecom operators never ask for OTPs, personal details, or QR code scans over a call or message. Despite government awareness campaigns, scammers continue to evolve tactics, often using local languages and familiar telecom terms to deceive victims. It is crucial for mobile users to remain vigilant, verify any suspicious communication through official channels, and report any suspected eSIM activation phishing attempts to help protect themselves and others from falling victim to telecom fraud.

Who Does eSIM Activation Phishing Scam Target?

Mobile phone users across India, especially those unfamiliar with eSIM technology and trusting of telecom provider communications

Red Flags — How to Identify eSIM Activation Phishing Scam

  • Unsolicited calls or messages about urgent eSIM activation
  • Requests to click suspicious links or share QR codes
  • Claims that SIM will be deactivated without immediate action
  • Asking for personal details or OTPs over phone
  • Pressure tactics creating false urgency about network upgrades

What To Do If You Encounter eSIM Activation Phishing Scam

  1. Verify any eSIM activation request by calling your telecom operator's official customer care number before taking any action.
  2. Do not click on suspicious links or scan QR codes received via unsolicited calls or messages.
  3. Never share OTPs, Aadhaar details, or personal information over the phone or WhatsApp, even if the caller claims to be from your service provider.
  4. Immediately report any suspected phishing calls or messages about eSIM activation to your mobile operator and BharatSecure.
  5. Block and ignore calls or messages creating undue urgency about SIM deactivation or network upgrades.

How to Report eSIM Activation Phishing Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is eSIM Activation Phishing Scam?
Dangerous: eSIM Activation Phishing Scam is a confirmed scam in India. Learn about eSIM activation phishing scams in India. Recognize red flags, protect your phone number, and report fraud. Stay safe from telecom scammers.
How does eSIM Activation Phishing Scam work?
Step 1: Scammer calls or sends SMS/WhatsApp pretending to be telecom customer care (Airtel, Jio, Vi) claiming urgent eSIM activation or network upgrade needed Step 2: They send malicious eSIM activation link or ask victim to generate QR code using 32-digit e-ID through provider's official app Step 3: Victim clicks link or shares QR code, which instantly converts their physical SIM to eSIM on scammer's device Step 4: Victim's original SIM deactivates immediately, losing network signal while scammer gains control of the phone number Step 5: Scammer intercepts all OTPs, resets banking passwords, makes UPI transactions, withdraws FDs, or takes loans using victim's hijacked number
How to protect yourself from eSIM Activation Phishing Scam?
Verify any eSIM activation request by calling your telecom operator's official customer care number before taking any action. Do not click on suspicious links or scan QR codes received via unsolicited calls or messages. Never share OTPs, Aadhaar details, or personal information over the phone or WhatsApp, even if the caller claims to be from your service provider. Immediately report any suspected phishing calls or messages about eSIM activation to your mobile operator and BharatSecure.
How to report eSIM Activation Phishing Scam in India?
Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.