Expired Bank KYC Update Scam

बैंक केवाईसी अपडेट घोटाला

INDIA — By BharatSecure Threat Intelligence Team ·

Verdict: Dangerous | Risk Score: 9/10 | Severity: Critical

Category: UPI/Bank/KYC

How Expired Bank KYC Update Scam Works

  1. Sending SMS or calling the victim claiming KYC has expired.
  2. Threatening immediate account suspension.
  3. Sending a phishing link or asking the victim to download a remote access app.
  4. Draining the bank account once access is gained.

How This Scam Works — Detailed Explanation

The Expired Bank KYC Update Scam is a rising threat targeting bank customers across India, exploiting their fear of losing access to their accounts. Scammers begin by sending urgent SMS messages from personal or random numbers, falsely claiming that the victim's bank KYC (Know Your Customer) is expired and requires immediate updating. These messages often include shortened URLs that take victims to convincing fake bank login pages designed to steal credentials. Since many Indian users perform banking tasks via UPI apps or mobile banking platforms, the scam cleverly mimics trusted Indian bank interfaces, making it difficult to detect the fraud.

Once the victim clicks the fake link, they are often asked to enter sensitive information such as UPI PIN, Aadhaar details, or bank login credentials. In some cases, scammers escalate the attack by calling victims, posing as bank officials insisting on urgent KYC update. These callers use threats such as freezing or closing the bank account if the update is not done immediately. They may request victims to install remote access apps like AnyDesk or TeamViewer under the pretext of verifying details, but in reality, this gives scammers full control over the victim’s phone or computer.

With remote access, scammers can intercept OTPs sent by banks, initiate UPI transactions, add themselves or money mules as beneficiaries, and siphon off funds directly from the victim's account. Since many Indian customers rely on OTPs and mobile banking for financial transactions, the scam exploits this dependency to steal money quickly. Victims usually realize the fraud only after their money is lost, as scammers swiftly block notifications or confuse victims with further fake calls.

This scam is particularly dangerous because it preys on Indian customers’ trust in SMS alerts and the urgency around Aadhaar and KYC compliance. Banks in India never send KYC update links via SMS or ask customers to share OTPs or install remote access apps. Educating users to spot fake messages and calls is the key to protecting their hard-earned savings from such sophisticated scams.

Visual Intelligence: Fake Template Detection

BharatSecure's AI has identified this as a fake template detection used in scams targeting Indian users.

Who Does Expired Bank KYC Update Scam Target?

Bank account holders across India.

Red Flags — How to Identify Expired Bank KYC Update Scam

  • Urgency and threats of account closure
  • Links sent via SMS from personal mobile numbers
  • Requests for remote access apps like AnyDesk or TeamViewer

What To Do If You Encounter Expired Bank KYC Update Scam

  1. Ignore and delete any SMS claiming urgent KYC update that contains links or is from an unknown number
  2. Call your bank’s official customer care number directly to verify any message or call about KYC or account status
  3. Never click on SMS links or share OTPs, UPI PINs, Aadhaar details, or passwords with anyone
  4. Do not install remote access or screen sharing apps like AnyDesk or TeamViewer at anyone’s request without independent verification
  5. Report the scam incident immediately to your bank and the Cybercrime cell in your city

How to Report Expired Bank KYC Update Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Expired Bank KYC Update Scam?
Dangerous: Expired Bank KYC Update Scam. Banks never ask for KYC updates via SMS links. Learn to spot fake bank KYC calls and protect your savings.
How does Expired Bank KYC Update Scam work?
Sending SMS or calling the victim claiming KYC has expired. Threatening immediate account suspension. Sending a phishing link or asking the victim to download a remote access app. Draining the bank account once access is gained.
How to protect yourself from Expired Bank KYC Update Scam?
Ignore and delete any SMS claiming urgent KYC update that contains links or is from an unknown number Call your bank’s official customer care number directly to verify any message or call about KYC or account status Never click on SMS links or share OTPs, UPI PINs, Aadhaar details, or passwords with anyone Do not install remote access or screen sharing apps like AnyDesk or TeamViewer at anyone’s request without independent verification
How to report Expired Bank KYC Update Scam in India?
Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.