Fake E-commerce Refund OTP Scam
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict Summary
Fake E-commerce Refund OTP Scam shows strong scam indicators common in fraud targeting Indian users. Do not share OTPs, passwords, or payments — verify the source independently.
Risk score: 7/10 · Severity: High · Verdict: Suspicious
Scam Intelligence: Fake E-commerce Refund OTP Scam
Proprietary signals from BharatSecure's scam-tracking database.
| Last reported | Apr 20, 2026 |
How Fake E-commerce Refund OTP Scam Works
In this scam, shoppers receive fake messages or calls from fraudsters pretending to be representatives of popular online marketplaces. They inform victims about a refund or overpayment and ask for an OTP to process the transaction. Sharing this OTP allows the criminals to withdraw money from the victim’s linked bank accounts or UPI wallets. This scam targets frequent online buyers unfamiliar with the process that refunds do not require OTP sharing. The financial impact can be significant, and victims often discover the fraud only after money is lost. Always verify such claims by directly checking your order and refund status on official apps or websites.
How This Scam Works — Detailed Explanation
In recent months, the fake e-commerce refund OTP scam has gained traction among online shoppers in India. Scammers often collect data on potential victims through platforms like WhatsApp and social media, identifying frequent online buyers who are likely to be unaware of the latest scam tactics. They utilize spoofing techniques to make calls or send messages that appear to be from well-known e-commerce giants like Amazon, Flipkart, or Snapdeal. By impersonating customer service representatives, they buy time to build trust and create a false sense of urgency around a supposed refund or overpayment that the victim is eligible for. This initial approach is critical to establishing credibility before inducing panic or excitement that leads to the victim being easily manipulated into sharing sensitive information like an OTP.
Scammers cleverly exploit psychological principles, employing tactics designed to instill fear or urgency. Victims receive messages stating that they must act quickly to secure their refund; otherwise, it will be canceled. They may mention fictitious support tickets, overpayments, or limited-time offers to create a sense of looming loss. These messages often contain alarming information about the victim’s supposed past transactions that are either fabricated or manipulated from information available publicly or through phishing databases. When victims receive a call, scammers utilize friendly, persuasive language, mirroring the tonality of legitimate customer service lines, making it even harder for the victim to question the authenticity of the communication. In many cases, when the victim shows hesitation, the scammer might threaten them by saying that their account will be frozen if they do not comply, pushing them to share their OTP.
When victims fall for this trap, they unwittingly share their OTP as instructed. For instance, if a victim is shopping on a platform like Amazon and receives a call stating they are due for a refund of ₹2,000, they may be asked to provide a one-time password to process the transaction. Without realizing it, once they share this OTP, the swindlers gain access to their linked bank accounts or UPI wallets. Typically, this leads to rapid money transfer scenarios, with amounts disappearing within minutes or even seconds. Victims have reported losses not only to their regular bank accounts but also through amounts linked to their UPI payment systems using platforms like PhonePe or Paytm. In a very public case, a customer using Paytm reported losing ₹50,000 after sharing their OTP during such a scam.
The financial impact of this scam is staggering, demonstrating the severity of the issue across India. Reports reveal that victims collectively lost approximately ₹3,200 crore in various online frauds in 2022. The Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI) have warned citizens multiple times about increasing scams related to UPI. Additionally, the Computer Emergency Response Team of India (CERT-In) has issued advisories regarding these scams, highlighting the need for public awareness. Such incidents disturb not only the banking ecosystem but also the trust that many online shoppers have in e-commerce, especially regular buyers comfortable with the process.
To differentiate a fake communication from legitimate sources, consumers should be vigilant about unexpected messages or calls claiming refunds. Legitimate companies do not ask for OTPs for refunds or any transaction verification. In most cases, if an actual refund was initiated, it will appear in the account or app's transaction history when logged into the official website or app. Poorly worded messages or calls from unknown contacts are significant red flags. Before sharing any personal or banking details, victims should always verify the authenticity of the claim by contacting the customer service number provided on the official website or app. If the refund request seems suspicious, it’s safer to ignore it and report it through proper helplines or websites such as cybercrime.gov.in or by dialling 1930.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Fake E-commerce Refund OTP Scam Target?
General public across India
Red Flags — How to Identify Fake E-commerce Refund OTP Scam
- Messages or calls offering unexpected refunds
- Requests to share OTPs for refund processing
- Poorly worded communication from unknown contacts
- No refund notification in official app or website
What To Do If You Encounter Fake E-commerce Refund OTP Scam
- Report the scam immediately to the cybercrime helpline by calling 1930.
- Notify your bank or UPI provider about the OTP sharing incident, using helplines like SBI 1800-11-1109 or HDFC 1800-202-6161.
- Change your UPI PIN or bank account passwords immediately to safeguard your accounts.
- Check all recent transactions in your bank account and UPI apps for any unauthorized activity.
- File a formal complaint on cybercrime.gov.in for further assistance and investigation.
- Educate friends and family about the scam to prevent them from becoming victims.
How to Report Fake E-commerce Refund OTP Scam in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately contact your bank's helpline and report the incident. Use numbers like SBI 1800-11-1109 or HDFC 1800-202-6161. Also, reach out to the cybercrime helpline at 1930.
- How can I identify the fake e-commerce refund OTP scam?
- Look for unexpected messages about refunds, requests to share OTPs, or communication in broken English or poor grammar — signs the message may not be legitimate.
- How can I report this type of scam in India?
- You can report the scam through the cybercrime helpline at 1930 or visit cybercrime.gov.in. Additionally, contact your bank's fraud reporting department.
- What steps can I take to recover money or protect my accounts after this scam?
- Change your bank details and UPI PIN immediately, monitor your accounts for unauthorized transactions, and report the incident to your bank and local authorities for further assistance.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.