Insider-aided Duplicate SIM Scam

Verdict: Suspicious | Risk Score: 8/10 | Severity: high

Category: UPI, KYC, OTP

How Insider-aided Duplicate SIM Scam Works

Overview: This scam takes advantage of insiders or corrupt telecom agents within mobile service companies like Airtel and Jio. Using stolen or leaked customer data, the fraudster collaborates with an internal staff member to swiftly issue a duplicate SIM card. As more accounts are tied to mobile numbers for KYC and authentication, losing your number can expose your entire digital identity to theft and fraud. How It Works: 1. Scamsters acquire your KYC data from data breaches or social engineering. 2. They bribe or collude with a telecom agent to process a duplicate SIM request, sometimes skipping necessary biometric or OTP verification. 3. The telecom system quickly issues a new SIM, deactivating your original number. 4. All calls, SMS, and authentication codes now reach the fake SIM. 5. The scammer uses these to crack open your bank apps, wallets, UPI, investments, and more. India Angle: This tactic is often aimed at high-value postpaid users in metros like Mumbai, Chennai, Delhi, and professionals who rarely visit carrier stores. Airtel and Jio postpaid customers are at heightened risk; fraudsters may even pose as customer care to collect extra details. Real Examples: - A user in Bengaluru finds his mobile isn't working and discovers a duplicate SIM was issued in a different city using his ID. - An Airtel subscriber receives a mysterious call: “We offer you a free upgrade to Platinum plan; please confirm your address [ADDRESS_REDACTED].” Red Flags: 1. Unsolicited upgrade/plan offer calls from agents 2. Speedy SIM replacement approval without OTP or biometric check 3. Your SIM suddenly stops working, especially after giving details 4. No trace of your interaction on official carrier records Protective Measures: - Regularly check your telecom app (Airtel Thanks, MyJio) for any unexplained service requests. - Never share full KYC or Aadhaar details over phone to unknown callers. - Insist that any agent process be authorized via your official carrier app with OTP confirmation. - Lodge a formal complaint to TRAI if any suspicious interaction occurs. If Victimised: - Visit the nearest branded store immediately with photo ID to block fraudulent SIMs. - Notify your bank/UPI providers about potential compromise. - Contact 1930 helpline, cybercrime.gov.in, and inform your telecom operator. Related Scams: - Aadhaar card misuse fraud - SIM port-out scams

How This Scam Works — Detailed Explanation

The Insider-aided Duplicate SIM Scam begins with scammers acquiring customer KYC data through various means, such as data breaches or social engineering tactics. They may scour through social media platforms or use phishing tactics to gather personal information. Once they have a victim's details, they typically collaborate with an insider, sometimes a corrupt employee at a telecom company like Airtel or Jio. These insiders have the ability to swiftly authorize the issuance of duplicate SIM cards using the stolen data. Given the prevalence of UPI as a payment method tied to SIM cards, this offers an easy route for the scammers to capitalize on victims' unsuspecting trust.

To effectively execute the scam, the fraudsters often employ psychological tricks that leverage urgency and misinformation. They may impersonate customer care executives or use fake offers to engage the victim. They build a façade of legitimacy by creating a sense of urgency, convincing the victim that their SIM card requires replacement due to alleged network upgrades or security issues. This psychological manipulation, combined with the familiarity and trust people place in telecom services, leads many unsuspecting individuals to provide additional sensitive information, such as one-time passwords (OTPs) or Aadhaar numbers.

Once the duplicitous SIM card is issued, victims often face a rapid chain of consequences. They may find their phone suddenly losing service, receiving alerts that their mobile number has been registered for new accounts they did not create, or being locked out of their banking or UPI services entirely. For instance, there have been cases reported where individuals have lost access to their HDFC or SBI accounts, causing a domino effect of transaction failures and unauthorized transactions. Victims have even reported receiving notifications regarding UPI transfers they never initiated, leading to substantial financial losses totaling in crores across the nation.

The scale of impact from this scam is staggering. According to reports, victims in India recently lost over ₹200 crore due to such scams, prompting interventions from the Ministry of Home Affairs (MHA) and advisories from CERT-In. In response to the growing concern, the Reserve Bank of India (RBI) has also issued guidelines advising users to stay vigilant regarding any discrepancies in their SIM card services. This has become increasingly critical as mobile numbers are now the backbone of almost every digital transaction in the country, tied directly to UPI payments, Aadhaar verifications, and other digital identities.

To differentiate between genuine communication and potential scams, consumers should be aware of several red flags. If you receive unsolicited calls from customer care offering replacements or upgrades, especially if they're processed without your approval, view this with suspicion. If the service is denied without a valid reason, examine whether the interaction aligns with your account records. Remember, legitimate service interactions usually involve multiple confirmations and won't occur in haste. Always verify through your official app or customer helplines—never engage directly with suspicious callers.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Insider-aided Duplicate SIM Scam Target?

General public across India

Red Flags — How to Identify Insider-aided Duplicate SIM Scam

  • Unsolicited customer care or upgrade calls
  • SIM replacement processed too quickly
  • Denied service even with regular bills paid
  • Official records not matching with your interaction

What To Do If You Encounter Insider-aided Duplicate SIM Scam

  1. Contact your mobile service provider immediately if you suspect a SIM replacement has occurred without your consent.
  2. Report the incident to the cybercrime helpline by calling 1930 or visiting cybercrime.gov.in.
  3. Monitor your bank accounts and UPI transactions for any unauthorized operations.
  4. Notify your bank if you discover any unauthorized UPI or Aadhaar transactions immediately.
  5. Change your passwords for banking apps and online services to prevent further unauthorized access.
  6. Keep a record of all communications with your telecom provider and bank regarding the incident.

How to Report Insider-aided Duplicate SIM Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?
Immediately contact your bank's customer service and report the incident. For SBI, call 1800-11-1109 or for HDFC call 1800-202-6161.
How can I identify if my SIM has been duplicated?
Look for sudden service disruptions, unauthorized UPI transactions, or receive texts about account changes that you didn't initiate.
How do I report this type of scam in India?
You can report the scam by calling 1930, visiting cybercrime.gov.in, or notifying your bank about fraudulent transactions.
What steps can I take to recover money or protect my accounts after this scam?
Notify your bank and request to freeze your accounts if you notice suspicious activity, and follow the guidelines of the cyber helpline.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.