KYC Expiry Scam via SMS and UPI

Verdict: Suspicious | Risk Score: 9/10 | Severity: critical

Category: UPI, WhatsApp, KYC

How KYC Expiry Scam via SMS and UPI Works

Overview: Criminals are impersonating banks, wallet companies, and telecom providers, sending alarming messages saying your KYC (Know Your Customer) is expiring soon. These scams target anyone with a bank account or popular wallets/UPI apps, such as Paytm, PhonePe, or Google Pay. The immediate demand to 'update KYC' tricks people into providing banking credentials or transferring money. If ignored, victims are threatened with service suspension or account blocking. How It Works: Scammers send a text, WhatsApp, or even a call claiming, “Your KYC expires at midnight. Update now to avoid account freeze.” A link in the message leads to a fake website or an APK download, requesting your details (Aadhaar, PAN, OTPs), or asks you to complete a small payment verification via UPI. Any info entered is harvested for fraud, with many victims losing access to their banking/wallet accounts or seeing illicit money transfers. India Angle: The scam runs rampant nationwide, especially in states with heavy digital banking adoption like Maharashtra, Gujarat, Uttar Pradesh, and all metro cities. Older citizens, smartphone newcomers, and not-so-tech-savvy users are primary targets, but anyone can fall prey if off guard. Real Examples: An SMS: "Dear customer, your SBI KYC expires today. Update online: [scam link]. Ignore this and your account will be locked." Or, "Pay ₹10 on this UPI link for KYC: [fraudulent UPI ID]." Red Flags: - Unsolicited urgency on KYC updates - Links to unknown websites or APK files - Requests for entire Aadhaar, PAN, OTPs, or small UPI payments - Threats of blocking or locking accounts for non-compliance Protective Measures: Never click on KYC update links from unknown senders—visit your bank or wallet's official app or website. Do not share OTPs, account, or Aadhaar/PAN info with unknown callers or links. If unsure, call customer care using numbers from the official website. If Victimised: Notify your bank/wallet immediately and block affected accounts. Change all passwords. File a report at 1930 and cybercrime.gov.in. Track your credit report for suspicious activity. Related Scams: Aadhaar update phishing, UPI fraud via fake customer support, and mobile SIM swap are closely linked.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does KYC Expiry Scam via SMS and UPI Target?

General public across India

Red Flags — How to Identify KYC Expiry Scam via SMS and UPI

  • KYC expiry SMS with update links
  • APK download prompts for KYC
  • Demands for full Aadhaar/PAN and OTPs
  • Account block threats if ignored

What To Do If You Encounter KYC Expiry Scam via SMS and UPI

  1. Do not click any links or share personal information
  2. Block and report the sender immediately
  3. Report at cybercrime.gov.in or call 1930
  4. Inform your bank if financial details were shared

How to Report KYC Expiry Scam via SMS and UPI in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is KYC Expiry Scam via SMS and UPI?
Overview: Criminals are impersonating banks, wallet companies, and telecom providers, sending alarming messages saying your KYC (Know Your Customer) is expiring soon. These scams target anyone with a bank account or popular wallets/UPI apps, such as Paytm, PhonePe, or Google Pay. The immediate demand to 'update KYC' tricks people into providing banking credentials or transferring money. If ignored, victims are threatened with service suspension or account blocking. How It Works: Scammers send a
How does KYC Expiry Scam via SMS and UPI work?
Overview: Criminals are impersonating banks, wallet companies, and telecom providers, sending alarming messages saying your KYC (Know Your Customer) is expiring soon. These scams target anyone with a bank account or popular wallets/UPI apps, such as Paytm, PhonePe, or Google Pay. The immediate demand to 'update KYC' tricks people into providing banking credentials or transferring money. If ignored
How to protect yourself from KYC Expiry Scam via SMS and UPI?
Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
How to report KYC Expiry Scam via SMS and UPI in India?
Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.