Mobile Number Takeover in Deepfake KYC
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict: Suspicious | Risk Score: 10/10 | Severity: critical
How Mobile Number Takeover in Deepfake KYC Works
Overview: Scammers are increasingly combining SIM swap and mobile-number takeover tactics with deepfake-enabled KYC fraud. By hijacking a victim’s mobile number—often linked to Aadhaar—they divert OTPs and key communications, while simultaneously using AI-altered videos to pass eKYC checks. This lets them open or access bank accounts and take loans by impersonating the real account holder, making the scam devastating. How It Works: Fraudsters first obtain the victim’s telecom details through social engineering or data breach. They request a SIM swap or change of mobile number on Aadhaar or bank records. While the victim’s phone goes out of service or starts missing OTPs, scammers use deepfake KYC to finish onboarding or access accounts. Once operational, they drain funds, take loans, or sell verified accounts to third parties. India Angle: This tactic is especially dangerous in India, where Aadhaar linking to mobile and bank accounts is mandatory. Regions with high digital adoption (Gujarat, Maharashtra, Andhra Pradesh) see more such cases. Victims include both urban professionals who use multiple digital wallets, and rural users with only one registered phone. Real Examples: - An SMS says “Your mobile number has been updated as per KYC request,” but user did not make any request - Victim stops receiving OTPs and suddenly receives an alert about a new loan in their name - [NAME_REDACTED], “Your number was swapped on request yesterday.” Red Flags: 1. Stop receiving OTPs or important SMS without changing your phone 2. Phone network suddenly switches to ‘No Service’ unexpectedly 3. Get mobile-update alerts from bank or UIDAI you didn’t initiate 4. Receive messages about new loan/accounts opened without your knowledge Protective Measures: - Register for immediate SMS/email alerts for all bank changes - Never share SIM, Aadhaar, or OTP information, even to callers claiming to be from the bank - Contact your mobile provider and bank at the first sign of SIM block or strange account activity - Set up multi-factor authentication wherever possible If Victimised: - Immediately contact your telecom provider to restore your number - Alert your bank to freeze affected accounts - File a cybercrime complaint at 1930 and cybercrime.gov.in - Update UIDAI/adhaar with secure information after regaining control Related Scams: - OTP forwarding fraud - Phishing using mobile app clones - Account takeover via telecom social engineering
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Mobile Number Takeover in Deepfake KYC Target?
General public across India
Red Flags — How to Identify Mobile Number Takeover in Deepfake KYC
- Stop receiving OTPs or SMS unexpectedly
- Phone network suddenly goes offline
- Mobile number change SMS or alert you didn’t request
- Bank or Aadhaar updates about accounts you never opened
What To Do If You Encounter Mobile Number Takeover in Deepfake KYC
- Do not click any links or share personal information
- Block and report the sender immediately
- Report at cybercrime.gov.in or call 1930
- Inform your bank if financial details were shared
How to Report Mobile Number Takeover in Deepfake KYC in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is Mobile Number Takeover in Deepfake KYC?
- Overview: Scammers are increasingly combining SIM swap and mobile-number takeover tactics with deepfake-enabled KYC fraud. By hijacking a victim’s mobile number—often linked to Aadhaar—they divert OTPs and key communications, while simultaneously using AI-altered videos to pass eKYC checks. This lets them open or access bank accounts and take loans by impersonating the real account holder, making the scam devastating. How It Works: Fraudsters first obtain the victim’s telecom details through so
- How does Mobile Number Takeover in Deepfake KYC work?
- Overview: Scammers are increasingly combining SIM swap and mobile-number takeover tactics with deepfake-enabled KYC fraud. By hijacking a victim’s mobile number—often linked to Aadhaar—they divert OTPs and key communications, while simultaneously using AI-altered videos to pass eKYC checks. This lets them open or access bank accounts and take loans by impersonating the real account holder, making
- How to protect yourself from Mobile Number Takeover in Deepfake KYC?
- Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
- How to report Mobile Number Takeover in Deepfake KYC in India?
- Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.