OTP Phishing with Fake KYC on OLX
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict: Suspicious | Risk Score: 7/10 | Severity: high
How OTP Phishing with Fake KYC on OLX Works
Overview: This scam preys on Indian sellers who are not familiar with how UPI or digital payments work. Fraudsters posing as buyers or platform representatives convince victims to share their OTP—claiming it’s required for KYC, verification, or payment. The scam is dangerous, as the OTP can be used to access accounts or authorize high-value debits, not just UPI but any linked bank service. How It Works: 1. The scammer approaches the seller with an offer to buy their goods, sometimes adding pressure by claiming the deal is urgent. 2. The fraudster asks for the victim's mobile number and claims a one-time password will be sent for 'receiving payment', 'upgrading seller status', or 'KYC completion'. 3. The OTP, if shared, allows the scammer to reset your app PIN, access your UPI, or withdraw funds. 4. Victims soon see unexplained debits or find accounts compromised. India Angle: This technique is especially effective in India, where digital literacy is uneven, and people may not realize that an OTP is never needed just to receive money. All regions are targets, with a focus on first-time sellers or less tech-savvy users. Real Examples: • "Aapko abhi ek OTP aayega, payment initiate karne ke liye bata dijiye." • "OLX se calling, aapka account verify karne OTP chahiye." Red Flags: 1. Any request for an OTP from someone claiming to be a buyer or platform staff. 2. Seller is told OTP is mandatory to receive money. 3. Use of official-looking WhatsApp profile pictures or OLX logos to build trust. 4. Pressure to urgently share OTP. Protective Measures: • Never share your OTP—even with those claiming to be OLX staff or buyers. • Real buyers need only your UPI ID, not OTPs. • Report any suspicious WhatsApp chats or calls to the classifieds platform. If Victimised: 1. Call 1930 immediately. 2. Block your UPI and phone services and file a complaint at cybercrime.gov.in. Related Scams: • KYC Update Phishing Scams • Tech Support Account Access Frauds
How This Scam Works — Detailed Explanation
In India, the popularity of platforms like OLX has made it a common site for buying and selling goods, but this popularity also attracts fraudsters. Scammers often search through OLX listings to find sellers offering attractive products at competitive prices. They sometimes create fake profiles or use legitimate-looking accounts with stolen images to approach sellers. These scammers initiate contact via OLX's chat feature or through WhatsApp, presenting themselves as serious buyers. Because many sellers are eager to make a sale, they may let their guard down and trust these unknown individuals.
Once contact is established, the scammer employs various psychological tactics to manipulate the seller into believing that a legitimate transaction is underway. They could express urgency by stating that the buyer is in a hurry to complete the purchase or by exacerbating the fear of losing the potential buyer to someone else if they don't act quickly. The fraudster often touts a supposed need for KYC (Know Your Customer) verification or insists that the seller must confirm their identity to facilitate the payment. This creates an environment where the seller, not fully aware of the risks, is coerced into sharing sensitive information like their OTP (One-Time Password) under the guise of needing it for confirmation or verification purposes.
After the OTP is shared, the scam takes a dangerous turn. The scammer can immediately use the OTP to access the seller's bank account or UPI-enabled wallet, authorizing transactions that could result in losses worth thousands or even lakhs of rupees. Reports from CERT-In indicate that crores have been lost to such scams this year alone, with victims often left helpless as their accounts are drained. For instance, a victim might receive a call from the scammer claiming they need to verify a payment of ₹50,000 for a washing machine. Once they share the OTP, the funds could vanish instantly, transferred to an account controlled by the scammer.
The impact of such scams on the Indian economy and individuals is staggering. According to the Ministry of Home Affairs (MHA), cybercrime complaints have surged, reaching over ₹2,800 crore lost in UPI-related frauds in the past year. These figures highlight the growing threat that OTP phishing poses not just to individual victims but also to the integrity of digital payment systems that are pivotal to the Indian economy. The Reserve Bank of India (RBI) has issued advisories warning the public about such scams, emphasizing the importance of safeguarding one’s OTP and never sharing it with anyone.
To distinguish between legitimate communications and scam attempts, it's essential to look out for red flags. Genuine representatives will not ask for your OTP through phone calls or chats. Additionally, reputable platforms like OLX will have distinct procedures for payment that do not involve sharing OTPs as a form of verification. Always remember: if someone insists that you need to provide sensitive information urgently, especially related to payments or accounts, it’s likely a scam. Report suspicious activity immediately to authorities for further action.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does OTP Phishing with Fake KYC on OLX Target?
General public across India
Red Flags — How to Identify OTP Phishing with Fake KYC on OLX
- Request for your OTP or SMS verification code
- Claim it's needed for 'receiving payment'
- Pressure to share OTP urgently
- Chat or call uses official brand/logo
What To Do If You Encounter OTP Phishing with Fake KYC on OLX
- Report any OTP sharing incidents to the cybercrime helpline at 1930 or visit cybercrime.gov.in.
- Immediately contact your bank's customer care and inform them about the incident to block any unauthorized transactions.
- Change your banking passwords and enable two-factor authentication for added security.
- Monitor your bank and UPI transaction history regularly for any unauthorized transactions.
- Educate yourself about common scam tactics to recognize them in the future.
- Consider reporting the scammer's account information to OLX and relevant law enforcement agencies.
How to Report OTP Phishing with Fake KYC on OLX in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately report the incident to your bank's customer service and the cybercrime helpline at 1930. It's crucial to monitor your accounts for any unauthorized transactions.
- How can I identify an OTP phishing scam?
- Look for requests for your OTP in tandem with a claim of needing verification or urgency in communication. Legitimate companies will never ask for your OTP.
- How do I report this type of scam in India?
- You can report this incident by calling the national cybercrime helpline at 1930, visiting cybercrime.gov.in, or directly contacting your bank's fraud reporting service.
- What steps should I take to recover money after this scam?
- Contact your bank immediately to inform them of the fraudulent transaction. They can assist with blocking your account and may initiate a chargeback if possible.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.