OTP Phishing through Fake Re-KYC Calls

Verdict: Suspicious | Risk Score: 7/10 | Severity: high

Category: UPI, WhatsApp, KYC

How OTP Phishing through Fake Re-KYC Calls Works

Overview: OTP Phishing via Fake Re-KYC Calls is a fast-growing scam across India that preys on fear and urgency. Scammers pretend to represent your bank, mobile operator, or a government agency, pressuring you to disclose one-time passwords (OTPs) and Aadhaar details to avoid urgent consequences like account freezes. Pensioners and the elderly are common targets, but anyone with a digital banking relationship is at risk. These scams can quickly lead to full account takeovers and unauthorized fund transfers. How It Works: The scam starts with a call or message from someone posing as a bank or government official. The caller warns that your account is about to be frozen or your pension stopped due to incomplete KYC or pending Aadhaar linkage. They may even spoof genuine-looking numbers or claim to call from the RBI, UIDAI, or the Prime Minister’s Office. The scammer insists you confirm personal details and share the OTP you receive, supposedly to "verify." In reality, the OTP authorizes a fraudulent transaction or lets them link your number and take over your account. India Angle: These scams have spread nationwide but are especially prevalent in Hindi-speaking states, major metros, and tier-2 cities. They target elderly pension recipients, government employees, and anyone with bank accounts linked to Aadhaar and UPI. WhatsApp and SMS links are often used to widen their reach, and many regional languages are employed to seem trustworthy. Real Examples: Mr. Anand, a retired government worker from Patna, received a call warning his pension would be blocked unless he did immediate "re-KYC." Asked to share his Aadhaar number and an OTP received by SMS, he soon lost over Rs. 80,000 via a series of UPI transfers. Sunita, a homemaker in Rajasthan, clicked a suspicious SMS link for e-KYC and ended up sharing her OTP, enabling a new SIM registration in her name. Red Flags: - High-pressure calls to act immediately or face severe consequences (like account freeze). - Requests for OTP or Aadhaar information from unknown numbers. - Unofficial-looking SMS links claiming to be for KYC updates. - Spoofed caller IDs using names of authorities or senior officials. Protective Measures: - Never share OTPs, Aadhaar, or banking details over calls, SMS, or emails. - Confirm any KYC request with your bank or telecom provider by visiting the nearest branch or using official apps. - Block unfamiliar numbers and report suspicious calls. - Register your phone with the Do Not Disturb (DND) registry to reduce spam. If Victimised: - Call 1930 immediately and file a report on cybercrime.gov.in. - Notify your bank to secure your account and freeze suspicious transactions. - File a complaint with local police and preserve the call/SMS logs as evidence. Related Scams: - SIM swap fraud via fake KYC. - UPI payment request scams.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does OTP Phishing through Fake Re-KYC Calls Target?

General public across India

Red Flags — How to Identify OTP Phishing through Fake Re-KYC Calls

  • Urgent calls/texts threatening account freeze unless you share OTP
  • Requests for Aadhaar or OTP by phone or SMS
  • Spoofed or Govt-like caller IDs
  • Suspicious links for "quick KYC" or "e-KYC"

What To Do If You Encounter OTP Phishing through Fake Re-KYC Calls

  1. Do not click any links or share personal information
  2. Block and report the sender immediately
  3. Report at cybercrime.gov.in or call 1930
  4. Inform your bank if financial details were shared

How to Report OTP Phishing through Fake Re-KYC Calls in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is OTP Phishing through Fake Re-KYC Calls?
Overview: OTP Phishing via Fake Re-KYC Calls is a fast-growing scam across India that preys on fear and urgency. Scammers pretend to represent your bank, mobile operator, or a government agency, pressuring you to disclose one-time passwords (OTPs) and Aadhaar details to avoid urgent consequences like account freezes. Pensioners and the elderly are common targets, but anyone with a digital banking relationship is at risk. These scams can quickly lead to full account takeovers and unauthorized fun
How does OTP Phishing through Fake Re-KYC Calls work?
Overview: OTP Phishing via Fake Re-KYC Calls is a fast-growing scam across India that preys on fear and urgency. Scammers pretend to represent your bank, mobile operator, or a government agency, pressuring you to disclose one-time passwords (OTPs) and Aadhaar details to avoid urgent consequences like account freezes. Pensioners and the elderly are common targets, but anyone with a digital banking
How to protect yourself from OTP Phishing through Fake Re-KYC Calls?
Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
How to report OTP Phishing through Fake Re-KYC Calls in India?
Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.