Payroll KYC Phishing via SMS/WhatsApp

How Payroll KYC Phishing via SMS/WhatsApp Works

Overview: This scam capitalizes on the KYC (Know Your Customer) compliance drive in India. Attackers impersonate payroll or HR teams via SMS or WhatsApp, sending urgent messages about KYC updates to trick employees into sharing bank or Aadhaar details. The ultimate aim is to gain enough information to alter salary deposit accounts or commit further fraud. How It Works: 1. Employees receive a text or WhatsApp message, often mimicking official company communication, warning of KYC lapses. 2. The message includes a link to a fake payroll/KYC portal, or a request to share sensitive information by reply. 3. Victims submit Aadhaar, PAN, or bank details believing it’s for compliance. 4. Attackers use these details to either access online payroll applications or initiate account changes in salary databases. 5. Later, salary payments are found missing or misdirected. India Angle: - Fraudulent messages often claim connections to major Indian payroll providers, RBI KYC rules, or well-known HR platforms. - Major metros and Tier 2 cities are both targeted, with local language SMS content common. - Demands for Aadhaar and PAN details play on real compliance stress. Real Examples: - "Your KYC is pending with payroll. Update Aadhaar details now or salary may be withheld. Click link to verify immediately." - A WhatsApp message with an HR logo asks: “KYC update mandatory for payroll processing. Reply with PAN and account number." Red Flags: - SMS/WhatsApp messages urging urgent action on KYC for salary. - Links leading to non-company or unfamiliar websites. - Requests for Aadhaar, PAN, or account numbers via chat. - Threats that salary payment will be blocked. Protective Measures: - Never share sensitive details on SMS or WhatsApp, even if the sender appears legitimate. - Access payroll/KYC updates only through recognized official channels. - Clarify such requests with the real HR/payroll department before responding. - Enable multi-factor authentication where possible. If Victimised: - Contact your company’s HR/payroll head immediately. - Report the incident to 1930 and on cybercrime.gov.in. - Inform your bank to flag or freeze suspect changes. Related Scams: - SIM swap to gain access to payroll OTPs. - Aadhaar/PAN credential harvesting for tax refund scams.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Payroll KYC Phishing via SMS/WhatsApp Target?

General public across India

Red Flags — How to Identify Payroll KYC Phishing via SMS/WhatsApp

• SMS or WhatsApp requesting sensitive payroll KYC details
• Non-company/webmail links included
• Threat of salary blockage
• Requests for Aadhaar/PAN/account over chat

What To Do If You Encounter Payroll KYC Phishing via SMS/WhatsApp

1. Do not click any links or share personal information
2. Block and report the sender immediately
3. Report at cybercrime.gov.in or call 1930
4. Inform your bank if financial details were shared

How to Report Payroll KYC Phishing via SMS/WhatsApp in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Payroll KYC Phishing via SMS/WhatsApp?

Overview: This scam capitalizes on the KYC (Know Your Customer) compliance drive in India. Attackers impersonate payroll or HR teams via SMS or WhatsApp, sending urgent messages about KYC updates to trick employees into sharing bank or Aadhaar details. The ultimate aim is to gain enough information to alter salary deposit accounts or commit further fraud. How It Works: 1. Employees receive a text or WhatsApp message, often mimicking official company communication, warning of KYC lapses. 2. The

How does Payroll KYC Phishing via SMS/WhatsApp work?

Overview: This scam capitalizes on the KYC (Know Your Customer) compliance drive in India. Attackers impersonate payroll or HR teams via SMS or WhatsApp, sending urgent messages about KYC updates to trick employees into sharing bank or Aadhaar details. The ultimate aim is to gain enough information to alter salary deposit accounts or commit further fraud. How It Works: 1. Employees receive a text

How to protect yourself from Payroll KYC Phishing via SMS/WhatsApp?

Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared

How to report Payroll KYC Phishing via SMS/WhatsApp in India?

Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.