Phishing Messages Impersonating PM-Kisan

INDIA — By BharatSecure Threat Intelligence Team ·

Verdict: Suspicious | Risk Score: 7/10 | Severity: high

Category: WhatsApp, Phishing, OTP

How Phishing Messages Impersonating PM-Kisan Works

Overview: This widespread scam involves fraudsters sending fake messages by SMS, WhatsApp, or social media, pretending to be from the official PM-Kisan scheme. These messages typically promise extra subsidy payments, special benefits, or demand urgent verification. The scam targets anyone familiar with government subsidies—primarily farmers, but also rural and urban citizens looking for financial support. Such scams are hazardous because they collect sensitive personal and financial details, risking major fraud. How It Works: The scam begins with a message or call that appears to be from PM-Kisan authorities. It urges the recipient to click a link for extra installments, fill in personal details, or verify their Aadhaar/bank information. The link may lead to a fake PM-Kisan portal that looks almost identical to the real one. If the user enters details, their bank account or Aadhaar information is instantly stolen. Sometimes, the scam message prompts victims to provide OTPs, which are then used to access bank accounts directly. India Angle: PM-Kisan phishing messages have been reported across the nation. WhatsApp and SMS are the most common mediums, exploiting the popularity of smartphones and digital transactions, especially in Hindi, Marathi, and local languages. Both rural and urban populations are at risk, as the messages are circulated widely on social media and even local WhatsApp groups. Real Examples: WhatsApp forward: “Dear Farmer, your next PM-Kisan installment is ready! Click to claim: http://pm-kisan-newbenefit.xyz.” SMS: “Update your Aadhaar for PM-Kisan benefits. Share your OTP at 859XXXXXXX immediately.” Red Flags: - Messages with unfamiliar links or random URLs - Offers of extra/urgent PM-Kisan benefits - Requests for Aadhaar, OTP, or banking details - Spelling errors or strange phrasing in messages Protective Measures: Ignore and delete any suspicious message about PM-Kisan. Never click unverified links. Only trust updates on the official PM-Kisan website (https://pmkisan.gov.in). Never share personal information or OTPs in response to calls or messages. If Victimised: Call 1930 or report online at cybercrime.gov.in. Notify your bank to block compromised accounts and watch for unauthorized activity. Inform local authorities about the scam. Related Scams: Fake Utility Bill Payment Messages, Phishing Targeting Pension Schemes, Bogus Government Grant Phishing.

How This Scam Works — Detailed Explanation

Scammers target potential victims through various platforms like WhatsApp, SMS, and even social media. They often use publicly available information or databases to identify farmers or individuals who might benefit from government schemes such as PM-Kisan. These fraudsters create fake identities that appear legitimate, often mimicking the tone and language of government officials. The proliferation of smartphones and internet access in rural and urban areas makes these platforms ripe for exploitation. Many farmers are particularly vulnerable, as the PM-Kisan scheme is widely known and trusted, making it easy for scammers to manipulate unsuspecting individuals.

To lure victims, these scammers employ several psychological tactics. They create messages that promise immediate financial benefits or subsidies, claiming to offer extra funds under the PM-Kisan scheme. The urgency of their communication often plays on the fears of the recipients; they may imply that failure to respond quickly could result in losing out on benefits or facing penalties. Messages typically include phrases like “urgent verification needed” or “unlock your extra subsidy,” which pressure recipients to act without fully understanding the situation. This psychological manipulation, combined with the fear of missing out on legitimate government assistance, makes individuals more likely to fall for these scams.

After a victim interacts with these messages, the process typically unfolds step-by-step. Initially, the victim receives a message containing a link that leads to a fake website resembling the official PM-Kisan portal. Upon clicking the link, victims are prompted to enter sensitive details such as their Aadhaar number, bank account information, and UPI IDs. Once the fraudsters collect this data, they can easily siphon funds from the victim's bank account or make unauthorized transactions using UPI payment systems. For example, a farmer might receive a message claiming they are eligible for an additional ₹2,000 under PM-Kisan, only to later find their account drained of several thousand rupees due to their unwittingly sharing sensitive information. Numerous individuals across India have reported losing significant sums, with some cases involving losses of ₹5 crore or more due to such phishing attacks.

The financial impact of these scams has been garnering attention from the authorities. Recently, the Ministry of Home Affairs (MHA) reported an increase in phishing scams related to government schemes, advising victims to stay vigilant. As per statistics from CERT-In, over ₹1,000 crore is estimated to have been lost in 2022 alone due to various types of cyber scams in India. Furthermore, the Reserve Bank of India (RBI) has mandated stringent guidelines for real-time payment systems like UPI to enhance user safety. This increased scrutiny reflects the severe risks citizens face, not just in terms of finances but also in terms of identity theft and the unauthorized use of personal data.

Recognizing this scam versus legitimate communications requires careful scrutiny of all messages. Official PM-Kisan communications will never ask for sensitive details like OTPs or Aadhaar numbers via WhatsApp or SMS. They also tend to have proper grammar and are free from any spelling errors or unusual language. It's vital for recipients to look for signs like unknown links, promises of extra benefits, or any urgent demands for immediate action. Official channels maintain transparency, and any message that raises eyebrows should prompt the recipient to verify directly through established government channels before proceeding. Always cross-check details through the official PM-Kisan website or contact helplines for confirmation.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Phishing Messages Impersonating PM-Kisan Target?

General public across India

Red Flags — How to Identify Phishing Messages Impersonating PM-Kisan

  • Unknown links in messages
  • Promises of extra PM-Kisan benefits
  • Urgent requests for OTPs or Aadhaar
  • Spelling mistakes and odd language

What To Do If You Encounter Phishing Messages Impersonating PM-Kisan

  1. Report the incident immediately by calling the cybercrime helpline at 1930 or visiting cybercrime.gov.in.
  2. Verify the legitimacy of any message by checking official government resources or contacting the PM-Kisan office.
  3. Do not click on any unknown links or respond to messages asking for personal information.
  4. Change your passwords and enable two-factor authentication for your banking and UPI transactions if you shared any sensitive information.
  5. Contact your bank's helpline immediately if you suspect any unauthorized transactions (SBI 1800-11-1109, HDFC 1800-202-6161).
  6. Educate friends and family, especially those in rural areas, about these scams to prevent them from falling victim.

How to Report Phishing Messages Impersonating PM-Kisan in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a WhatsApp scam?
Immediately change your banking passwords and notify your bank's helpline. You can also reach out to the cybercrime helpline at 1930 for assistance.
How can I identify phishing messages impersonating PM-Kisan?
Look for unknown links, misspellings, urgent requests for personal information, or offers of extra benefits that sound too good to be true.
How do I report this type of scam in India?
You can report it to the cybercrime helpline at 1930, visit cybercrime.gov.in, or contact your bank for immediate assistance.
What should I do to recover money or protect my account after this scam?
Contact your bank's helpline to report the fraud and follow their instructions. Enable two-factor authentication and change your passwords to enhance security.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.