Salary Account Payroll Phishing Scam

Verdict: Suspicious | Risk Score: 7/10 | Severity: high

Category: Phishing

How Salary Account Payroll Phishing Scam Works

Overview: Salary Account Payroll Phishing is an emerging scam in India’s corporate sector, aimed at diverting employee salary payouts into scammer-controlled accounts. It targets HR and payroll teams, mainly in larger firms or IT/BPOs, by masquerading as legitimate employee requests for bank account changes. The scam is dangerous because it leads to losses for both employees and employers, and can erode workplace trust. How It Works: 1. Criminals research employees via LinkedIn or company websites to identify targets and gather personal details. 2. They send HR folks emails or messages that convincingly mimic actual employees, providing new account info for ‘salary credit due to account closure’ or ‘bank merger’. 3. If HR responds to the apparent employee’s address [ADDRESS_REDACTED]erification. 4. Salary is then credited to a scammer’s account rather than the actual employee’s. 5. The fraud is frequently only discovered when the employee fails to receive their expected salary. India Angle: Prevalent in metro cities such as Bengaluru, Hyderabad, and Delhi, especially in companies with large, distributed payrolls. This scam exploits the shift to remote HR operations post-pandemic. Many attackers leverage compromised Gmail or Outlook accounts to raise authenticity. Real Examples: - A Bengaluru HR officer receives: ‘Hello, I have opened a new Axis Bank account due to old account closure. Please update for next salary cycle. Details attached. Regards, Rohan S.’ - In Noida, HR was tricked by an email, “My salary account is temporarily frozen—kindly use the attached HDFC details for January transfer.” Red Flags: - Requests to update salary bank details via email, not official HR portal - Slightly modified employee email address[ADDRESS_REDACTED] - No phone or in-person confirmation - Attachments or links suspiciously asking to ‘verify’ HR credentials Protective Measures: - Require in-person or telephonic confirmation before any salary account changes - Mandate two-level approvals for payroll changes - Train HR teams to detect phishing and identity red flags - Regularly review payroll change logs for anomalies If Victimised: - Notify your HR/payroll and freeze further payouts - Contact your bank to reverse or block suspicious transfers - Report the scam to 1930 and cybercrime.gov.in - Inform internal IT/security for corporate awareness

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Salary Account Payroll Phishing Scam Target?

General public across India

Red Flags — How to Identify Salary Account Payroll Phishing Scam

  • Salary update requests via

What To Do If You Encounter Salary Account Payroll Phishing Scam

  1. Do not click any links or share personal information
  2. Block and report the sender immediately
  3. Report at cybercrime.gov.in or call 1930
  4. Inform your bank if financial details were shared

How to Report Salary Account Payroll Phishing Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Salary Account Payroll Phishing Scam?
Overview: Salary Account Payroll Phishing is an emerging scam in India’s corporate sector, aimed at diverting employee salary payouts into scammer-controlled accounts. It targets HR and payroll teams, mainly in larger firms or IT/BPOs, by masquerading as legitimate employee requests for bank account changes. The scam is dangerous because it leads to losses for both employees and employers, and can erode workplace trust. How It Works: 1. Criminals research employees via LinkedIn or company websi
How does Salary Account Payroll Phishing Scam work?
Overview: Salary Account Payroll Phishing is an emerging scam in India’s corporate sector, aimed at diverting employee salary payouts into scammer-controlled accounts. It targets HR and payroll teams, mainly in larger firms or IT/BPOs, by masquerading as legitimate employee requests for bank account changes. The scam is dangerous because it leads to losses for both employees and employers, and can
How to protect yourself from Salary Account Payroll Phishing Scam?
Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
How to report Salary Account Payroll Phishing Scam in India?
Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.