Telecom Insider-Assisted SIM Duplication

INDIA — By BharatSecure Threat Intelligence Team ·

Suspicious Risk: 9/10 Severity: Critical BharatSecure Threat Intelligence

Category: UPI, WhatsApp, KYC

Verdict Summary

Telecom Insider-Assisted SIM Duplication shows strong scam indicators common in fraud targeting Indian users. Do not share OTPs, passwords, or payments — verify the source independently.

Risk score: 9/10 · Severity: Critical · Verdict: Suspicious

Scam Intelligence: Telecom Insider-Assisted SIM Duplication

Proprietary signals from BharatSecure's scam-tracking database.

Top affected regionsMaharashtra, India, urban, small_business
Last reportedMay 06, 2026

How Telecom Insider-Assisted SIM Duplication Works

Overview: Telecom Insider-Assisted SIM Duplication is a sophisticated scam where corrupt telecom employees secretly bypass security protocols to provide criminals with duplicate SIM cards. This allows fraudsters to take control of your mobile number, intercept confidential messages, and access or wipe out your bank balances via UPI or net banking. This scam is very dangerous because it often happens without the victim’s knowledge, and the attackers can act very quickly after taking over your number. How It Works: The attack starts when your personal details are harvested—often from data breaches, phishing sites, or job scams. Scammers, sometimes with inside help from telecom staff (at local or third-party outlets), use forged or stolen identification to request a duplicate SIM for your number. The rogue employee is bribed or blackmailed into issuing the new SIM without proper checks. Once activated, your original SIM loses signal. The criminal now has access to your calls and SMS, including OTPs to reset UPI, bank, or wallet accounts, and can also try additional frauds like refund or customer care scams. India Angle: These scams have spiked in dense cities—Pune and Mumbai are notable—and are often part of wider UPI fraud rings. Young professionals, elderly people unfamiliar with telecom protocols, and small business owners are prime targets—most use their registered numbers for fast digital payments. WhatsApp or SMS may be used to probe for additional information or set up the scam. Real Examples: A small businesswoman stops receiving OTPs on her number but notices nothing unusual. The next day, multiple small withdrawals drain her UPI account. Or, a telecom outlet in Mumbai is raided after staff are discovered issuing over 30 duplicate SIMs with forged documents to unknown agents. Red Flags: Watch for your SIM being deactivated without request, prolonged loss of network (beyond the normal 24-hour window after legitimate SIM replacement), bank alerts for unknown logins, and telecom staff acting informally or avoiding ID verification. Protective Measures: Enable instant fraud alerts with your bank and configure account notifications for every transaction. Contact your mobile operator at the very first sign of unexplained network loss. Switch to biometric or in-app authentication rather than SMS-based logins. Always use official telecom channels and ask for written acknowledgment for any SIM-related process. If Victimised: Report immediately to the cybercrime helpline (1930) and the online portal (cybercrime.gov.in). Inform your bank, mobile provider, and local police to block accounts and investigate staff misconduct. Retain any suspicious SMS or documents as evidence. Related Scams: Other variants include refund scams (posing as banks to steal more info), phishing attacks providing the data for SIM duplication, and fake KYC call scams.

How This Scam Works — Detailed Explanation

Telecom Insider-Assisted SIM Duplication is a nefarious scam that primarily targets unsuspecting victims through a combination of insider collusion and technological manipulation. Scammers often find victims through social media platforms, messaging applications like WhatsApp, or during casual interactions online. They exploit personal information from public profiles or data breaches, gaining initial trust before setting their malicious plan in motion. Telecom insiders, sometimes corrupt employees, are instrumental to their strategy, as they bypass standard security checks to issue duplicate SIM cards upon request. This creates a seamless avenue for criminals to hijack mobile numbers, often with little to no verification, putting innocent victims at severe financial risk.

Once they target an individual, scammers employ various psychological tactics to manipulate emotions and sense of urgency. Victims may receive communication that appears official, such as urgent alerts about their mobile service or requests for personal verification. They may also leverage fear, claiming a recent security breach that requires immediate action to rectify. By creating a scenario that compels the victim to act quickly, they minimize the chances of the victim verifying the legitimacy of the communication. This creates the perfect storm for insider-assisted fraud, where the scammer can use the insider access to create duplicate SIM cards legally, making the victim believe they are receiving a legitimate service.

After gaining control over a mobile number, the fraudsters initiate a systematic take-over process. Victims might first notice that their SIM card has been deactivated without any prior request. Following this change, they may experience outages in network connectivity, leading to confusion and panic. For instance, in many reported cases, individuals have found unauthorized log-ins or transactions from their UPI accounts, such as payments made to unfamiliar vendors or transfers initiated without their consent. One reported case in Mumbai highlighted that a victim lost over ₹20 lakh after a telecom employee helped scammers duplicate a SIM card while the victim was unaware of what was happening.

The alarming impact of this scam has been a substantial financial loss across the nation. The Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI) have flagged such scams as critical threats to financial security. According to recent reports, the total loss due to SIM card-related frauds in 2022 alone was estimated to be around ₹1,200 crore—a staggering amount that highlights the severity of this issue. CERT-In has also issued advisories to strengthen awareness about the vulnerabilities in the telecom infrastructure that scammers are exploiting, and banks like SBI and HDFC have begun enhancing their systems to detect and prevent these types of scams rapidly.

To differentiate between genuine communications and potential scams, it is crucial for individuals to be vigilant. When receiving any messages about service changes, such as deactivation or verification requests, always double-check via the official customer care numbers of your telecom provider. Look out for unexpected deactivation notices, especially if you haven’t initiated it yourself. Legitimate communications from your telecom service provider typically include clear contact details for confirmation, while requests for sensitive information should raise immediate suspicion. Always verify any suspicious communications directly with your bank and follow up concerning account access and transactions, as prompt action may lower risks considerably.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Telecom Insider-Assisted SIM Duplication Target?

General public across India

Red Flags — How to Identify Telecom Insider-Assisted SIM Duplication

  • SIM deactivated without your request
  • No mobile network or service for extended periods
  • Unknown logins or transactions from your bank/UPI accounts
  • Telecom staff bypassing formal ID procedures
  • Multiple fake IDs used at telecom outlets

What To Do If You Encounter Telecom Insider-Assisted SIM Duplication

  1. Report the incident immediately at cybercrime.gov.in or call the cybercrime helpline 1930.
  2. Notify your bank about unauthorized transactions and request them to freeze your account.
  3. Contact your telecom provider and request to investigate potential SIM duplication.
  4. Change all your online passwords, especially for banking and UPI services.
  5. Enable two-factor authentication on your banking apps and any critical accounts.
  6. Monitor your bank statements and UPI transactions regularly for any anomalies.

How to Report Telecom Insider-Assisted SIM Duplication in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I suspect my SIM card has been duplicated?
Immediately report the issue to your telecom provider and call the cybercrime helpline at 1930. Also, inform your bank about potential unauthorized transactions.
How can I tell if I am a victim of SIM duplication?
Watch for unexpected deactivation of your SIM, loss of network connectivity, and unauthorized transactions in your bank accounts.
How can I report SIM duplication scams in India?
You can report incidents at cybercrime.gov.in, or call the helpline 1930 for guidance on the next steps.
What steps can I take to recover money lost in SIM duplication scams?
Contact your bank immediately to report fraudulent transactions and freeze your account. For further assistance, file a complaint through cybercrime.gov.in.
🛡️

How This Scam Works — BharatSecure AI

Spreading fast

A plain-language breakdown based on 100 real reported scams of this type.

How they reach you Observed primary contact occurs via unsolicited phone calls, WhatsApp/SMS messages, and social media/dating platforms, where fraudsters impersonate bank officials, customer support, government agents,
How they gain your trust Trust is reportedly established through impersonation of authority (banks, RBI, PM-Kisan, army officers) or emotional bonding (love-bombing, family/friend impersonation), often reinforced by AI deepfa
How they take your money UPI is the dominant rail across all records, primarily via disguised 'collect/request money' notifications tricking victims into entering their PIN, d
Who they target Documented targets span the general population but concentrate on the elderly and digitally inexperienced (often via caregiver dependency), urban professionals, students, homemakers, small business ow
How they manipulate you
  • authority bias (impersonating banks/government/officials)
  • urgency and scarcity (account frozen, limited-time offer, emergency)
  • trust/reciprocity exploitation (familiar voices, love-bombing, small initial payouts)
Warning signs
  • Receiving a UPI 'collect/request money' notification and being asked to enter your PIN to 'receive' funds (PIN is never needed to receive money)
  • Unsolicited calls/messages claiming account freeze, KYC expiry, or suspicious transaction, pressuring you to share OTP, UPI PIN, or click a link
  • Requests to install remote-access/screen-sharing apps (AnyDesk, TeamViewer) for 'support' or 'refund' assistance
  • Mismatched or misleading recipient names/VPAs (e.g., 'Verified Merchant', 'Bank Refund Dept') or slightly altered UPI IDs
  • Pressure via emotional urgency, deepfake voice/video of familiar people, forged payment screenshots, or too-good-to-be-true offers (free recharge, prizes, grants, loans, high-return investments)

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.