Telegram-Based Phishing for UPI and Bank Details
Verdict: Suspicious | Risk Score: 9/10 | Severity: critical
Category: UPI, WhatsApp, KYC
How Telegram-Based Phishing for UPI and Bank Details Works
Overview: Scammers are using Telegram bots and groups to harvest UPI IDs, PINs, and bank login credentials from Indian users under the guise of prize draws, KYC, or investment offers. By exploiting trust and urgency, these attacks lead to direct UPI theft and banking fraud. How It Works: 1. Victims get Telegram messages about winning prizes or urgent UPI account issues. 2. They're directed to forms or websites that mimic official bank/UPI platforms. 3. Attempting to 'claim rewards' or 'prevent account freeze', users enter their UPI and bank details. 4. Details are instantly exfiltrated to scammers’ Telegram bots, who siphon funds in real-time. India Angle: Scams reference Indian payment brands (Paytm, PhonePe, GPay), often using logos and familiar phrasing. Urban and semi-urban youth as well as small traders are prime targets due to their reliance on digital payments and UPI porting. Real Examples: - “Congratulations! You’ve won Rs 5,000 Paytm cashback. Verify your UPI at paytm-prize[dot]com now.” - “Dear Customer, your UPI has been blocked. Reactivate by filling this form: upi-support[dot]info.” Red Flags: 1. Prize messages for offers you never entered. 2. Short links mimicking bank or UPI domains. 3. Requests for your UPI PIN or full bank credentials. 4. Telegram users pressing for swift action under threat. Protective Measures: - Never share your UPI PIN or login info. - Cross-check links and always use official apps. - Report suspicious Telegram messages directly to your bank and BharatSecure. If Victimised: - Call your bank to freeze accounts/payments. - Call 1930 or use cybercrime.gov.in to report. - Save all chats and submit them as evidence. Related Scams: - Fake RBI refund phishing. - KYC update scams via SMS or WhatsApp.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Telegram-Based Phishing for UPI and Bank Details Target?
General public across India
Red Flags — How to Identify Telegram-Based Phishing for UPI and Bank Details
- UPI/Bank verification links from Telegram
- Offers of prizes or cashback out of the blue
- Requests for UPI PIN or account number
- Links ending in .info or other unofficial domains
What To Do If You Encounter Telegram-Based Phishing for UPI and Bank Details
- Do not click any links or share personal information
- Block and report the sender immediately
- Report at cybercrime.gov.in or call 1930
- Inform your bank if financial details were shared
How to Report Telegram-Based Phishing for UPI and Bank Details in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is Telegram-Based Phishing for UPI and Bank Details?
- Overview: Scammers are using Telegram bots and groups to harvest UPI IDs, PINs, and bank login credentials from Indian users under the guise of prize draws, KYC, or investment offers. By exploiting trust and urgency, these attacks lead to direct UPI theft and banking fraud. How It Works: 1. Victims get Telegram messages about winning prizes or urgent UPI account issues. 2. They're directed to forms or websites that mimic official bank/UPI platforms. 3. Attempting to 'claim rewards' or 'prevent
- How does Telegram-Based Phishing for UPI and Bank Details work?
- Overview: Scammers are using Telegram bots and groups to harvest UPI IDs, PINs, and bank login credentials from Indian users under the guise of prize draws, KYC, or investment offers. By exploiting trust and urgency, these attacks lead to direct UPI theft and banking fraud. How It Works: 1. Victims get Telegram messages about winning prizes or urgent UPI account issues. 2. They're directed to for
- How to protect yourself from Telegram-Based Phishing for UPI and Bank Details?
- Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
- How to report Telegram-Based Phishing for UPI and Bank Details in India?
- Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.