UPI SIM Swap OTP Fraud
यूपीआई सिम स्वैप ओटीपी धोखाधड़ी
INDIA — By BharatSecure Threat Intelligence Team ·
Category: UPI
Evidence & AI transparency
Not yet assessed. This older record has not completed the new evidence-governance review.
This page includes AI-assisted analysis. AI assistance does not mean a person reviewed or approved this page.
Sources: 2 · Last automated validation: Not recorded
- Cyber Crime In India : Cyber Phishing - Cheating by personation
- UPI Fraud: What to Do If You Lose Money in a Digital Payment Scam
Evidence-backed facts: statements mapped to cited evidence by the automated validator. BharatSecure analysis: interpretation and safety guidance; it is not an official finding.
Automated analysis can contain errors. Confirm important information and decisions with official authorities.
Verdict Summary
UPI SIM Swap OTP Fraud is a confirmed scam. Do not engage — block the sender and report to 1930 (National Cyber Crime Helpline) immediately.
Risk score: 10/10 · Severity: Critical · Verdict: Dangerous
Scam Intelligence: UPI SIM Swap OTP Fraud
Proprietary signals from BharatSecure's scam-tracking database.
| Last reported | Sep 11, 2026 |
| First documented | Sep 11, 2026 |
How UPI SIM Swap OTP Fraud Works
- Scammer obtains personal details of the victim.
- A duplicate SIM is requested from the mobile operator.
- The duplicate SIM is activated and receives OTPs meant for the victim.
- OTP interception is used to authorize UPI transactions and bypass security.
How This Scam Works — Detailed Explanation
UPI SIM Swap OTP Fraud is a sophisticated scam that emerges when attackers exploit vulnerabilities in mobile communication systems. Scammers often start by gathering personal information about potential victims through various means such as social engineering on platforms like WhatsApp or through phishing links. They may pretend to be bank representatives or government officials, enticing victims to share their sensitive details, which can include Aadhaar numbers or UPI PINs. Once they have significant personal information, they approach mobile operators to request a duplicate SIM card, misusing the victim's identity.
The tactics used by these scammers are insidious and rely on psychological manipulation. They often create a sense of urgency, encouraging victims to act quickly without questioning the motive. For instance, they might send messages claiming that the victim must verify their SIM to avoid a suspension or legal issue. These manipulative tactics can instil fear, pushing victims to comply quickly. The scammers may even provide information about previous transactions to lend credibility to their claims, thereby lowering the potential victim's guard.
Once the scammer successfully acquires the duplicate SIM and the activation is complete, they start intercepting OTPs that the victim's UPI transactions generate. Victims will initially notice unexpected occurrences, such as an unexpected SIM replacement message or alerts that OTPs are not being received on their phone. Often, this is followed by unauthorized UPI transactions draining their bank accounts. For instance, many victims have reported losses ranging from ₹50,000 to over ₹5,00,000 due to such scams. The RBI and CERT-In have emphasized the need for rigorous verification processes to prevent these types of scams due to their rise.
The impact of UPI SIM Swap OTP Fraud in India is alarming. Reports indicate that victims collectively lost over ₹500 crore in 2022 alone from various UPI-related frauds. The Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI) have issued warnings about this type of fraud, acknowledging its growth in the cybercrime landscape. This sheer scale of financial loss serves as a stark reminder of the seriousness of the threat, not only for individuals but also for banks and payment systems that must defend against such vulnerabilities.
To discern this scam from legitimate communications, be mindful of communication sources. Authentic communications from your bank will never ask for your OTP or sensitive details through SMS or calls. If you receive a verification request that you did not initiate, understand that it could indicate foul play. Unexpected requests for SIM verification or frequent OTP prompts while you engage in online banking should raise immediate red flags. Always verify through trusted sources before acting on any communication that involves your personal information or financial transactions.
Who Does UPI SIM Swap OTP Fraud Target?
Banking and UPI users whose mobile number is linked to accounts
Red Flags — How to Identify UPI SIM Swap OTP Fraud
- Unexpected SIM replacement or verification request
- OTPs suddenly stop reaching the real phone
- Unauthorized account activity
- Multiple authentication prompts
What To Do If You Encounter UPI SIM Swap OTP Fraud
- Report the incident immediately by calling the cybercrime helpline 1930 or visiting cybercrime.gov.in.
- Contact your bank's helpline (SBI: 1800-11-1109, HDFC: 1800-202-6161) to inform them about unauthorized transactions.
- Request your mobile service provider to block your current SIM to prevent further misuse.
- Change your UPI PIN and bank passwords immediately to secure your account.
- Monitor your bank statements regularly for any suspicious activity following the incident.
- Educate family and friends about the scam to help them avoid falling victim.
How to Report UPI SIM Swap OTP Fraud in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately contact your bank's helpline to report the incident. You should also inform the cybercrime helpline at 1930, or report at cybercrime.gov.in.
- How can I identify UPI SIM Swap OTP Fraud?
- Look for signs such as sudden lack of OTP messages, unexpected SIM verification requests, or unauthorized transactions from your bank.
- How to report this type of scam in India?
- You can report the fraud by calling the cybercrime helpline at 1930, visiting cybercrime.gov.in, or directly contacting your bank for unauthorized transactions.
- How can I recover my money or protect my accounts after this scam?
- Contact your bank to dispute unauthorized transactions and seek measures to protect your account. Monitoring your bank statements regularly and enabling transaction alerts can also help prevent future losses.
How This Scam Works — BharatSecure AI
Spreading fastA plain-language breakdown based on 109 real reported scams of this type.
| How they reach you | Fraudsters primarily reach victims through unsolicited phone calls, WhatsApp/SMS messages, and fake payment links or QR codes, frequently impersonating bank officials, customer support, government sch |
| How they gain your trust | Trust is established by impersonating authority figures (banks, RBI, government departments, army officers) or exploiting existing relationships, often reinforced with logos, AI-generated/deepfake voi |
| How they take your money | UPI transfers via apps like Google Pay, PhonePe, and Paytm dominate, often authorized through disguised collect requests, OTPs, UPI PIN entry, malicio |
| Who they target | Broad targeting across the digitally-active Indian population, with repeated emphasis on the elderly, homemakers, students, small business owners/online sellers, rural users (PM-Kisan/scheme beneficia |
- authority bias (impersonation of banks/officials)
- urgency and scarcity (account frozen, benefit expiring)
- trust and familiarity (known contacts, familiar voices, reciprocity from small wins)
- Unsolicited calls/messages claiming urgent account, KYC, or transaction issues requiring immediate action
- Requests to share OTP, UPI PIN, or to approve a 'collect'/money request to receive funds or refunds
- Pressure to install remote-access or screen-sharing apps (AnyDesk, TeamViewer) for 'support'
- Payment or QR-code scans framed as needed to receive money, claim prizes, grants, or process loans/jobs
- Emotional manipulation via familiar contacts, love-bombing, or authoritative/deepfake voices combined with time pressure
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.