Fake KYC update and OTP fraud

"Your KYC expires today, your account will be blocked." Banks never ask for your OTP, PIN or password.

By Sanjeev Jaiswal · 22 Oct 2026

How it works

You get an SMS, WhatsApp or call saying your KYC has expired or your account will be frozen. The link opens a fake bank page, or the caller asks for the OTP that has just arrived “to verify you”. That OTP actually approves a payment or lets them log in as you. Some ask you to install an app that lets them see and control your phone.

A real warning

The Reserve Bank of India has repeatedly warned about KYC-update frauds, most recently in February 2024. It says fraudsters create false urgency and threaten to block accounts, and that people should never share login details, OTPs or PINs, and should report financial cyber fraud at cybercrime.gov.in or on 1930.

If it has already happened

Don't click or reply. If you shared an OTP or PIN, call your bank on the number on your card and block your account or card at once.
Call 1930 immediately if any money has left your account.
Uninstall any app they asked you to install, especially screen-sharing apps.
Report the number or message on Chakshu.

Protect yourself

Banks never ask for your OTP, PIN or password, on a call, SMS, email or chat.
Update KYC only in your bank's official app or at the branch.
Never install an app or share your screen because a caller asked you to.

Say it simply

Tell your children

An OTP is a secret, like a toothbrush: only for you. Never read it out to anyone.

Tell grandparents

Your bank will never call and ask for your OTP. If someone does, put the phone down.

Live through it safely. "The KYC call"Play the story →

Where to report

Cybercrime helpline 1930Money has been taken or a payment was tricked out of you. Call at once: the sooner, the better the chance of freezing it.Call 1930
Your bank, directlyBlock your card or UPI, and report the transaction. Use the number on your card or the bank's official app, never one from a message.Number on your card
Chakshu, on Sanchar SaathiReport a suspected fraud call, SMS or WhatsApp message, even if you lost nothing.sancharsaathi.gov.in
National Cyber Crime Reporting PortalFile a complaint about any cyber fraud, harassment, sextortion or morphed images.cybercrime.gov.in

Learn more

Real banks never ask for your OTP

How fake KYC messages and "bank manager" calls trick people into sharing OTPs, the red flags to spot, and where to report in India.

Sources

Next: 📲 UPI PIN and QR code scams →