Real banks never ask for your OTP
Big idea: real banks never ask for your OTP.
The story in short
Late one night Ranjan uncle got a message: his SBI KYC would expire and his account would be blocked in two hours unless he clicked a link. Then “Bank Manager Uncle” phoned, polite and patient, asking for “just a small OTP”. When the OTP arrived, Mitthu almost read it out loud, then stopped himself: “Can’t tell you. Private information.” Bunny ended the call. Nilu chachu explained the trick, and they blocked the number and warned the whole building.
The idea
- Phishing: a fake message sent to thousands of people, baited with fear or urgency.
- Social engineering: tricking a person directly, using trust and good manners as the weapon.
- Urgency tactic: a countdown or threat (“blocked in 2 hours”) so you act before you think.
- Spoofing: a sender name, number or caller ID can be faked. It is never proof.
- Typosquatting: a web address made to look like the real one, like sbi-kyc-verify-online.in.
- OTP: a one-time password, meant to be used once, by you, to approve your own action.
In real life
OTP and KYC scams are among the most common frauds in India, and many now use AI-written messages and cloned voices. If you get a suspicious call or message, report it on Chakshu in the Sanchar Saathi portal. If money has been taken, call 1930 at once or report at cybercrime.gov.in.
Remember: If a message or call makes you feel rushed, that feeling is the warning. Hang up, and call the number on your own card.
Check yourself
Someone calls saying they're from your bank and asks for the OTP you just received. What do you do?
The caller ID shows your bank's real name. Does that prove the call is genuine?
A message says "Your account will be BLOCKED in 2 hours, click now". Why the countdown?
What is India's national cybercrime helpline number?
More for you: 🧒 Kids · 🧑🏫 Parents and teachers · 🏡 Homemakers · 👵 Seniors