What should I do if I already shared an OTP or clicked a suspicious link?

Call your bank's official customer care number (found on your card or their verified website, not a number from the suspicious message) immediately to block your card/account, then file a complaint at India's National Cyber Crime Reporting Portal (cybercrime.gov.in) or call 1930.

Are screen-sharing apps like AnyDesk used in these scams?

Yes — a common tactic is asking you to install a remote screen-sharing app 'to help fix an issue,' which lets the scammer see your screen and banking app in real time. Never install a screen-sharing app at the request of an unsolicited caller.

How to Spot a Fake KYC / OTP Scam (India)

Q: Is a call saying my KYC will expire today real?

Treat urgent same-day KYC expiry calls or texts as a red flag. Real KYC updates are handled through your bank's official app, website, or a branch visit — not through a random inbound call demanding you act immediately or click a link.

Quick answer: Your bank, UPI app, or KYC agent will never ask you for your OTP, PIN, CVV or full card number by phone, SMS link, or a screen-sharing app. If anyone asks for these, it's a scam — hang up, don't click, don't share your screen. That single rule stops almost every version of this fraud.

How the scam usually works

You get a call, SMS, or WhatsApp message claiming your bank account, UPI ID, or KYC will be blocked or expire "today" unless you act immediately. It often includes a link to a fake site that looks like your bank's, or a request to install a remote-access app "to fix the issue." The urgency is the point — it's designed to make you act before you think.

Red flags to watch for

Urgency and threats — "your account will be blocked in 24 hours" is a pressure tactic, not how real banks communicate.
A request for your OTP, PIN, or CVV — this is the single biggest tell. No legitimate KYC process ever needs these.
A link to "update" your KYC — real KYC updates happen through your bank's official app or a branch visit, never a link in an unsolicited message.
A request to install a screen-sharing app (like AnyDesk or TeamViewer) "to help" — this lets a scammer see your banking app live on your screen.
Caller ID that looks official — caller IDs and sender names can be spoofed. Official-looking doesn't mean official.

The golden rule: never share an OTP, PIN, or CVV with anyone, for any reason, ever — not your bank, not "customer support," not a KYC agent. If a genuine transaction needs an OTP, you enter it yourself, directly in the app or webpage you initiated.

If you've already shared something

Act immediately: call your bank's official customer care number (from your card or their verified website — not the number in the suspicious message) to block your card or account. Then file a complaint at India's National Cyber Crime Reporting Portal or call the national helpline 1930.

Go deeper: full KYC & Safe Banking course

12 video lessons covering the fake-KYC scam in detail, the OTP/PIN golden rule, safe UPI use, phishing, and what to do if fraud happens. Lesson 1 is free.

Start free lesson →

Frequently asked questions

Can my bank ask for my OTP over the phone?

No. No legitimate bank, UPI app, or KYC agent will ever ask you to share an OTP, PIN, CVV, or full card number over a phone call, SMS link, or app-sharing session.

Is a call saying my KYC will expire today real?

Treat same-day urgency as a red flag. Real KYC updates happen through your bank's official app, website, or a branch visit — not an inbound call demanding immediate action.

What if I already shared an OTP or clicked a link?

Call your bank's official number immediately to block your account, then report it at cybercrime.gov.in or call 1930.

Are screen-sharing apps used in these scams?

Yes — never install a screen-sharing app at the request of an unsolicited caller "helping" you.

This is general safety education, not financial or legal advice. If you've been a victim of fraud, contact your bank and India's National Cyber Crime Reporting Portal directly.

How to spot a fake KYC / OTP scam