Receiving an urgent text message claiming your bank account or e-wallet will be blocked due to an expired KYC is a common tactic used by scammers. These messages often create a false sense of panic to trick you into clicking a malicious link or calling a fake customer care number.
Look for the Red Flags
Official banks rarely send links via SMS to update your KYC details. If you receive a message containing a link (e.g., bit.ly/bank-kyc), do not click it. Legitimate institutions typically ask you to visit their official website, use their banking app, or walk into the nearest branch.
Check the sender's ID carefully. Scammers often use generic mobile numbers (starting with +91) or spoofed sender names that look like 'HDFC' or 'SBI' but contain slight misspellings or extra characters. If a message uses threatening language, such as 'Your account will be blocked within 2 hours,' it is almost certainly a scam. Banks follow formal procedures and do not issue such abrupt, time-sensitive ultimatums via SMS.
Verify Before You Act
If you are genuinely concerned about your account status, ignore the message entirely. Instead, open your bank’s official mobile application or log in to their verified net banking portal. Any legitimate notice regarding a KYC expiry will appear in your 'Notifications' or 'Messages' section within the secure app. If you still have doubts, call the customer care number printed on the back of your physical debit card—never use a number provided in the suspicious SMS.
What to Do If You've Shared Information
If you accidentally clicked a link or shared sensitive details like your OTP, PIN, or password, act immediately.
- Block your cards: Use your banking app to freeze your debit or credit cards instantly.
- Report the incident: Call the national cybercrime helpline at 1930 as soon as possible. Reporting early increases the chances of freezing the transaction before the money is moved.
- File a complaint: Visit the National Cyber Crime Reporting Portal to log an official complaint.
- Change your credentials: Update your net banking password and UPI PIN immediately from a secure device.
Remember, no bank official will ever ask you for your OTP, CVV, or UPI PIN over the phone or text. Anyone requesting these details is trying to gain unauthorized access to your funds.
Sources
- RBI (Reserve Bank of India) 'BE(A)WARE' Booklet on Fraudulent Communications.
- Indian Cyber Crime Coordination Centre (I4C).
Need to file a formal complaint?
Use our automated utility to draft a precise Cyber Cell application and escalate to your bank's nodal officer instantly.
Open Complaint Generator