Never share your OTP: how OTP scams work

हिंदी सार: OTP, PIN, CVV और पासवर्ड सिर्फ़ आपके लिए हैं। कोई असली बैंक, ऐप या सरकारी दफ़्तर फ़ोन, मैसेज या ईमेल पर इन्हें नहीं माँगता। जल्दबाज़ी ठगों की चाल है। गलती से OTP दे दिया हो तो तुरंत बैंक को बताइए और 1930 पर कॉल कीजिए।

An OTP (one-time password) proves that it is really you. That is exactly why scammers want it: whoever has your OTP can act as you.

Common tricks

• "Your KYC has expired." A call or message says your account will be blocked unless you share an OTP or click a link.
• The "delivery" call. Someone says a parcel is stuck and asks for the OTP you just received.
• A fake customer care number. You search for a helpline and call a number that a scammer has put online. They ask for OTPs or card details.
• The "refund" trick. You are asked to approve a request or enter your UPI PIN "to receive" money. Entering a UPI PIN always sends money out; you never need it to receive.
• Screen-sharing apps. A caller asks you to install an app that lets them see or control your phone. Never do this.

Simple rules

• OTP, PIN, CVV and passwords are only for you. No genuine bank, app or government office needs them from you by call, message or email.
• Urgency is a trick. "Do it in 10 minutes or your account is blocked" is how scammers stop you thinking.
• Do not click links or install apps sent by a caller.
• Call back on a number you trust, such as the one on your card or in the official app, not the number that called you.
• Read the message before you share. Many OTP messages say what the OTP is for.

If you already shared an OTP

• Call your bank immediately and ask them to block the card or account.
• Call 1930, the national cyber crime helpline, and report on cybercrime.gov.in. Reporting quickly gives the best chance of stopping the money.
• Change passwords for the affected accounts, and keep screenshots and receipts.

Sources

• National Cyber Crime Reporting Portal: cybercrime.gov.in
• Helpline: 1930