Five signs a “KYC update” message is a scam
The bank is not blocking your account tonight. How to recognise the KYC, electricity-bill and parcel messages that empty accounts — and what to do instead.
Almost every Indian phone has received one: “Dear customer, your KYC has expired and your account will be blocked today. Update now:” followed by a link. Variants say the electricity connection will be cut at 9:30 pm, a parcel is held at customs, or a reward point balance is about to lapse. The details change; the method does not.
The five signs
- A deadline measured in hours. Real banks give notice by letter, branch or app — never “today before 9 pm”. Urgency is there to stop you thinking.
- A link or a phone number in the message. Banks ask you to open their app or website yourself. A link to a look-alike address (for example a bank name plus “-kyc-update” on an unfamiliar domain) is the attack.
- A request for an OTP, PIN, CVV or card number. No bank, wallet or government office ever asks for these. The OTP is the key to your money; whoever has it can spend it.
- An app to install. “Download this support app so we can help” means a screen-sharing or remote-control app. Once installed, the caller sees your OTPs as they arrive.
- A personal mobile number or a WhatsApp account “from the bank”. Official messages come from registered sender IDs, not from a ten-digit personal number.
What to do instead
- Do not tap the link. Open your bank’s own app, or type its address yourself, and check whether anything is actually pending.
- If you are unsure, call the number printed on your card or passbook — not the number in the message.
- Report the message. The Department of Telecommunications’ Sanchar Saathi portal has a Chakshu facility for reporting suspected fraud calls and messages.
- Tell the older members of your family about this pattern. Scammers target people who are polite on the phone and less familiar with apps.
How TotalHeal helps
If someone in the family does tap the link on a computer, the TotalHeal browser extension checks the site as it opens and blocks known phishing and look-alike login pages before a password, card number or OTP is typed. Scam & fake-login protection is part of every plan, including the 30-day trial. See how web protection works.