OTP

An OTP, or one-time password, is a short code valid for one use, sent by SMS or an app to confirm it is you, and it must never be shared.

OTP: An OTP, or one-time password, is a short code that works only once and for a short time. Banks, UPI apps, shops and government sites send it by SMS or an app to confirm that a login or payment is really yours. Sharing it hands your approval to someone else.

Many Indian frauds are simply tricks to get an OTP. The caller says a refund, KYC update, courier delivery or prize needs the code to proceed. Others send a link to a fake page that asks for the OTP you just received. The moment you share it, the scammer finishes a payment or logs in as you. Some fake pages even copy the bank's own wording, so the code request looks routine.

Read the message that carries the OTP, because it often names the action, such as a payment to someone. If you did not start that action, do not use the code. No bank, police officer or delivery agent ever needs your OTP. If you shared one by mistake, call your bank on the number printed on your card and then 1930.

Tips

• Never read out or forward an OTP, even to someone who says they are from your bank.
• Read the full OTP message to check the amount and the purpose before using it.
• If you shared one by mistake, call your bank at once and then 1930.

Related terms