Bank KYC Update SMS Scam by email

How it looks by email, the red flags and what to do.

Email scams copy the logos, colours and wording of real companies, and the sender address often differs from the real one by one letter. Bank KYC Update SMS Scam is one of the ways this shows up: An SMS says your bank KYC has expired and your account will be blocked today. The link or number steals your details and OTP.

What bank kyc update sms scam looks like by email

• A sender address that is almost, but not exactly, the real domain.
• A button that says "Verify account" or "View invoice".
• An attachment such as a PDF, ZIP or HTML file you did not expect.

The scammer sends the same message to huge lists of numbers, assuming that some of the receivers hold an account with the bank named. Because the SMS says 'dear customer' with no name, it fits almost anyone. A short deadline, such as 'today' or 'within 24 hours', takes away your time to check with the branch or the bank's app.

Red flags to check on the email

• The message has no name and says 'dear customer'.
• A link is used to update KYC instead of the bank's app or branch.
• PAN, card details and OTP are asked together.
• A same-day deadline and account block are threatened.
• The sender address has an extra word or letter.
• The tone is urgent and the grammar is slightly off.

What to do

1. Do not tap the link or call the number.
2. Open your bank's official app or visit the branch to check if KYC is pending.
3. Never share an OTP, PIN or password in reply to a message.
4. Do not open the attachment and do not press the button.
5. Go to the company website by typing it yourself and check your account there.
6. Check the full sender address, not just the display name.

Use Report phishing in your email app. If money or accounts are affected, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. Call 1930 at once if money left your account, giving the time and amount.
2. Call your bank on the number on your card or passbook and block cards and net banking.
3. Change your passwords and PIN from a safe device.
4. Report at https://cybercrime.gov.in with the message and screenshots.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's scam check reviews the SMS you paste or share and gives a plain verdict with reasons such as urgency, fake authority and OTP asks. The link check examines the link for lookalike domains and shortened addresses before you open it. It does not read your messages on its own and cannot confirm your KYC status, so ask your bank.

Full guide: Bank KYC Update SMS Scam: how it works, signs and what to do. Other channels: SMS, WhatsApp, phone call.

Questions