Debit Card Expiry and Replacement Scam
A caller says your debit card is about to expire and a new one will be sent after you confirm details and an OTP. The OTP approves a payment.
A friendly caller from 'the card centre' says that your debit card expires this month and that a replacement will be couriered if you confirm your details. It sounds like normal service, and cards do expire. But a bank does not need you to read out the full card number, CVV or an OTP to send a new card. Those details are used to take money.
How the scam works
The scammer calls at a time when people are busy, such as mornings or lunch. They know that cards have an expiry date and that you may not remember it, so you will not doubt the claim at once. They mention the bank's name and sometimes your address, taken from a past leak or a public listing, to appear more genuine.
They ask you to confirm the card number, expiry date, CVV and the name on the card, which they say are needed for 'address and card matching'. A moment later they tell you that a code is coming and that you must read it to confirm the delivery address. The code is an OTP for a purchase they are making on your card.
When you share the OTP, your money is spent. The scammer may then say that the delivery has failed and ask for a second code, or a small 'delivery fee' via a link. By the time you speak to your bank, a major part of your balance may be gone, and the replacement card never existed.
An example of what you may see
Example only: 'Good morning, I am calling from the debit card centre. Your card is expiring this month, so we are sending a new one. Please confirm your card number, expiry date and the three digits on the back. You will get a code for address verification, please read it to me so the courier can be booked. If we do not do this today your card will stop working.'
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A caller says your card is expiring and asks for full card details.
- An OTP is requested for 'address verification'.
- A delivery fee or second code is requested later.
- The caller says the card will stop today.
- You are asked for the CVV on the back.
- The call is unexpected and the caller avoids answering questions.
What to do right now
- End the call and do not share card details or an OTP.
- Check the expiry date on your own card and the bank's official app.
- Call the number on the back of your card if you need a replacement.
- Block the number and report it.
- Keep alerts on for all card transactions.
If you already paid or shared a code
- Call your bank on the number on your card and block the card immediately.
- Call 1930 and give the transaction details and time of the call.
- Report at https://cybercrime.gov.in with the call log and alerts.
- Ask the bank to start a dispute and request a new card through the branch.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's Money Shield includes the rule that you never share an OTP, PIN or CVV with anyone, including bank staff. If a follow-up message arrives with a delivery link, you can paste it into the scam check or the link check to see the warnings. Safeavio does not block calls by itself, so end the call and use your card's own number.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Will the bank call me to replace an expiring card?
A bank may send a replacement through its own process, but it does not need you to read out your CVV or an OTP on a call. Check with the bank on the number printed on your card instead.
Why would a delivery need an OTP?
It does not. An OTP approves a payment or a login. A delivery address can be confirmed inside the bank's app or at the branch, so a request to read out a code is a sign that the call is a scam.
How can I check when my card expires?
Look at the date printed on the card itself or in the bank's official app. You can also call the number on the back of the card. Do not rely on what an incoming caller tells you.