Debit Card Expiry and Replacement Scam by SMS

How it looks by SMS, the red flags and what to do.

SMS scams lean on short, urgent lines and a shortened link. The message looks official because the sender name (header) is shaped to resemble a real organisation. Debit Card Expiry and Replacement Scam is one of the ways this shows up: A caller says your debit card is about to expire and a new one will be sent after you confirm details and an OTP. The OTP approves a payment.

What debit card expiry and replacement scam looks like by SMS

• A sender name that resembles a bank, courier, tax or utility, or an ordinary mobile number.
• A very short message with a deadline such as "today" or "within 24 hours".
• A shortened or oddly spelled link that does not match the real website.

The scammer calls at a time when people are busy, such as mornings or lunch. They know that cards have an expiry date and that you may not remember it, so you will not doubt the claim at once. They mention the bank's name and sometimes your address, taken from a past leak or a public listing, to appear more genuine.

Red flags to check on the text message

• A caller says your card is expiring and asks for full card details.
• An OTP is requested for 'address verification'.
• A delivery fee or second code is requested later.
• The caller says the card will stop today.
• The link domain is not the one you type yourself for that organisation.
• The message asks for an OTP, PIN, card number or password.

What to do

1. End the call and do not share card details or an OTP.
2. Check the expiry date on your own card and the bank's official app.
3. Call the number on the back of your card if you need a replacement.
4. Open the official app or type the official website yourself to see if there is any real notice.
5. Paste the text into a scam checker (Safeavio Sentinel can check it) before you do anything else.
6. Report the sender on the Sanchar Saathi portal (Chakshu facility) and block the number.

You can report suspicious SMS and calls on the Sanchar Saathi portal (Chakshu facility) of the Department of Telecommunications.

If money or a code is already gone

1. Call your bank on the number on your card and block the card immediately.
2. Call 1930 and give the transaction details and time of the call.
3. Report at https://cybercrime.gov.in with the call log and alerts.
4. Ask the bank to start a dispute and request a new card through the branch.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's Money Shield includes the rule that you never share an OTP, PIN or CVV with anyone, including bank staff. If a follow-up message arrives with a delivery link, you can paste it into the scam check or the link check to see the warnings. Safeavio does not block calls by itself, so end the call and use your card's own number.

Full guide: Debit Card Expiry and Replacement Scam: how it works, signs and what to do. Other channels: phone call, WhatsApp.

Questions