Fake Order Confirmation and Cancel Request Call
An SMS or call says an expensive order was placed in your name and offers a cancel link. The cancel page is built to steal your card or UPI PIN.
A message arrives saying your order of a Rs 48,000 laptop has been confirmed and will be delivered tomorrow. You never placed it, so panic is natural. The message offers a quick link or a number to cancel. That is where the trap closes. The cancel page asks for card details, a UPI PIN or an OTP in order to 'reverse the payment', and the number leads to a stranger who talks you into approving a real payment.
How the scam works
The scammer sends a bulk message with an invented order amount, product name and order number. He does not need to know what you bought, because the shock of a large unknown purchase is enough to make you act. The sender name or email sign-off copies a popular shopping brand, and the layout copies a real receipt with a tidy table of items and a delivery date.
The pressure comes from the clock and the amount. The text says the order will be dispatched in two hours and that cancellation is possible only before that. Calling the number gives you a friendly voice who says your account may have been compromised. He offers to cancel for you, but only if you confirm your identity with an OTP or by installing a support app on your phone.
The payoff is access to money. The OTP may approve a transfer, the app may show him your screen, and the card form hands him your card details. Many victims lose far more than the fake order's value. He may also say that a refund will arrive after a small processing payment, repeating the trick with a second link.
An example of what you may see
Example SMS and call (invented): 'Order confirmed: gaming laptop Rs 61,990, delivery tomorrow. If this was not you, cancel here before dispatch.' When you phone, the voice says, 'Sir, someone used your account. To stop the order I must verify you. Please read the six-digit code that you just received, and I will cancel immediately and also refund your card.' You hesitate, and he adds that the order will be dispatched in one hour.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A high-value order appears that you did not place.
- The cancel option is a link or a phone number inside the same message.
- The caller wants an OTP, a PIN or an app installed in order to cancel.
- A short deadline is given before the item is 'dispatched'.
- The sender, tone or layout differs slightly from your real order messages.
- You are told your account is hacked but are asked to share the very codes that protect it.
What to do right now
- Open the shopping app yourself and check your order history for the item.
- Do not tap the link or call the number in the message.
- If there is no such order, ignore the message and report the number via Sanchar Saathi.
- If you see an unknown order inside your real account, change the password and log out of other devices.
- Tell your family, since the same text often goes to many members of a household.
If you already paid or shared a code
- Call 1930 and report at cybercrime.gov.in straight away with the SMS and the payment reference.
- Call your bank on the number on your card and ask to block the card and any pending transaction.
- Remove any app the caller made you install and change your passwords from a different device.
- Check the shopping account and email for logins you did not make.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Paste the order message into Scam check in Safeavio Sentinel, or share it from your messages app, and it shows the reasons it looks risky, such as pressure and a request for a code. Link check tests the cancel link before you open it. If you installed an app on a caller's request, Phone scan can show newly installed apps and risky permissions. Safeavio cannot confirm whether an order exists in your account, so check the shopping app itself.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
I got an order alert for something I never bought. Is my account hacked?
Not necessarily. Most such messages are sent to many random numbers. Open the shopping app directly and look at your order history. If nothing is there, the message was bait, and you can ignore it and report the sender.
Why does the message include a cancel link?
The link is the whole purpose. It opens a page built to collect your card details, UPI PIN or OTP. Genuine cancellations are done inside the app's orders page, where you are already logged in, and never need a PIN.
Should I call the number to cancel the order?
No. The number belongs to the sender, not the shopping platform. Use the support option inside the official app or the number printed on the company's own bill or website typed by hand. If the message has a link, do not open it.