Mobile Number Deactivation KYC Text Scam through an app

How it looks through an app, the red flags and what to do.

A fake app can be installed from a link, from a file sent on chat or even from a lookalike listing. Once on your phone it can ask for powerful permissions. Mobile Number Deactivation KYC Text Scam is one of the ways this shows up: A text says your SIM will be deactivated unless you update KYC today and asks you to call a number or install an app that hands over your phone.

What mobile number deactivation kyc text scam looks like through an app

• A loan app that asks for contacts and photos.
• A "KYC", "challan" or "bank rewards" app from a link.
• An .apk file sent on WhatsApp or by SMS.

The scammer sends texts from numbers that look like ordinary mobiles or from lookalike headers. The words are crisp and official sounding: expiry, verification, last notice. Because most people use only one number for banking and everything else, the thought of losing it makes the message very scary, and many recipients call at once without checking anything.

Red flags to check on the app

• A text says your number will be deactivated within hours.
• It asks you to call a personal mobile number.
• The caller wants you to install a support or screen sharing app.
• You are asked to read out a code from your screen.
• You were told to install it by a stranger or a caller.
• It has few or odd reviews, or a name with spelling changes.

What to do

1. Do not call the number or tap the link.
2. Check your KYC status in your operator's official app or at its store.
3. Remove any support app you installed and turn off screen sharing.
4. Do not install it. If it is installed, uninstall it now (Settings, Apps).
5. Open Settings and check Accessibility, Device admin apps and Install unknown apps for anything you do not recognise.
6. Change the passwords of your bank and email from a clean device if the app had access.

Report the fake app to the store it came from and, if money moved, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. Call 1930 immediately if money has moved.
2. Ask your bank through the number on your card to block UPI and cards.
3. Uninstall the support app, restart the phone and change banking passwords from a clean device.
4. File a complaint on cybercrime.gov.in with the screenshot of the text.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio Sentinel's scam check explains why a deactivation text looks risky, pointing to urgency, a personal number and an app request. Its phone scan reviews installed apps and permissions, including apps from outside a store and risky settings, so a remote-support app can be spotted. It cannot confirm your KYC status with the operator and cannot undo what a caller did on your phone, so check with the operator directly.

Full guide: Mobile Number Deactivation KYC Text Scam: how it works, signs and what to do. Other channels: SMS, phone call.

Questions