PAN Card Blocked SMS Scam
A text claims your PAN will be blocked unless you update it now. The link is a fake form that takes bank login details and OTPs.
A message tells you that your PAN card has been blocked or is about to be, and that you must update it through a link to keep using your bank account and demat account. It often names a famous bank to look reliable. The page asks for your PAN, date of birth, net banking login and an OTP. The only thing that gets updated is the scammer's access to your money.
How the scam works
The scammer picks PAN because almost every adult has one and knows it is tied to tax, banking and investing. The message mixes official words such as verification, linkage and compliance. It may say the PAN will become inoperative, which sounds plausible to anyone who has heard about deadlines. The sender is a mobile number or a lookalike header, and the link is shortened.
The target page copies a tax or banking style layout. It first asks for PAN and birth date, which feels harmless. Then it moves to bank details, saying the PAN must be linked to your account. This stepwise approach works because each small request seems reasonable. By the third screen the person is entering net banking credentials.
While you type, the scammer logs into your real bank and triggers a transaction or a new device registration. The OTP you get is real, and the page asks you to type it as a 'final confirmation'. Once the OTP is entered, the money is moved to accounts the scammer controls. Your PAN and date of birth are kept and reused for loan or account fraud.
An example of what you may see
Example message (invented): 'Your PAN card has been blocked. Update PAN now at tinyurl.com/xxxx to avoid account suspension. Enter PAN, date of birth and net banking details. Complete in 24 hours. Compliance Dept.' It uses a shortened link, an unspecific department, a 24 hour deadline and asks for net banking details. A genuine tax or banking notice does not collect your internet banking login through a link. If you are truly unsure, nothing is lost by waiting and checking the official site yourself.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- It says your PAN is blocked or will be blocked.
- It uses a shortened link instead of a clear official address.
- It asks for net banking login details to update a PAN.
- The message has a 24 hour or same-day deadline.
- It is signed by a department with no name or reference number.
- It asks you to type an OTP into a web page.
What to do right now
- Do not open the link or call back any number in the message.
- Check your PAN status only on the official income tax e-filing website typed by hand.
- Tell your bank through its official app if you think the message mentioned your account.
- Report the number on Sanchar Saathi using the Chakshu option.
- Delete the message after taking a screenshot for your records.
If you already paid or shared a code
- Call 1930 immediately and give the transaction details.
- Call the number printed on your card or passbook to block net banking and cards.
- Report at cybercrime.gov.in and note the acknowledgement number.
- Change passwords on any account that shared the same login, starting with email.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
With Safeavio Sentinel you can paste or share the message into the scam check and get a verdict with reasons such as fake authority, a threat and a request for login details. Pasting the link into the link check helps you spot shortened or lookalike addresses. The password exposure check can show whether a password has appeared in known leaks. It cannot confirm your real PAN status. That has to be checked on the official site.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Can a PAN card really get blocked by an SMS?
Official problems with a PAN are handled through proper tax department channels, not by a text asking for bank login details. If worried, check your PAN details on the official e-filing website, typing the address yourself.
Why do they ask for my date of birth?
Date of birth and PAN help scammers pass identity checks on other services. Together with an OTP they can reset passwords or open accounts. Never type them into a page reached from a message you did not expect.
I already clicked and typed my PAN. What now?
Watch for new loans or accounts using your PAN by checking your credit report. Tell your bank if you entered banking details. Use official channels only to check, and report on cybercrime.gov.in. A message that creates panic and gives only a link is the pattern to avoid.