Pre-approved Loan SMS Link Scam
An SMS says you have a pre-approved bank loan and asks you to tap a link and log in. The page steals your banking details and OTP.
A text from what looks like your bank says a pre-approved loan of a few lakh rupees is waiting and can be claimed with one tap. Banks do make offers to existing customers, so it feels plausible. The link, though, opens a copy of a banking page that collects your login, card details and OTP, which are then used to move money from your account.
How the scam works
The scammer sends a short message with a sender name close to a bank's header, a loan amount and a time limit such as 'valid till tonight'. They know that many people have some need for funds, so even a small percentage of readers will respond. The link is often shortened so that you cannot see where it truly goes.
The page copies the look of the bank's offer page and asks you to log in to 'view your offer'. It may ask for your customer ID, password, card details and finally an OTP to 'accept the offer'. Some pages ask you to install an app to complete a paperless process, and that app can read your SMS and see your screen.
The scammer uses the credentials and the OTP to log in, add themselves as a payee and move your balance out, or to take a real loan in your name and transfer it away. In some cases the page asks you to pay a small processing charge, which gives them your card details as well. You might see the problem when the EMI or the empty balance shows up.
An example of what you may see
Example only: 'Dear customer, you have a pre-approved personal loan of Rs 3,50,000 at a special rate. Offer expires tonight. Click here to accept: (short link). Login with your customer ID and enter the OTP to receive the amount in your account instantly. No documents needed. Hurry, limited offer.' The link does not lead to your bank's own website and the sender number is an ordinary one. The page loads a countdown timer and has no branch or help details.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A pre-approved loan arrives by a link and expires tonight.
- The page asks for your login and OTP together.
- The loan is said to need no documents.
- The link is shortened or has an odd domain.
- An app download is needed to complete the loan.
- The sender is an ordinary mobile number or odd header.
What to do right now
- Do not tap the link or log in from it.
- Open your bank's official app and see if any offer is listed.
- Never share an OTP to accept an offer.
- Delete the message and report it to your bank.
- Report the sender on the Sanchar Saathi portal.
If you already paid or shared a code
- Call your bank on the number on your card or passbook and block net banking and cards.
- Call 1930 and give the time, amount and transaction IDs.
- Check for loans or payees added to your account and ask the bank to remove them.
- Report at https://cybercrime.gov.in with the message and page screenshots.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's link check can review the offer link before you open it for lookalike domains, shortened links and risky patterns, and the scam check shows why the message looks like pressure with fake authority. It cannot tell whether your bank really has an offer for you, so look in the bank's official app or ask at the branch. Ask the branch.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How do I know if a loan offer is real?
Look for it in your bank's official app, or ask your branch or the number on your card. A link in an SMS is not a safe way to check, because a copy of a bank page can look the same as the real one.
Can a loan be taken in my name if I enter my OTP?
Yes, if the scammer has your login details and the OTP, they may be able to take or transfer funds. Do not share an OTP with a page or caller, and check your account for loans or payees you did not add.
Why does the offer expire tonight?
A short deadline stops you from checking with your bank. Real offers do not vanish if you take an hour to confirm them in the app or at the branch. Check calmly in the app.