SIM Swap Bank Fraud by email

How it looks by email, the red flags and what to do.

Email is slower than SMS, so these scams usually pretend to be a bill, a refund, an account lock or a job offer and ask you to log in or open a file. SIM Swap Bank Fraud is one of the ways this shows up: Fraudsters get a duplicate SIM issued for your number, receive your bank OTPs and drain your account. A sudden loss of signal is the first sign.

What sim swap bank fraud looks like by email

• A sender address that is almost, but not exactly, the real domain.
• A button that says "Verify account" or "View invoice".
• An attachment such as a PDF, ZIP or HTML file you did not expect.

The fraudster first collects your personal details through phishing links, fake KYC calls, leaked data or a chat in which you shared your name, date of birth and address. They may also gather your bank login details through a lookalike page. None of this is enough alone, because the OTP still goes to your SIM, so the next step is to take your number.

Red flags to check on the email

• Your phone loses network for a long time without a reason.
• A caller asks you to press a key or share a code for a SIM upgrade.
• You get bank alerts about password or number changes you did not make.
• A message about a new SIM request arrives that you did not ask for.
• The tone is urgent and the grammar is slightly off.
• Hover over the link: the address does not match the company website.

What to do

1. Never share a code or press a key for a SIM upgrade on a call.
2. If your signal drops, use another phone to call your operator on the number on your bill.
3. Call your bank from another phone and ask to block net banking and UPI.
4. If you typed a password on the page, change it at once and turn on two-step verification.
5. Do not open the attachment and do not press the button.
6. Go to the company website by typing it yourself and check your account there.

Use Report phishing in your email app. If money or accounts are affected, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. Call 1930 quickly from another phone and give the details and time.
2. Call your bank on the number printed on your card and block accounts, cards and UPI.
3. Ask your operator to block the duplicate SIM and issue a new one after identity checks.
4. Report at https://cybercrime.gov.in and change all banking passwords.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio includes a SIM-change alert for the anti-theft feature, which can tell the owner through the portal that the SIM in a protected phone has changed. That helps for a lost or stolen phone, but it cannot see a swap done by the operator on your number. Pay attention to a sudden loss of signal and call your bank from another phone.

Full guide: SIM Swap Bank Fraud: how it works, signs and what to do. Other channels: phone call, SMS, fake app.

Questions