Wallet KYC Expiry Scam
A message says your mobile wallet will be blocked unless you complete KYC today, and the link or caller asks for an OTP or remote access.
Digital wallets for recharges, bills and shopping do need identity checks from time to time, so a message about KYC does not sound strange. Scammers copy that language and add a deadline, claiming your wallet will be blocked tonight. The real KYC steps are done inside the official app. A link, a call or a request for an OTP is a sign that something else is going on.
How the scam works
The scammer sends a text or WhatsApp message that looks like it comes from a wallet company. It mentions a wallet balance at risk and a date by which the account will be frozen. A link leads to a page that looks like the real app's KYC form, asking for your phone number, ID details and, finally, an OTP sent to your phone.
If you call the number in the message or answer a follow-up call, an 'executive' guides you through the process. They may ask you to install a remote-help app so that they can 'complete it for you', or to read out the OTP and the last digits of your card. Each step is explained in a calm voice that makes it sound routine.
The OTP lets them log in to your wallet or approve a payment, and a remote app lets them see and use your screen. The wallet balance is moved out quickly, and the linked bank account or card may be used too. The scammer also gets your ID details, which can be used for other frauds after the money is gone.
An example of what you may see
Example only: 'Dear customer, your wallet KYC will expire today and your balance of Rs 6,400 will be frozen. Update now at the link given. If you face a problem, our executive will call you. Please share the OTP you receive to verify your number. Do not delay, the account will be blocked at 6 pm.' The link is not on the wallet company's own website. The caller adds that the wallet cannot be used for recharges until you finish, and asks you to stay on the line.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A KYC deadline arrives by SMS or WhatsApp with a link.
- You are asked to read out an OTP to 'verify' the KYC.
- The caller asks you to install a remote-help app.
- The page asks for your card details, PIN or net banking login.
- The balance and deadline are mentioned to create fear.
- The sender uses an ordinary mobile number, not a verified header.
What to do right now
- Do not tap the link or share any OTP.
- Open the wallet's official app yourself and check whether it shows any KYC notice.
- Use the support option inside the app or the number printed on the company's own website typed by hand.
- Delete any remote-help app you installed and restart the phone.
- Report the message on the Sanchar Saathi portal.
If you already paid or shared a code
- Call 1930 immediately and give the amount, time and number that contacted you.
- Contact the wallet company through its official app and ask to freeze the wallet.
- Tell your bank through the number on your card if a linked account or card was used.
- Report at https://cybercrime.gov.in with the message and call details.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's scam check can review a KYC message you paste and show the reasons it looks risky, such as a deadline, an OTP ask and fake authority, and the link check looks at lookalike addresses before you open them. Safeavio's phone scan can also point out apps installed from outside a store. It cannot tell whether your wallet really needs KYC.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How do I know if my wallet really needs KYC?
Open the official wallet app on your phone and look for a notice or a profile section about KYC. Do the steps there. A message with a link or a caller giving a deadline is not a safe way to find out.
Should I ever share an OTP for KYC?
No. A one-time password is a key to approve a login or payment. A genuine company will not ask you to read it out to a caller or type it on a page you reached from a message.
A remote-help app was installed during the call. What now?
Remove it, restart the phone, and change passwords and PINs for your wallet and bank. Call 1930 and your bank right away, because someone may have seen your screen and been able to use it.