Wallet KYC Expiry Scam through an app

How it looks through an app, the red flags and what to do.

Scam apps pretend to be a bank, a loan service, a game, a government service or a "support tool", and they ask for access to SMS, contacts, the screen or accessibility. Wallet KYC Expiry Scam is one of the ways this shows up: A message says your mobile wallet will be blocked unless you complete KYC today, and the link or caller asks for an OTP or remote access.

What wallet kyc expiry scam looks like through an app

A loan app that asks for contacts and photos.
A "KYC", "challan" or "bank rewards" app from a link.
An .apk file sent on WhatsApp or by SMS.

The scammer sends a text or WhatsApp message that looks like it comes from a wallet company. It mentions a wallet balance at risk and a date by which the account will be frozen. A link leads to a page that looks like the real app's KYC form, asking for your phone number, ID details and, finally, an OTP sent to your phone.

Red flags to check on the app

A KYC deadline arrives by SMS or WhatsApp with a link.
You are asked to read out an OTP to 'verify' the KYC.
The caller asks you to install a remote-help app.
The page asks for your card details, PIN or net banking login.
It has few or odd reviews, or a name with spelling changes.
It asks you to turn off Play Protect.

What to do

Do not tap the link or share any OTP.
Open the wallet's official app yourself and check whether it shows any KYC notice.
Use the support option inside the app or the number printed on the company's own website typed by hand.
Do not install it. If it is installed, uninstall it now (Settings, Apps).
Open Settings and check Accessibility, Device admin apps and Install unknown apps for anything you do not recognise.
Change the passwords of your bank and email from a clean device if the app had access.

Report the fake app to the store it came from and, if money moved, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

Call 1930 immediately and give the amount, time and number that contacted you.
Contact the wallet company through its official app and ask to freeze the wallet.
Tell your bank through the number on your card if a linked account or card was used.
Report at https://cybercrime.gov.in with the message and call details.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's scam check can review a KYC message you paste and show the reasons it looks risky, such as a deadline, an OTP ask and fake authority, and the link check looks at lookalike addresses before you open them. Safeavio's phone scan can also point out apps installed from outside a store. It cannot tell whether your wallet really needs KYC.

Check it before you tap or pay

Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.

Download for Android What the app does

Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.

Full guide: Wallet KYC Expiry Scam: how it works, signs and what to do. Other channels: SMS, WhatsApp, phone call.

Questions

How do I know if a app about wallet kyc expiry scam is a scam?

Check the red flags above: the app does not come from the official store listing of the company. it asks for accessibility, screen overlay, sms or contacts without a clear reason. When in doubt, do not act on the app; open the official app or website yourself or call the number printed on your card or bill.

What should I do first if I receive this app?

Do not install it. If it is installed, uninstall it now (Settings, Apps). Open Settings and check Accessibility, Device admin apps and Install unknown apps for anything you do not recognise.