Menu
Omozing Answers › Scams and fraud
Written by the Omozing Credit Team · Reviewed for accuracy by our credit and compliance team · Updated October 2026
These messages are short, so every line has a job. Here is a made-up example with six warning signs marked. “Your Bank” is a placeholder, not a real bank, and the numbers and link are invented.
A made-up example. “Your Bank”, the phone numbers and the link are invented. Real scam texts also arrive by WhatsApp and email, and use names of real banks, wallets and telecom companies.
The classic. Leads to a fake login page that captures your net-banking password and OTP.
Same trick with a different trigger. The form asks for card number, expiry and CVV.
An .apk file that can read your SMS, including OTPs. Install apps only from your phone’s official store.
A caller “helps” you complete KYC and asks for the OTP that arrives. That OTP is approving a payment or a login.
| Genuine bank | KYC scam | |
|---|---|---|
| Where you update | Official app, website ending in .bank.in, or the branch | A link in an SMS or WhatsApp |
| Deadline | Gives reasonable notice | “Today”, “within 2 hours” |
| OTP, PIN, CVV | Never asked for | Asked for “to verify” |
| Contact number | Printed on your card, passbook and official site | Given only in the message |
| Apps | From the official app store | An .apk file sent as a link |
Leave the link and the number alone. If you’re worried, open your bank’s app or call the number on your card.
Report the SMS under “Chakshu” on the Sanchar Saathi portal (sancharsaathi.gov.in), even though you lost nothing. Then delete it.
Call 1930 or file at cybercrime.gov.in at once, and block your card or net banking through your bank. RBI rules limit your liability for unauthorised transactions when you report quickly. See the first-hour checklist.
Lock your Aadhaar biometrics through UIDAI (myAadhaar or mAadhaar), and watch bureau alerts for enquiries you didn’t make. Can someone take a loan on your PAN?
An enquiry or loan you don’t recognise on your credit report can be disputed for free.
Try our free 2-minute test: 12 real-style messages. How many can you catch?
A bank can restrict an account if KYC is long overdue, but it tells you through official channels and lets you update in its app, on its website or at the branch, never through a texted link.
Indian banks have moved their websites to addresses ending in .bank.in. Even so, the safest habit is to type the address or open the bank’s app yourself.
Usually, yes. Close the page, don’t install anything it offers, and watch your bank messages for the next few days.
No. Genuine banks, lenders and credit bureaus never ask for your OTP, PIN, CVV or password.
Report it under “Chakshu” on Sanchar Saathi. If money was taken or you shared an OTP, call 1930 or file at cybercrime.gov.in.
Next questions people ask:
Omozing is the digital lending brand of Aparampaar Finance Private Limited, an RBI-registered non-deposit-taking NBFC. Loans are subject to credit assessment. See our regulatory disclosures and grievance redressal process.