Omozing Answers › Scams and fraud

Can phishing or identity fraud hurt my credit score?

Yes, but not directly. Being phished doesn’t touch your credit score by itself. The damage comes later, if a fraudster uses your PAN, Aadhaar or login details to apply for loans or cards in your name. Those applications add hard enquiries, any loan they get shows up as your account, and when nobody repays it, the missed payments pull your score down. Caught early, through a bureau alert or a look at your report, a fraudulent entry can be disputed and removed for free.

Written by the Omozing Credit Team · Reviewed for accuracy by our credit and compliance team · Updated October 2026

How a phishing attack reaches your credit report

Think of it as a chain. The first two links happen out of sight; your credit report only starts to show the damage from the third. The earlier you break the chain, the less there is to clean up.

From stolen details to a lower score

Not on your report yet Shows on your credit report 1 · PhishedYou share PAN,OTP or passwordon a fake page 2 · AppliesFraudster usesthem to applyin your name 3 · EnquiriesLenders’ hardenquiries landon your report 4 · New accountA loan or cardyou never tookis opened 5 · DefaultNobody repays;late EMIs loweryour score Stop it hereReport on 1930 or Chakshu,block cards, change passwords Or hereAct on the bureau alert:dispute what isn’t yours At the latestDispute andfile a report

Simplified illustration. Not every phishing attack leads to a loan in your name, but this is the route by which one can reach your score.

Which kinds of fraud affect your score, and which don’t

Loans or cards opened in your name

The biggest risk. They appear as your accounts and, unpaid, as your defaults. See what to do about a loan you never took.

Applications in your name

Even if the fraudster is turned down, each application can leave a hard enquiry. A burst of them can lower your score a little for a while.

Money taken from your bank account

Painful, but not a credit event. Your savings account isn’t reported to bureaus. Report it at once to 1930 and your bank.

Fraudulent spends on your own card

Report to the bank quickly and dispute the charges. Keep paying anything that is genuinely yours so a disputed bill doesn’t turn into a missed payment.

On card and account fraud, RBI’s 2017 rules on unauthorised electronic transactions work in your favour when you report fast. If the fraud came from a third-party breach and you report it within 3 working days of the bank’s alert, your liability is zero. Report it in 4 to 7 working days and your liability is capped. The bank must provisionally credit the money within 10 working days of being told. If you shared your OTP or PIN, you bear the loss until you report it, which is one more reason to report straight away.

What most people get wrong: they think that if no money left their bank account, there was no harm. Stolen PAN and Aadhaar details are often used weeks later to apply for credit, so the first sign may be an enquiry alert or a new account on your report, long after the phishing message is forgotten.

Catch it early: your credit report is the alarm

  1. Don’t ignore bureau alerts

    Credit bureaus send an SMS or email when your report is accessed. An enquiry you didn’t make is the earliest warning you’ll get.

  2. Read your full report

    You get one free full report from each bureau every calendar year. Check accounts, enquiries and addresses for anything unfamiliar. How to get it free.

  3. Dispute what isn’t yours

    Disputes are free and must be resolved within 30 days. If the deadline is missed, compensation of ₹100 a day applies. See how compensation works.

  4. Close the door

    Lock your Aadhaar biometrics through UIDAI (myAadhaar or mAadhaar), and when you share PAN or Aadhaar copies, write the purpose and date on them.

Found an account that isn’t yours?

Fraudulent entries can be removed for free. Our dispute guide shows what to send and to whom.

Think you can spot a scam?

Try our free 2-minute test: 12 real-style messages. How many can you catch?

Frequently asked questions

Does clicking a phishing link lower my credit score?

No. Clicking a link has no effect on your score. Your score is only affected if your stolen details are later used to apply for or take credit in your name.

Will a fraudulent loan be removed from my report?

Yes, once the lender and bureau confirm it wasn’t yours. Raise a dispute with the bureau, attach your police or cybercrime complaint, and follow up with the lender.

Can enquiries made by a fraudster be removed?

You can dispute enquiries you didn’t authorise with the bureau. Report the fraud as well, so there is a record supporting your dispute.

How will I know if someone used my PAN?

Watch for bureau alerts about new enquiries or accounts, and check your full report from each bureau at least once a year.

Does someone else’s fraud stay on my report for years?

It shouldn’t. Accurate negative information stays, but entries that were never yours are errors and must be corrected.

Next questions people ask:

Can someone take a loan using my PAN or Aadhaar? How do I spot a phishing email? I clicked a phishing link or shared my OTP. What do I do now?

Omozing is the digital lending brand of Aparampaar Finance Private Limited, an RBI-registered non-deposit-taking NBFC. Loans are subject to credit assessment. See our regulatory disclosures and grievance redressal process.