Your phone buzzes: your bank account will be blocked within two hours unless you verify details through the link provided. The sender name looks like your bank. The panic feels real — and that is exactly what the sender is counting on. Across India, millions of such messages go out every day, imitating things we already trust: our bank, our delivery apps, our employers.
This list covers the ten online scams ordinary Indians encounter most often, chosen from the fraud patterns banks, payment apps, and the national cybercrime helpline warn about most frequently. For each one, you will learn how it actually works, who it tends to target, and the honest weakness in the “easy fix” people usually try first.
1. UPI collect requests disguised as payments
A “buyer” on a classifieds site sends a UPI collect request and asks you to enter your PIN to “receive” payment. In reality, entering a UPI PIN always authorizes a payment from you — you never need a PIN to receive money. This targets sellers on second-hand marketplaces and anyone new to UPI. Since fake requests look identical to real ones, the only reliable rule is: never enter your UPI PIN when you expect to be paid. If a buyer insists, walk away.
2. Fake KYC-update calls and SMS
A call or text claims your bank, wallet, or SIM KYC is expiring and will be blocked today. The caller asks you to download an app, share an OTP, or click a link to “re-verify.” Real banks almost never collect KYC through random calls or links; they use their official app or branch visits. This targets anyone with a bank account, especially older users. Genuine reminders can look similar, so hang up and call your bank’s official number yourself — after learning how to tell real bank alerts from fake SMS alerts.
3. OTP-sharing fraud
A stranger calls pretending to be from your bank, a courier company, or a government office, and asks you to read out the OTP that just arrived. Sometimes they trigger the OTP by starting a transaction on your account. The OTP is the final lock on your money — once shared, the fraudster can complete payments or reset passwords. This targets everyone, but especially people never told that no legitimate company asks for an OTP. Scammers manufacture urgency so you act before thinking; pair the “never share” rule with a sixty-second pause and it becomes far stronger.
4. Fake customer-care numbers in search results
You search for a customer-care number, call the first result, and the “agent” asks for card details or an OTP to “resolve” your issue. Fraudsters plant fake listings so their number ranks above the real one. This targets anyone with a problem to fix — which is when we are least careful. The results genuinely look trustworthy, so the fix is boring but effective: take support numbers only from the official app, the back of your card, or the company’s verified website. One extra minute, and that minute is the whole point.
5. Job offers that ask for a registration fee
A message offers a work-from-home job, then asks for a “registration” or “training” fee before you start. Real employers absorb such costs or deduct them from salary; they do not collect fees from applicants. This targets students, fresh graduates, and homemakers seeking flexible income. The weakness in glancing at the company’s website is that scammers now build convincing fake sites too. Use the step-by-step method for verifying suspicious messages before paying anything, and treat any upfront fee as a red flag by default.
6. Fake delivery and order-update links
“Your parcel is held at the warehouse — pay a small fee to release it,” says a text, arriving just as you expect a package. The link leads to a lookalike page that harvests card details. This targets online shoppers, and its timing is what makes it dangerous. Real couriers also send links, so the fix is different: open your shopping app or the courier’s official site directly and check tracking there — never through the message’s link. One small detour that closes the whole trick.
7. Fake investment groups promising high returns
A chat group shows “members” posting profit screenshots while an “expert” offers to trade on your behalf. Small early withdrawals are allowed to build trust; larger deposits then vanish. This targets people hoping to grow savings quickly, including many first-time investors. A small “test” deposit is designed to succeed — the trap closes on the second, bigger one. Any scheme promising unusually high, risk-free returns gets the same treatment: walk away, no matter how real the screenshots look.
8. Lottery and prize-winning messages
Congratulations — you have won a lottery, a phone, or cash you never entered. To claim it, just pay “taxes” or “processing fees” first. Real lotteries do not ask winners to pay upfront. This targets a wide audience, with older and less internet-experienced users hit hardest. These messages now arrive as polished graphics from familiar brand names, so “too obvious to work” no longer applies. The rule stays simple: if you did not enter, you did not win — and a prize that costs money to claim is not a prize.
9. SIM-swap fraud
A fraudster gets your mobile operator to issue a duplicate SIM in your name using stolen identity details. Suddenly your phone loses signal — and every OTP meant for you goes to the criminal instead, unlocking bank accounts and wallets. This targets people whose documents leaked through earlier data breaches. You cannot fully prevent this yourself; it exploits the operator’s process, not your phone. Treat sudden, unexplained signal loss as an emergency and contact your operator immediately, and follow the practical tips to protect your money from UPI fraud to shrink the damage window.
10. Fake tech-support pop-ups and remote-access apps
A pop-up warns your phone is infected and shows a helpline number. The “technician” asks you to install a remote-access app so they can “fix” it — then watches you type banking passwords. This targets less tech-confident users through scary full-screen warnings. Antivirus software cannot stop this: the attack needs no virus, only your permission. The real defense is a hard rule — never install remote-access apps at a stranger’s request, and never call numbers shown in pop-up warnings. Close the tab instead.
Before You Trust Any Money-Related Message: What to Consider
Every scam above runs on the same three fuels: urgency, authority, and secrecy. Before trusting any money message, ask three questions. Did I expect this contact, or did it arrive from nowhere? Is it asking me to act immediately, share a code, or pay upfront? Can I verify it through a channel I chose — the official app, the number on my card, the site I typed in myself? If it fails any of these, pause. Scammers can fake a name, a logo, and a website — but not the official app on your phone. Genuine deadlines survive a one-hour pause. For a deeper foundation, the complete beginner’s guide to staying safe from online scams builds the mindset that makes all of this second nature.
Keep Reading
- How to Verify a Suspicious Message or Link Before You Click
- Bank Alerts vs Fake SMS Alerts: How to Tell the Difference
- The Complete Beginner’s Guide to Staying Safe From Online Scams
- 12 Practical Tips to Protect Your Money From UPI Fraud
No app makes you scam-proof; the scams adapt faster than any tool. What works is a small set of habits — pausing before acting, verifying through your own channels, never sharing codes or installing apps at a stranger’s request. Learn these ten patterns and most fraud attempts will bounce off you like rain off an umbrella.
