Your phone buzzes. It says it's from SBI-ALERTS or HDFCBANK. The message warns your account will be blocked unless you update your KYC immediately — and there's a link to click. Sound familiar?

This is one of the most common scams in India right now. Fake bank SMS messages are designed to look exactly like real ones — same sender name format, same urgent language, same professional tone. But one click on that link can hand over your banking credentials to a criminal.

The good news: once you know what to look for, you can spot a fake bank SMS in under 30 seconds.

How Fake Bank SMS Scams Work

Scammers use a technique called SMS spoofing — they can make a message appear to come from "SBI-ALERTS" or "HDFCBK" even though it's sent from a fake number. Your phone groups it with real bank messages in the same thread, making it look authentic.

The typical flow looks like this:

  1. You receive an urgent SMS — "KYC expired", "suspicious transaction detected", "account will be blocked in 24 hours"
  2. The message contains a link — it looks like a bank URL but leads to a fake website
  3. The fake website asks for your account number, debit card details, and OTP
  4. Once you enter these, the scammer has everything needed to drain your account

⚠️ Real banks in India — SBI, HDFC, ICICI, Axis — will NEVER ask for your OTP, card PIN, or full account number via SMS or a link.

Real Examples of Fake Bank SMS Messages

Fake SBI SMS — actual scam message
"Dear SBI Customer, Your KYC verification has expired. Your account will be blocked within 24 hours. Update now: bit.ly/sbi-kyc-update-2026 — SBI-ALERTS"
Fake HDFC SMS — actual scam message
"HDFC BANK: A suspicious login was detected on your NetBanking. Verify your identity immediately or your account will be suspended: secure-hdfc.in/verify — HDFCBK"
Fake ICICI SMS — actual scam message
"Your ICICI Bank account has been temporarily limited. To restore access, confirm your details: icici-secure-update.com — ICICIBK"

Notice the patterns: extreme urgency, a threat to block or suspend your account, and a link that doesn't end in the bank's official domain.

8 Red Flags to Spot a Fake Bank SMS

🚩 The link is not the bank's official website — Real banks only link to their own domain (e.g. onlinesbi.sbi, netbanking.hdfcbank.com). Any other URL is a scam.
🚩 It asks you to click a link to "update" or "verify" — Banks never ask you to verify KYC or personal details through an SMS link. Updates happen only at the branch or through the official app.
🚩 It threatens to block or suspend your account — This is the scammer's main tactic. Real banks give proper notice through official channels, not a single alarming SMS.
🚩 It asks for your OTP, PIN, or card number — No legitimate bank ever asks for these via SMS. Ever. Your OTP is yours alone.
🚩 The sender ID looks slightly off — Look carefully: "SBl-ALERTS" (capital i instead of I), "HDFCBNK" instead of "HDFCBK", or a mobile number instead of a sender ID.
🚩 Extreme urgency — "within 2 hours", "today only" — Urgency is designed to stop you from thinking clearly. Slow down. A real bank issue will not disappear in 2 hours if you ignore one SMS.
🚩 Poor spelling or grammar — Real bank communications are professionally written. Typos, unusual capitalisation, or awkward phrasing are warning signs.
🚩 You receive an OTP you did not request — If an OTP arrives without you doing anything, do not share it. Someone else may be attempting a transaction using your account number.

What Your Bank Will NEVER Ask For via SMS

✅ Memorise this list. No real bank in India will ever ask you for:

  • Your OTP (One Time Password)
  • Your debit or credit card PIN
  • Your NetBanking username or password
  • Your full account number to "verify your identity"
  • Your Aadhaar or PAN number via a link
  • Any money transfer to "unblock" your account

What to Do If You Get a Suspicious Bank SMS

  1. Do not click the link. No matter how urgent it sounds. Closing the message does not harm your account.
  2. Do not call any number in the SMS. Scammers put fake bank helpline numbers in these messages too.
  3. Call your bank directly. Use the number printed on the back of your debit card or on the official bank website. Not the number in the SMS.
  4. Check your account separately. Open your official bank app or visit the bank website directly (type the URL yourself — do not click from the SMS) to check if there is a real issue.
  5. Report it. Forward suspicious SMS messages to your bank's official fraud helpline. File a complaint at cybercrime.gov.in or call 1930.

If You Already Clicked the Link

Act immediately — every minute matters when your bank account may be at risk.

  1. Do not enter any details on the page you landed on. Close it immediately.
  2. Change your NetBanking password right now using the official app or website.
  3. Block your debit card temporarily via your bank app — you can unblock it once you're sure you're safe.
  4. Call your bank's 24/7 helpline and inform them of the incident.
  5. File a complaint at 1930 (National Cyber Helpline) — the sooner you report, the higher the chance of recovering any lost funds.

⚠️ If you have already shared your OTP or card details, call your bank immediately to block your account. Do not wait.

How to Verify If a Bank SMS is Real

Got a Suspicious Bank SMS? Check It Instantly

If you have received an SMS claiming to be from your bank and you are not sure if it is real, paste the full message into RealCheck. Our AI analyses the message and tells you in plain, simple language whether it looks like a scam — free, no login needed, works in Hindi and English.