Your bank sends you an OTP. Seconds later, someone calls — they sound official, they know your name, they say they're from the bank. They ask for that OTP "just to verify your identity."
If you share it, your account can be emptied in under 60 seconds. This is India's most common financial scam, and it works because the caller sounds completely legitimate.
⚠️ No bank, no government agency, and no company will ever ask you to share your OTP over a call, SMS, or WhatsApp. Ever. If someone asks — it is a scam.
What Is an OTP and Why Does It Exist?
OTP stands for One-Time Password. Your bank sends it to your registered mobile number as a second layer of security — to confirm it's really you making a transaction.
Think of it as a digital key that works only once and only for a few minutes. The moment you share it with someone else, you hand them that key — and they can walk right into your account.
Banks explicitly print "DO NOT SHARE THIS OTP WITH ANYONE" in every OTP message. This is not a suggestion. It is a warning about exactly the scam described in this article.
How OTP Scams Work — Step by Step
Scammers follow a very consistent pattern. Once you recognise it, you will never fall for it:
- They get your phone number — from leaked databases, social media, or a random call. Your number is not private in India.
- They initiate a transaction on your account — using details they already have (name, account number, card number — easily available from earlier leaks).
- Your bank sends you an OTP — because a transaction has been triggered. You receive it on your phone.
- The scammer calls you immediately — sounding like a bank officer. They already know you'll receive an OTP because they triggered it.
- They ask you to share the OTP — framed as "verification", "KYC update", "reversing a wrong transaction", or "upgrading your account".
- You share it — and the money is gone — within seconds, the transaction completes. Most UPI and net banking transactions are instant and irreversible.
Real Examples of OTP Scam Messages in India
These are the types of calls and messages Indians receive every day:
Notice the common thread: urgency (account will be blocked, limited time), authority (official-sounding caller), and a reason that sounds logical.
8 Red Flags That Tell You It's a Scam
What Happens When You Share Your OTP
The consequences depend on what the scammer is doing, but the most common outcomes are:
Immediate bank transfer
The scammer uses your OTP to authorise a transfer — NEFT, IMPS, or UPI — to their account. UPI transactions complete in seconds. Once the money leaves, getting it back is extremely difficult.
Net banking takeover
They use the OTP to reset your net banking password. Once they're in, they transfer everything available — including from linked accounts or fixed deposits.
New payee / beneficiary added
Some banks require OTP confirmation when you add a new payee. The scammer uses your OTP to add themselves as a trusted beneficiary, then transfers money freely later.
UPI app takeover (PhonePe, GPay, Paytm)
If the OTP is for registering a UPI app on a new device, sharing it gives the scammer full access to your UPI account — including all linked bank accounts. They can send money to anyone instantly. This is increasingly common because most Indians use PhonePe or GPay daily but rarely check their net banking.
⚠️ PhonePe, GPay, and Paytm will never call you. Any call claiming to be from these apps asking for an OTP is a scam — end the call immediately.
Credit card transaction
Online purchases often require an OTP. They complete a large purchase — electronics, gift cards — and have the items delivered to a different address.
What To Do Immediately If You Shared Your OTP
Act fast. Every second matters.
Step 1: Call your bank's official helpline immediately and ask them to freeze your account. SBI: 1800-11-2211 | HDFC: 1800-202-6161 | ICICI: 1800-1080
Step 2: Call the National Cyber Crime Helpline: 1930. Report the fraud. Do this even if money hasn't been transferred yet — they can sometimes block it.
Step 3: File a complaint at cybercrime.gov.in. You'll need: the scammer's phone number, the time of the call, and your transaction details.
Step 4: Block your debit card and net banking access immediately through your bank's app or website.
Step 5: File an FIR at your nearest police station. Bring your bank statement showing the fraudulent transaction. This is required for insurance claims and bank dispute processes.
⚠️ Do not panic-click on any link or call any number that contacts you after the fraud claiming to "help recover your money." This is a second scam targeting victims of the first.
How to Protect Yourself Going Forward
- Hang up without explaining yourself. You don't owe a scammer a reason for ending the call. Just hang up.
- Call your bank back using the number on the back of your card — not a number the caller gives you.
- Enable transaction alerts via SMS and email — so you know immediately if something happens on your account.
- Set a daily transfer limit on your net banking — reduces damage if you ever get compromised.
- Never save OTPs as screenshots. Delete them after use.
- Tell your parents and relatives about this scam. Older people are the most common targets.
The One Rule That Protects You Every Time
If you remember nothing else from this article, remember this:
🔐 Your OTP is like your ATM PIN. The moment someone else knows it — you have lost control of your money. No legitimate person will ever ask for it.
Stay safe. When in doubt, don't share.