SIM Swap Scam Awareness Guide for Indian Citizens

What is this scam?

The SIM Swap Scam involves fraudsters taking control of your mobile phone number by convincing your mobile service provider to switch your number to a new SIM card. This allows them to receive calls, messages, and OTPs meant for you, giving them access to your bank accounts and other sensitive information.

Scammers typically initiate this scam through various channels such as phone calls, SMS, or even social media. They may impersonate bank officials or telecom company representatives, creating a sense of urgency to manipulate their victims into providing personal information.

Once they gain control of your number, they can reset passwords for online banking and other accounts, making it easy for them to drain your funds. This scam is particularly dangerous because it can happen quickly and often without the victim's immediate knowledge.

In India, where digital transactions are on the rise, the SIM Swap Scam poses a significant risk, especially to those who may not be tech-savvy or aware of the latest fraud tactics.

60-second explainer

How it happens in real life

Ravi, a 60-year-old man from Pune, received a call from someone claiming to be from his bank. The caller informed him that there was a security issue with his account and that he needed to verify his identity. The caller requested Ravi's personal details, including his phone number and OTP.

Believing he was protecting his account, Ravi complied. Shortly after, he noticed that he was unable to receive calls or messages. When he contacted his bank, he learned that his SIM had been swapped, and the scammers had accessed his online banking, transferring money to their accounts. Ravi felt helpless and scared, realizing he had fallen victim to a sophisticated scam.

Got a suspicious call, message, or link? Do this immediately

These steps apply to almost every fraud in India — UPI scams, fake bank calls, job offers, investment tips, courier fraud, and government impersonation. Follow them before you share anything or pay anyone.

Stop — do not engage further

Hang up the call immediately — do not stay on the line out of politeness or fear.
Do not reply to the SMS, WhatsApp, Telegram, or email — even to say “wrong number”.
Do not click any link, QR code, or attachment they sent.
Do not call back numbers they give you — use only official numbers from your bank card or website.
If they claim urgency (“account blocked in 2 hours”), treat that as a scam signal and pause.
Tell the caller you will verify independently and end the conversation.

Never share or allow

Never share OTP, PIN, CVV, ATM PIN, or net-banking password — not even with “bank staff” or “police”.
Never approve a UPI collect request or enter UPI PIN to “receive” a refund — receiving money never needs your PIN.
Never install AnyDesk, TeamViewer, QuickSupport, or unknown APK files they ask you to download.
Never enable screen sharing or “remote help” on your phone or laptop for an unknown caller.
Never send photos of Aadhaar, PAN, passport, or bank statements to an unsolicited contact.
Never transfer money for “verification”, “processing fee”, “customs charge”, or “KYC update”.
Never share your SIM or swap SIM at a shop because someone on the phone told you to.

Block, delete, and disconnect

Block the phone number on your dialer and on WhatsApp.
Leave and report suspicious WhatsApp / Telegram groups.
Delete any app or APK you installed because they asked — uninstall fully, not just remove icon.
Mark the email as spam/phishing and delete it after saving evidence.
Turn off “Unknown caller” callbacks and do not add them to contacts.
If you joined a video call with them, leave immediately and close the app.

Save evidence before you delete anything

Screenshot the full chat, including phone number, profile name, and date/time.
Save SMS with sender ID and message text.
If safe and legal in your state, record a short clip of a repeat call for reporting.
Note the exact time, amount (if any), UPI ID, and transaction reference number.
Save emails with headers visible; forward a copy to yourself before deleting.
Photograph QR codes or payment pages they sent — do not scan them.
Write down what they claimed (bank name, department, officer name) while memory is fresh.

Verify independently — never through them

Call your bank using the toll-free number printed on your debit/credit card or passbook.
Visit your bank branch in person if large money or KYC is mentioned.
Open your bank or UPI app manually — never via their link — and check for alerts.
Search the organisation name on its official .gov.in or .co.in website, not Google ads.
Ask a trusted family member or friend before sending money or sharing OTP.
Use our message checker if you are unsure about a text or WhatsApp forward.

Protect your accounts and devices

Change net-banking and UPI PINs from a device you trust — not one they had you install software on.
Enable transaction limits and alerts in your bank app and UPI app (Paytm, PhonePe, GPay, etc.).
If you shared OTP or logged in on a suspicious link, call the bank fraud hotline to block cards/UPI.
Run a malware scan if you installed an unknown app; consider factory reset if remote access was granted.
Turn on two-factor authentication where available; use biometrics for UPI where supported.
Check your bank SMS history for unknown debits in the last 48 hours.

Report and warn others

Call 1930 (National Cyber Crime Helpline) if money was lost or you shared OTP/PIN.
File a report at cybercrime.gov.in — keep the acknowledgement number.
Inform your bank’s fraud desk and request account/card/UPI freeze if needed.
Warn family members — scammers often target the same household next.
Report the number to your telecom provider’s spam reporting channel (1909 for SMS spam).
Share a warning in your local community so others do not fall for the same script.

Also specific to this scam type

Do not share your OTP or any personal information.
Immediately block the number contacting you.
Delete any suspicious apps that may have been installed.
Take screenshots or record the conversation for evidence.
Verify the call by contacting your bank through official channels.
Warn family members about the scam to prevent them from falling victim.
Do not engage further with the scammer.
Report the number to your telecom provider.

How it works — step by step

Initial Contact
The scammer contacts the victim, often posing as a bank representative or telecom service agent. They create a sense of urgency, claiming there is a problem with the victim's account that needs immediate attention.
Gathering Information
The scammer asks for personal information, such as the victim's full name, phone number, and even OTPs. They may use this information to impersonate the victim when contacting the telecom provider.
Contacting the Telecom Provider
Using the information gathered, the scammer contacts the victim's mobile service provider, claiming to be the victim. They request a SIM swap, often using social engineering tactics to convince the customer service representative.
SIM Activation
Once the scammer successfully convinces the telecom provider, a new SIM card is activated with the victim's phone number. The victim's original SIM becomes inactive, cutting them off from their own number.
Accessing Accounts
With control over the victim's phone number, the scammer can now receive calls, messages, and OTPs. They can reset passwords for online banking and other accounts linked to that phone number.
Stealing Funds
The scammer transfers money from the victim's bank account to their own, often using various methods to cover their tracks. The victim may only realize what has happened after significant funds have been lost.

Why this scam works

The SIM Swap Scam succeeds due to several psychological factors. Scammers often create a sense of urgency and fear, making the victim feel that immediate action is necessary to protect their funds. This pressure can cloud judgment and lead to hasty decisions.

Additionally, scammers impersonate authority figures, such as bank officials or telecom representatives, which can make their requests seem legitimate. This exploitation of trust is a powerful tactic that can easily deceive even the most cautious individuals.

Who is most at risk

Individuals who are less tech-savvy, seniors, and those who frequently use online banking are often targeted. Scammers exploit their lack of knowledge about digital security and the urgency created by fraudulent calls.

What scammers say to pressure you

Sir, aapka account block ho jayega agar aap verify nahi karte.
Aapko OTP dena padega, sir, verification ke liye zaroori hai.
Yeh call bank se hai, aapko jaldi karna hoga.
Agar aapne yeh nahi kiya, to aapka number deactivate ho jayega.
Sir, aapki security ke liye yeh step lena zaroori hai.
Aapka SIM card update karna hai, sir, please cooperate.

Warning signs

Unsolicited calls claiming to be from your bank or telecom provider.
Requests for personal information, such as OTPs or account details.
Sudden loss of network connectivity on your phone.
Receiving calls or messages intended for someone else.
Notifications of SIM changes that you did not initiate.
Inability to receive OTPs for online transactions.
Unusual activity in your bank account, such as unauthorized transactions.
Requests for urgent action to 'secure' your account.
Calls from numbers that do not match official customer service numbers.
Pressure tactics used by callers to rush you into providing information.

Never do this

Never share your OTP with anyone.
Do not install apps like AnyDesk for remote access.
Avoid paying any 'processing fee' for account verification.
Do not approve unknown UPI collect requests.
Never share your Aadhaar photo with strangers.
Do not respond to unsolicited calls asking for personal information.
Avoid clicking on suspicious links sent via SMS or email.
Do not ignore unusual activity in your bank accounts.
Never disclose your personal information over the phone.
Do not trust calls from unknown numbers claiming to be from your bank.

How to verify before you trust

Call your bank's official helpline to verify any suspicious calls.
Check your bank app for any unauthorized transactions.
Contact your telecom provider directly using their official number.
Look for any notifications from your bank regarding account security.
Do not use contact numbers provided by the caller.
Verify the identity of the caller by asking them to provide specific information only you would know.
Check for any unusual activity on your mobile account.
Use official websites to check for alerts about scams.

How to stay safe

Sample scam messages — do not trust these

Real frauds often arrive as SMS, WhatsApp, or calls that look official. These are typical examples — banks and government never ask for OTP, call forwarding, or remote access this way.

SMS (call forwarding)
Dear Customer, Your SIM has been registered for call forwarding to +91-98XXXXXX21. If not done by you, contact us immediately.
SMS (porting)
Your mobile number porting request to Airtel/Jio is initiated. Share OTP sent to your phone to cancel.

Enable two-factor authentication on all online accounts.
Regularly update your passwords and use strong combinations.
Be cautious of unsolicited calls and messages.
Do not share personal information over the phone.
Keep your mobile number private and do not share it unnecessarily.
Monitor your bank statements regularly for unusual transactions.
Educate yourself about common scams and fraud tactics.
Use official apps for banking and avoid third-party apps.
Set up alerts for transactions on your bank accounts.
Report any suspicious activity to your bank immediately.
Avoid using public Wi-Fi for banking transactions.
Keep your phone's software updated to protect against vulnerabilities.

If you suspect a scam right now

If you suspect a SIM swap, immediately contact your telecom provider.
Change your online banking passwords right away.
Enable two-factor authentication if not already done.
Check your bank account for any unauthorized transactions.
Notify your bank about the potential fraud.
Block any suspicious numbers contacting you.
Do not respond to any further communication from the scammer.
Monitor your phone for any unusual activity.

Emergency recovery

Immediately call 1930 to report the fraud.
Visit https://cybercrime.gov.in to file a complaint.
Contact your bank to freeze your accounts if necessary.
Change passwords for all online accounts.
Notify your telecom provider about the SIM swap.
Check for unauthorized transactions and report them.
Keep records of all communications related to the scam.
Inform family members and friends about the scam.
Consider placing a fraud alert on your credit report.
Follow up with your bank and telecom provider for updates.

Call 1930 · cybercrime.gov.in

Official reporting

FAQ

What is a SIM Swap Scam?: A SIM Swap Scam occurs when fraudsters take control of your mobile number by convincing your telecom provider to switch your number to a new SIM card. This allows them to access your calls, messages, and OTPs.
How can I identify a SIM Swap Scam?: Look for warning signs like unsolicited calls from unknown numbers, requests for personal information, and sudden loss of network connectivity.
What should I do if I suspect I am a victim?: Immediately contact your telecom provider and bank, change your passwords, and report the incident to the authorities.
Can I recover my lost money?: While recovery is not guaranteed, reporting the incident quickly increases your chances of recovering lost funds.
How can I protect myself from this scam?: Enable two-factor authentication, be cautious of unsolicited calls, and regularly monitor your bank statements for unusual activity.
Is it safe to share my OTP with anyone?: No, you should never share your OTP with anyone, even if they claim to be from your bank or telecom provider.
What should I do if I receive a suspicious call?: Do not engage with the caller. Instead, hang up and verify the call by contacting your bank or telecom provider directly.
How do scammers get my personal information?: Scammers often use social engineering tactics, such as impersonating authority figures, to trick you into providing personal information.
What are the consequences of falling for a SIM Swap Scam?: Victims can lose access to their bank accounts and may suffer significant financial losses.
Can I report the scam even if I haven't lost money?: Yes, reporting the scam helps authorities track and prevent further incidents, protecting others from falling victim.