KYC Update Scam Calls: How the Fake Customer Care Script Works

The KYC update scam is one of the most common phone and SMS scams in India precisely because it borrows a real, familiar process — banks and telecom providers do periodically require KYC updates — and turns it into a pressure tactic.

How the script usually runs

• A call, SMS, or WhatsApp message claims your bank account, SIM, or wallet will be "blocked within 24 hours" unless you update your KYC immediately.
• You're asked to click a link (leading to a fake bank login page), share an OTP, or install a screen-sharing app "to complete the process."
• Some versions ask you to visit a nearby "KYC point" or ATM and follow instructions read out over the phone — a tactic used to walk victims through an actual fraudulent transaction in real time.

What a real KYC update actually requires

• Banks and telecom providers in India do not complete KYC updates over a phone call or by asking for an OTP read aloud.
• Genuine KYC updates happen in person at a branch, through your bank's official app, or via a secure upload on the bank's verified website — never through a link sent by SMS from an unknown number.
• No legitimate KYC process requires installing a remote-access or screen-sharing app.

The giveaways

• Extreme urgency — "blocked in 2 hours" is a pressure tactic, not how account suspensions actually work.
• A request for an OTP — an OTP is the one piece of information a bank never needs from you over a call.
• A link that doesn't match your bank's actual domain, even if it looks close.

If you've already responded

If you clicked a link and entered banking details, or shared an OTP, treat this as active financial fraud — call 1930 immediately. See The First Hour After Sending Money to a Scammer for exactly what happens next, and Why You Should Never Share an OTP for the reasoning behind this rule specifically.

Verifying independently

If you're genuinely unsure whether your KYC needs updating, call your bank directly using the number on your card or their official app — never the number provided in the message. If you want to check whether your phone number or email is already exposed in ways that make these calls sound more convincing, a Scan My Shadow report covers 1,500+ sources. This is one entry in our running field guide to what's actually circulating right now — see Common Scams in India Right Now (2026) for the rest.

Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.