TL;DR: KYC update fraud is when scammers send fake "update your KYC or your account will be blocked" messages or calls, directing victims to phishing links or fraudulent apps that steal their banking credentials. Never update KYC through a link sent via SMS or WhatsApp. Go directly to your bank's app, official website, or nearest branch to update KYC, and never share OTPs with anyone.

👉 Scan my digital footprint — free 30-second check →

KYC update fraud is when scammers send fake "update your KYC or your account will be blocked" messages or calls, directing victims to phishing links or fraudulent apps that steal their banking credentials.

How KYC Update Fraud Works

A message or call, often impersonating a bank, wallet provider, or LPG/electricity company, warns that KYC is incomplete and the account or connection will be suspended within hours unless updated via a provided link. The link leads to a fake page or prompts installation of a screen-sharing app, through which credentials or OTPs are stolen.

Warning Signs to Watch For

Urgency about your account being blocked within hours, a link that doesn't match your bank or provider's official domain, and any request to install a remote-access app to "complete" KYC.

How to Protect Yourself

Never update KYC through a link sent via SMS or WhatsApp. Go directly to your bank's app, official website, or nearest branch to update KYC, and never share OTPs with anyone.

If this looks similar to something else you've seen, it's worth reading What Is Loan App Harassment? How It Works and How to Protect Yourself.

This pattern shows up elsewhere too — see What Is OTP Fraud? How It Works and How to Protect Yourself.

Frequently Asked Questions

What is KYC Update Fraud?

KYC update fraud is when scammers send fake "update your KYC or your account will be blocked" messages or calls, directing victims to phishing links or fraudulent apps that steal their banking credentials.

How does KYC Update Fraud typically work?

A message or call, often impersonating a bank, wallet provider, or LPG/electricity company, warns that KYC is incomplete and the account or connection will be suspended within hours unless updated via a provided link. The link leads to a fake page or prompts installation of a screen-sharing app, through which credentials or OTPs are stolen.

What are the warning signs of KYC Update Fraud?

Urgency about your account being blocked within hours, a link that doesn't match your bank or provider's official domain, and any request to install a remote-access app to "complete" KYC.

How can I protect myself from KYC Update Fraud?

Never update KYC through a link sent via SMS or WhatsApp. Go directly to your bank's app, official website, or nearest branch to update KYC, and never share OTPs with anyone.

What should I do if I think I’ve encountered KYC Update Fraud?

Stop responding immediately, do not click any links or share information, and report it to the appropriate authority. If money or personal information was already shared, act quickly to secure your accounts and report the incident.

Sources

Related Reading