Phone scams often arrive during a busy moment, disguised as a missed delivery, expiring account or urgent refund. They work by persuading you to act before you check where the message came from. Rather than memorising every new phishing script, learn a repeatable pause-and-verify routine. It works whether the message comes by SMS, WhatsApp, email or a voice call.

Five patterns worth recognising

1. “Your KYC/account will be blocked”

The message creates a deadline and gives you a link or phone number. The safer response is to ignore the link and open the bank or service through its official app/site.

2. Fake customer care

A user searches for support, calls an unofficial number and is asked to install a remote-access app, share an OTP or make a “verification” payment. Start from the company’s own website or app instead.

3. UPI refund or collect-request fraud

The attacker claims you must approve a request or enter a UPI PIN to receive money. A PIN authorises a debit; do not approve an unexpected collect request.

4. Digital-arrest impersonation

A caller claims to be police, customs, CBI, TRAI or another authority, insists you stay on video, threatens secrecy and demands money for “verification” or “safe custody.” End the call and independently verify through official channels.

5. Job/task scams

A supposed job starts with small paid tasks, then requires the victim to deposit money to unlock commissions or withdraw a balance. A job that requires repeated deposits to get paid is a major warning sign.

The 60-second verification rule

  1. Stop the conversation without clicking or paying.
  2. Open the organisation’s official app/site yourself.
  3. Use the phone number published there, not the number in the message or search result.
  4. Ask whether the request really exists on your account.

If you already paid or shared credentials

Contact the bank/payment provider immediately, call 1930, file at cybercrime.gov.in, preserve evidence and change affected credentials from a trusted device. If remote-access software was installed, remove it and review device/account access.

About the evidence

This guide describes common fraud patterns; it does not claim that every scam uses the same script or that any response guarantees recovery.

Primary sources

What this means in practice

Do not reply to a suspicious message just to test whether the sender is genuine. Instead, open the service's app or type its known address yourself. If you entered a password, change it from a trusted device, revoke suspicious sessions and secure the associated email account. Keep screenshots for a report.

Related CSNR guides