One six-digit code can put your savings at risk. If you have accidentally shared an OTP with a fraudster, here are the steps you must take immediately to protect your money, secure your accounts and report the crime.
It takes only a few seconds for a scammer to trick someone into sharing a one-time password (OTP). A caller may claim that your KYC has expired, a parcel is stuck at customs, your electricity connection will be disconnected, or your bank account needs urgent verification. By creating panic, fraudsters pressure people into revealing confidential banking information.
The moment you share the code, they may attempt to transfer money, make unauthorised payments or gain access to your account. However, sharing an OTP does not automatically mean that your money is lost. Acting quickly can help prevent further damage and improve the chances of recovering stolen funds.
If you have made this mistake, do not panic or waste time arguing with the caller. Follow these six steps immediately.
1. Contact Your Bank and Block Access
Your first priority should be to prevent any unauthorised transaction. Call your bank's official 24-hour helpline or use its official mobile banking app to block the affected debit card, credit card, UPI service or internet banking facility.
Explain that you may have shared an OTP with a fraudster and ask the bank to secure your account. Depending on the situation, the bank may temporarily restrict transactions, disable digital banking access or take other protective measures.
Do not use a phone number provided by the suspicious caller or click links sent in their messages. Find the bank's contact details on its official website, banking app or card.
Even if you cannot see any suspicious transaction, take precautions immediately. Preventing an unauthorised payment is much easier than trying to recover money after it has been transferred.
2. Report the Fraud on 1930 Without Delay
If money has been debited or you suspect financial cyber fraud, call India's national cybercrime helpline at 1930 as soon as possible. You can also register a complaint through the official National Cyber Crime Reporting Portal.
Quick reporting is important because authorities may be able to alert the receiving bank and attempt to freeze the transferred funds before the fraudster withdraws or moves them elsewhere. However, freezing or recovering the money is not guaranteed.
Keep your bank statement, transaction reference number, suspicious phone number, OTP message and screenshots of conversations ready. These details can help investigators understand what happened.
If you report the incident through 1930, follow the instructions provided by the helpline, including completing the online complaint process within the specified period.
Remember, every minute matters when money is moving between accounts.
3. Change Your Passwords and Banking PINs
Once you have contacted the bank, secure your digital accounts. Change your internet banking password, UPI PIN and card PIN wherever necessary, using official banking channels.
If you use the same or similar passwords across multiple accounts, change those too. Your email account deserves special attention because access to it may allow criminals to reset passwords for other services.
Choose strong, unique passwords and avoid easily guessed details such as your date of birth or mobile number.
Check your banking and email accounts for unfamiliar devices or active sessions. Log out of unknown devices and revoke suspicious access wherever the service allows it.
Never share another OTP, password or PIN with someone claiming to be a bank employee. Genuine bank representatives do not need your confidential OTP or UPI PIN to help you report fraud.
4. Find Out What the OTP Was Meant to Authorise
Read the original OTP message carefully. It may mention whether the code was intended for a payment, a password reset, a login attempt, card verification or another activity.
Next, review your bank account and payment applications for unusual activity. Look for unfamiliar beneficiaries, unauthorised transactions, changes to card limits, unexpected UPI AutoPay mandates or registrations of unknown devices.
If you discover an unauthorised transaction, record its amount, date, time and transaction reference number. Share these details with your bank and include them in your cybercrime complaint.
Check recent transactions even if your account balance appears normal. Some fraud attempts involve changes to account access or payment permissions before money is transferred.
Do not assume everything is safe simply because no money has disappeared yet. An exposed OTP may have been used for an action other than an immediate payment.
5. Secure Your Phone and SIM Card
Your phone may be another point of vulnerability, especially if the caller persuaded you to install an application or share your screen.
Uninstall suspicious applications that you installed at the caller's request, particularly remote-access or screen-sharing tools. Review app permissions and remove SMS, accessibility or screen-sharing access from applications that do not genuinely need it.
If your mobile network suddenly stops working without a clear reason, contact your telecom operator immediately. A sudden loss of service can have several causes, but it may also indicate a SIM-swap attempt in which criminals try to obtain a replacement SIM to receive your messages and OTPs.
Ask your operator to investigate any unauthorised SIM replacement or account changes.
If you suspect your phone has been compromised, use a trusted device to change important passwords and contact your bank through a verified channel.
6. Keep Records and Follow Up in Writing
Document everything related to the incident. Record when you shared the OTP, when you contacted your bank, which transactions you reported and the complaint numbers you received.
Submit a written complaint to your bank through its official email address or grievance-redressal system. Clearly explain the incident, identify the disputed transactions and attach relevant evidence.
Under the Reserve Bank of India's customer-protection framework, liability for unauthorised electronic transactions depends on the circumstances, including the cause of the loss and how quickly the customer reports it. If the loss results from the customer's own negligence, such as voluntarily sharing payment credentials, the customer may bear the loss until reporting the transaction to the bank. Losses occurring after reporting are generally borne by the bank, subject to the applicable rules.
Therefore, reporting quickly is crucial, but sharing an OTP does not mean that every case has the same outcome.
If your bank does not resolve your complaint satisfactorily, or does not respond within 30 days, you may be eligible to approach the RBI's Integrated Ombudsman Scheme through the official RBI Complaint Management System.
The Golden Rule: Never Share an OTP
Fraudsters succeed by creating urgency and making people fear that something terrible will happen unless they act immediately. Whether the caller claims to represent a bank, courier company, government department or electricity provider, never reveal your OTP, UPI PIN or banking password.
If you have already shared a code, remember three priorities: contact your bank, report the incident and secure your accounts.
You cannot always prevent a scammer from attempting fraud, but a quick response can limit the damage. When it comes to digital banking fraud, acting within minutes can make a significant difference.
Comments
Post a Comment