A message warning that your bank account will be blocked or your KYC has expired can make anyone anxious. But before clicking a link or following its instructions, pause and check whether the message is genuine.
This type of fraud, known as SMS phishing or smishing, involves scammers posing as banks to trick customers into revealing sensitive information, clicking fake links or downloading malicious apps.
The messages often create urgency, making people act before they have time to verify the details. A few simple checks can help you avoid falling into the trap.
Scammers send messages claiming that your bank account needs an immediate update, your debit card will be blocked or your KYC details have expired.
The message may contain a link to a fake banking website or ask you to download an application. These can be used to steal banking credentials, card details and OTPs, potentially allowing fraudsters to carry out unauthorised transactions.
5 Signs That A Bank SMS Could Be Fake
1. It creates panic: Messages threatening to block your account immediately are designed to make you act without thinking.
2. It contains a suspicious link: Look for unfamiliar website addresses, shortened URLs or slight spelling changes in a bank’s name.
3. It asks for confidential details: Never share your OTP, PIN, password or CVV in response to a message or call.
4. It asks you to download an app: Avoid installing APK files or unfamiliar apps sent through SMS.
5. It asks you to call an unknown number: Verify the contact details through your bank’s official website or app instead.
Remember, even a message that appears to come from your bank may be fraudulent.
In January 2026, a police constable posted at Vikhroli police station in Mumbai allegedly lost ₹12.5 lakh after clicking on a fraudulent APK link.
According to a Times of India report, the malicious link compromised her phone and her registered mobile number became inactive, preventing her from receiving important banking alerts. Investigators later found that a fraudulent loan of ₹12.5 lakh had been taken in her name and the money transferred to another bank account.
The case shows how a malicious link can put both your phone and your finances at risk.
What Should You Do If You Receive A Fake SMS?
-
Do not click on links or download apps sent through unexpected messages.
-
Check account alerts through your bank’s official app or website.
-
Never share your OTP, PIN or password.
-
If you suspect fraud, contact your bank immediately and report the incident.
If money has been lost to cyber fraud in India, call 1930 or file a complaint at the National Cyber Crime Reporting Portal .
Reader’s Note: A genuine-looking bank SMS is not proof that it is safe. Pause, verify the message independently and never let an urgent warning push you into sharing sensitive information.
