OTP Aur Phishing Scam Se Kaise Bachein? Poora Tarika Aur Red Flags
“Aapka card block ho jayega, OTP bataiye” — is ek line se hazaaron log apna paisa gawa dete hain. OTP fraud aur phishing links kaise kaam karte hain aur khud ko kaise bachayein, poori jaankari.
OTP (One-Time Password) banaya hi is liye gaya tha ki sirf aapke account se transaction hote waqt aapke paas hi verification code aaye — koi aur use na jaan sake. Lekin scammers ne isi system ko target banaya hai: wo aapko itna convince kar dete hain ki aap khud apna OTP unhe bata dete hain. Phishing bhi isi family ka scam hai — fake links ya fake websites ke zariye aapki banking details chura li jaati hain. Dono ka result same hota hai: aapke account se paisa nikal jaata hai, aur aksar aapko pata bhi der se chalta hai.
Koi bhi bank, payment app, ya government agency aapse call, SMS, ya email par kabhi OTP nahi maangti — na “verification” ke naam par, na “KYC update” ke naam par, na “refund process” karne ke naam par. Agar koi maang raha hai, wo scammer hai, chahe wo kitna bhi genuine sound kare.
OTP Aur Phishing Scam Kaise Hote Hain
1. Fake “Bank Officer” Ka Call
Scammer khud ko aapke bank ka employee bataye call karta hai — kehta hai ki aapka card “block hone wala hai” ya “suspicious activity” detect hui hai, aur “verify karne ke liye” OTP maangta hai. Ye urgency jaan-boojh kar banayi jaati hai taaki aap sochne ka time na lein.
2. Phishing SMS/Email Mein Fake Link
Aapko ek SMS ya email milta hai jisme link diya hota hai — “aapka KYC expire ho raha hai,” “electricity bill due hai,” ya “parcel delivery fail hui hai, details update karein.” Link kholne par ek page khulta hai jo bilkul asli bank/company ki website jaisa dikhta hai, lekin URL thoda different hota hai. Wahan card number, CVV, aur OTP daalte hi wo seedha scammer ke paas chala jaata hai.
3. SIM Swap Fraud
Ismein scammer aapki personal details (jo aksar social media ya data leaks se mil jaati hain) use karke telecom store jaakar khud ko aap batakar ek duplicate SIM issue karwa leta hai. Aapka asli SIM band ho jaata hai, aur ab saare OTP seedhe scammer ke naye SIM par jaate hain — bina aapko kuch bhi share kiye.
4. Malicious QR Code Ya App Ke Zariye
Kabhi-kabhi ek fake QR code ya third-party app (jo Play Store ke bahar se install karwaya jaata hai) aapke phone par background mein SMS padhne ki permission le leta hai — isse OTP aapko dikhne se pehle hi scammer ke system tak pahunch jaata hai.
Maan lijiye ek shaam ko phone par call aata hai: “Sir, aapke debit card par ek suspicious transaction try hui hai, hum ise block kar rahe hain, bas verify karne ke liye jo OTP abhi aapke phone par aaya hai wo bataiye.” Ghabrahat mein OTP bata diya jaata hai — aur do minute baad ek SMS aata hai ki account se ₹18,000 debit ho gaye. Jab bank ko call kiya jaata hai, pata chalta hai ki bank ne koi call kiya hi nahi tha. Ye example sirf ek common pattern samjhane ke liye banaya gaya hai, kisi real vyakti ya ghatna se sambandhit nahi hai.
Illustrative example — real case nahi.
- Koi bhi call/SMS/email OTP, CVV, ya card PIN maange — chahe wo kitna bhi official sound kare
- Message mein urgency ho (“abhi verify karein varna account band ho jayega”)
- Link ka URL bank/company ke asli naam se thoda alag ho (spelling galat, extra words, ajeeb domain extension)
- Unknown number se call aaye jo khud ko bank/company official bataye
- Achanak aapka phone signal chala jaaye aur “No Service” dikhaye bina kisi wajah ke — ye SIM swap ka sign ho sakta hai
- Koi aisi website aapse login details ya OTP maange jise aapne khud type karke nahi khola, sirf link se pahunche hain
Agar OTP Share Ho Gaya Ya Phishing Ka Shikaar Ho Gaye Toh Kya Karein
Speed sabse zaroori hai — jitni jaldi action lenge, paisa bachne ya wapas milne ke chances utne zyada honge.
- Turant apne bank ko call karke card/account temporarily block karwayein — bank ki official app ya customer care number se, Google search se mile number se nahi.
- UPI app mein bhi transaction turant dispute/report karein agar payment UPI se hui ho.
- National Cyber Crime Helpline 1930 par call karein — ye RBI/Home Ministry ka official helpline hai jo banks ke saath directly coordinate karta hai transaction hold karne ke liye.
- cybercrime.gov.in par official complaint file karein — complaint number sambhal kar rakhein, bank follow-up ke liye zaroori hoga.
- 3 working days ke andar bank ko likhit mein bhi inform karein — RBI ke “Limited Liability” rule ke mutabik, agar unauthorised transaction turant report kiya jaaye, toh zyadatar cases mein bank paisa wapas credit karne ke liye liable hota hai.
- Agar SIM swap ka shak ho, apne telecom provider ko turant call karein aur SIM block/reissue karwayein.
- Fraud number/SMS ko sancharsaathi.gov.in/sfc (Chakshu) par report karein — ye Department of Telecommunications ka portal hai jo fraud calls/SMS report karne ke liye hai.
Kahan Report Karein — Quick Reference
1930
National Cyber Crime Helpline — financial fraud ke liye turant call karein.
Cyber Crime Portal
cybercrime.gov.in
Chakshu (Sanchar Saathi)
sancharsaathi.gov.in/sfc
Future Mein Bachne Ke Liye — Simple Habits
- Yaad rakhein: OTP sirf apne liye hota hai — kisi bhi wajah se, kisi ko bhi share na karein
- SMS/email mein aaye kisi bhi link par click karne se pehle URL dhyaan se padhein, ya better hai — bank/company ki website seedhe browser mein type karke khud kholein
- Bank ka customer care number sirf unki official website ya card ke peeche se lein, Google search se nahi
- Apna phone signal achanak gayab ho jaaye bina kisi wajah ke, toh turant apne telecom provider se confirm karein
- Koi bhi app Play Store ke bahar se (APK link) kabhi install na karein
- Family ke senior members ko bhi OTP scam ke red flags samjhayein — wo aksar sabse zyada target kiye jaate hain
Frequently Asked Questions
Nahi, kabhi nahi. Bank apne khud ke system mein OTP generate aur verify karta hai — usse aapse OTP maangne ki koi zaroorat nahi hoti. Koi bhi call/SMS jo OTP maange, wo automatically suspicious hai.
Link kholne se turant paisa nahi jaata, lekin agar us link ke page par aapne koi details (card number, CVV, login) daal di hain, toh risk hai. Safe rehne ke liye us page par kuch bhi type na karein, tab band karein, aur agar shak ho toh apne bank se seedha confirm karein.
Sabse bada sign hai aapka phone signal achanak “No Service” dikhana bina kisi network issue ke — matlab aapka number kisi aur SIM par activate ho gaya hai. Aisa ho toh turant apne telecom provider ko call karke confirm karein.
Depend karta hai kitni jaldi report karte hain. RBI ke Limited Liability rules ke mutabik, agar aap turant (3 working days ke andar) apne bank ko likhit mein inform karte hain, toh zyadatar cases mein bank refund ke liye liable hota hai. Jitni der karenge, recovery utni mushkil hoti hai.
Asli bank/company ke domain se milta-julta lekin thoda different URL (extra words, galat spelling, ajeeb extension jaise .xyz ya .info) dekhein. Sabse safe tarika hai link par click hi na karein — company ki website browser mein khud type karke ya official app se hi kaam karein.
Ye article sirf jaankari ke liye hai, ye legal ya financial advice nahi hai. Fraud ki situation mein turant apne bank aur official helplines se sampark karein. Jaankari accuracy ke liye check ki gayi hai, lekin rules/processes time ke saath badal sakte hain — latest details ke liye official sources (RBI, cybercrime.gov.in, sancharsaathi.gov.in) verify karein.
Scam Awareness Series Mein Aur Bhi Guides Hain
UPI Fraud, Fake Loan Apps, Fake Job Offers, aur Chit Fund scams jaise topics par bhi detailed guides available hain.