OTP Scam in India: How It Works, Real Case Study & Recovery Steps (BNS Guide)

Fraudsters impersonate a bank/insurance/telecom agent and push you to share an OTP for “verification” or “KYC update”.

OTP is typically the final authorization step. Sharing it can allow immediate debit/withdrawal.

A person received a call from someone claiming to be from the bank.

The caller said KYC needs an urgent update and asked for an OTP for “verification”.

The victim shared the OTP. Within minutes, money was debited.

The fraud was realised only after the transaction alert.

1. Fake identity: bank/insurance/telecom support.
2. Urgency: “account will be blocked / KYC pending”.
3. Trust building: correct personal details (often leaked data).
4. OTP request: presented as verification.
5. Instant debit/withdrawal: funds move quickly through multiple accounts.

Commonly relevant provisions (high level):

• BNS 2023: Section 318(4) — cheating and dishonestly inducing delivery of property (earlier IPC 420)
• BNS 2023: Section 319(2) — cheating by personation (earlier IPC 419)
• IT Act 2000: Section 66C — identity theft
• IT Act 2000: Section 66D — cheating by personation using computer resources

Golden rule: act within minutes, not hours.

1. Call Cyber Fraud Helpline 1930 to attempt quick blocking of the transaction pipeline.
2. File a complaint online on the official portal and save the acknowledgement number.
3. Inform your bank immediately and request transaction reversal / freeze (share transaction IDs/UTR).
4. Block cards / net banking / UPI if there is any risk of continued access.
5. Preserve evidence: SMS alerts, call logs, screenshots, transaction details, and phone numbers.

Use the official cybercrime portal:

For emergencies, contact local police. National police helpline: 112 • National women helpline: 181 • Cyber Crime Helpline: 1930

In many OTP scams, the victim shares the OTP voluntarily, and banks may deny liability if authorization appears valid.

That is why speed (1930 + bank intimation) plus proper documentation and legal framing can materially improve recovery chances.

• Never share OTP — even with someone claiming to be from the bank.
• Banks generally do not ask OTP on calls for “verification”.
• Avoid unknown links and screen-share apps.
• Treat urgency and threats as red flags.

Use IPC ↔ BNS Converter (Vakilpedia):

Use EvidenceHash to preserve digital proof:

Read any bare act free on BareLex:

If you have lost money in an OTP scam, immediate action can improve recovery chances. You can consult a qualified advocate for cyber fraud recovery, FIR drafting, and bank dispute handling:

OTP scams happen in seconds—but recovery depends on how fast you act.

Awareness plus immediate reporting is the best defence.