Phone Scams in India: Fake Caller ID, Spam Calls & the Lies That Empty Your Account
The number on screen says it's your bank. The voice sounds official. It knows your name and your last transaction. Within four minutes, your account is drained and the caller has vanished. Phone scams are India's most common fraud entry point — because your phone is always with you, always on, and always trusted. Here's everything you need to know to never be fooled again.
A Phone Call Is the Most Trusted Channel Scammers Have
Email has spam filters. SMS has some limitations. But a phone call from what appears to be a known, trusted number triggers an almost instinctive response to engage, comply, and respond. Fraudsters understand this deeply.
Phone fraud — or 'vishing' (voice phishing) — accounts for the initiation of nearly 87% of all cyber financial fraud in India according to MHA data. The caller doesn't need your username, password, or access to your device. All they need is your OTP — and a phone call is the easiest way to get it.
India's telecom infrastructure serves 1.1 billion subscribers, and the cost of placing thousands of scam calls per day using VoIP is negligible. A single call that yields ₹5 lakh more than covers the cost of a scam call operation running thousands of attempts simultaneously from a single rented facility.
Three Things No Legitimate Caller Ever Asks
- Your OTP. Not your bank, not TRAI, not the police, not SEBI. An OTP is a one-time password — no institution ever needs to hear it read aloud.
- Your full debit/credit card number together with CVV and expiry. Partial numbers used for verification are a separate matter — full card details are never needed on a call.
- To dial a USSD code (*21*, *67*, ##) to 'verify' your SIM or 'secure' your account. These codes activate call forwarding to the scammer's number.
- If a call makes you feel anxious or rushed, hang up immediately. Legitimate organisations do not mind when you say 'I will call back on the official number.'
- Caller ID is NOT proof of identity. The number on screen can be any number the caller chooses. Trust the content of the call, not the display.
8 Phone Scam Types Targeting Indians Right Now
Different scripts, different pretexts — but every phone scam ends the same way: extracting an OTP, a payment, or remote access to your device.
Caller ID Spoofing (Number Faking)
The caller displays your bank's official number, a government helpline, or even a relative's contact. The technology is freely available and undetectable by the recipient's handset.
KYC / Account Block Threats
Claims your bank, SIM, or wallet KYC expires in hours and will be blocked unless you 'verify' immediately. Creates extreme urgency to surrender Aadhaar, PAN, and OTP on the call.
Voice OTP Theft
The caller tricks you into forwarding your calls to their number by dialling a USSD code. Once call forwarding is active, every OTP sent to your number goes directly to the scammer.
Customs / Package Scam Calls
Caller claims a parcel in your name was seized at customs containing contraband. To 'avoid arrest', you must pay a clearance fee immediately. Often combined with digital arrest tactics.
Police / CBI Impersonation
Callers pose as officers from special units, claim your number is linked to illegal activity, and demand money for 'settlement'. May use official-sounding badge numbers and case IDs.
Missed Call Premium Rate Scams
A single missed call from a +92, +1, or unfamiliar international number. Calling back connects to a premium-rate line charging ₹30–300 per minute for as long as the call lasts.
Lottery / Prize Win Calls
Congratulates you on winning a prize in a draw you never entered. A 'processing fee' or 'GST deposit' is required before the prize can be released. The prize does not exist.
Remote Access / Tech Support Fraud
Callers pose as telecom or device company staff and warn of a 'virus' or 'illegal activity' on your device. They guide you to install remote access tools giving them full control of your phone.
How a Fake Caller ID Call Unfolds — Step by Step
Understanding this sequence in advance is the single most effective defence — because once you recognise the pattern mid-call, the psychology loses its power.
The Fraudster Picks a Target Number
They choose a number you're likely to trust — your bank's customer care, TRAI, CBI, or even a number in your own contact list. This takes seconds to set up using widely available VoIP services.
Your Phone Displays the Fake Number
The call reaches you with the spoofed number prominently displayed. Standard smartphones have no mechanism to detect this mismatch — the display is entirely controlled by the caller's signalling data.
The Caller Builds Credibility Fast
They greet you by name, cite your partial account number, location, or recent transaction — data bought from data breaches or leaked customer databases. This shocks you into believing the call is genuine.
Urgency and Fear Are Injected
DANGER ZONEA problem is announced — a suspicious transaction, an account about to be blocked, an arrest warrant. The urgency eliminates rational thinking and shortens the decision window dramatically.
Sensitive Information Is Extracted
DANGER ZONEOTP, full card number, CVV, PIN, UPI handle, Aadhaar — one piece at a time. Each question sounds routine. By the time the damage is obvious, enough information has been shared for complete account takeover.
Funds Are Drained and Contact Ends
With OTP and account access, funds are transferred within seconds. The call ends abruptly. Calling the same number back connects to the real bank — who knows nothing about the call. The spoofed number leaves no trace.
"The Number Matched My Bank. I Checked It Three Times." — A Real Account
Priya (name changed), a 44-year-old school principal from Pune, received a call at 11 AM on a Tuesday. The number displayed on her screen matched exactly the customer care number printed on her bank card — she'd saved it as "HDFC Customer Care" months earlier after a previous call.
The caller introduced himself as a senior fraud investigation officer, informed Priya of a suspicious transaction of ₹37,000 on her account at a Delhi merchant, and that her card was about to be temporarily blocked as a precaution. He then asked her to 'confirm her identity' by verifying her card number ending digits, account registered mobile number, and — lastly — the OTP that would arrive 'to confirm the fraud block was applied correctly'.
Priya received three OTPs. She read all three aloud because the caller explained each was for a different 'security step'. The call lasted nine minutes and sounded completely professional throughout.
Within 12 minutes of the call ending, ₹1,87,000 had been transferred from her account across three transactions — each authorised by the OTPs she had read aloud. When she called the real HDFC customer care (the same number — the one that had appeared on her screen), they had no record of any outbound call to her.
The number she saw was spoofed. The fraud investigation officer did not exist. The 'suspicious transaction' was invented to create the context in which handing over an OTP would feel logical — even prudent.
The Rule That Would Have Saved ₹1.87 Lakh:
No bank, ever, sends you an OTP and then asks you to read it aloud on a phone call. An OTP is a password that only you should know. The moment anyone asks you to voice an OTP, the call is fraudulent — regardless of the number shown.
The USSD Call Forwarding Trap — OTP Theft Without Any App
One of the most technically elegant phone scams requires no app installation, no link click, and no OTP from the victim. It just requires you to dial a USSD code the caller provides.
The pretext varies: 'Dial this code to verify your SIM is not being cloned', 'Enter this code to activate the fraud protection we're applying to your account', or 'Our system requires this to confirm your identity before unblocking your card.'
What these codes actually do: USSD codes like *21*[number]#,*67*[number]#, or*004*[number]# silently activate call forwarding on your SIM — redirecting all incoming calls (and voice OTPs) to the scammer's number, without any visible notification.
With call forwarding active, the scammer then initiates 'forgot password' flows on your banking apps and email accounts. The OTP that would ring to your phone goes instead to their device. Every account that relies on voice OTP is compromised without a single OTP ever reaching you.
*#21#Check active call forwarding status (safe — read only)##002#Deactivate ALL call forwarding on your SIM immediately#21#Deactivate unconditional call forwardingNEVER dial*21*, *67*, *004* as instructed by any caller — ever10 Red Flags of a Phone Scam Call
Any single one of these should make you end the call and verify independently.
The caller creates a sense of extreme urgency — 'act now or your account will be blocked in minutes'
Any request for your OTP, PIN, CVV, or full card number over a phone call
The caller asks you to dial a USSD code (e.g., *21*<number>#) — this activates call forwarding
Unexpected congratulations on a prize, lottery, or scheme you did not enter
Caller claims to be from CBI, ED, police, or Cyber Crime and threatens arrest for payment
Caller asks you to install an app — especially AnyDesk, TeamViewer, or Quick Support
A missed call from an unexpected international number — especially +92, +44, +1 area codes
Caller knows partial personal details (name, last 4 digits) and uses them to seem legitimate
Caller pressures you not to tell anyone or not to hang up — 'your call is being recorded for security'
Request to transfer money to a 'safe account' or 'RBI escrow account' to protect it
Phone Scam Myths vs. Reality
Myth
If the caller ID matches a number I already have saved, the call is definitely legitimate.
Reality
Caller ID is trivially faked. Any number can be displayed by any caller using freely available VoIP services. A matched display name only means the caller chose to spoof a number you trust — it is not identity verification.
Myth
I registered for DND, so I won't receive spam calls.
Reality
DND filters commercial promotional calls but does not protect against fraudulent calls, which use VoIP and constantly rotate numbers. DND is a useful reduction tool but not a security layer against scam calls.
Myth
Scam calls are obvious because they use poor audio quality or heavily accented voices.
Reality
Modern scam operations in India — especially those operating from call centres — use trained staff, scripted professionally in regional languages, with clear audio. Many victims describe the calls as indistinguishable from genuine customer service.
Myth
I'm safe because I never give away my password — I only shared the OTP.
Reality
An OTP is a one-time password. Sharing it is identical in consequence to sharing a password. Every OTP authorises a specific action — a transfer, a login, a password reset — the moment it is entered by anyone who has it.
Think You've Been Scammed Over the Phone? Do This Now.
The first 30–60 minutes are critical — bank account freezes are most effective within this window.
Hang up immediately
DO FIRSTYou can always call back the official number independently. The moment someone on an incoming call asks for your OTP, PIN, or any payment, the call is fraudulent — end it without explanation.
Check call forwarding status
DO FIRSTIf you dialled any USSD code during the call, dial *#21# to see if call forwarding is active. To deactivate all call forwarding, dial ##002# immediately. This prevents OTPs from being rerouted.
Contact your bank on the official number
Use the number on the back of your card or from the bank's official website — not a number provided by the caller. Report the incident and request a card block or account freeze if any information was shared.
Call 1930 — Cyber Crime Financial Fraud Helpline
If money was transferred, call 1930 immediately. Cyber cells can coordinate with banks to freeze destination accounts before funds are withdrawn. The window is typically 30–60 minutes.
File at cybercrime.gov.in
Submit your complaint with the spoofed number, call time, and any screenshots or recordings. Include your bank transaction reference if funds were lost. A complaint number is provided for follow-up.
Report the number to TRAI
Report the number via the Sanchar Saathi portal at sancharsaathi.gov.in or through the TRAI DND app. This contributes to the national spam call database and helps protect other users.
How to Reduce Spam Calls — Official Tools
Use these to cut down unwanted calls and report fraudsters
TRAI DND Registration
1909 / SMS 'START DND' to 1909
Register your number on Do Not Disturb to block unsolicited commercial calls and SMS
Sanchar Saathi Portal
sancharsaathi.gov.in
Report suspected fraud calls and check if a number has been reported by others
Cyber Crime Portal
cybercrime.gov.in
Report financial fraud linked to phone calls with transaction evidence
Cyber Crime Helpline
1930
Call immediately after financial phone fraud to request destination account freeze
TRAI DND App
Play Store / App Store
Official TRAI app to register DND preferences, report unwanted calls, and track complaints
Check Call Forwarding
Dial *#21#
See if call forwarding is active on your number. Dial ##002# to deactivate all forwarding.
Frequently Asked Questions
Answers to the most common questions about phone scams and spam calls in India.
What is caller ID spoofing and how does it work in India?
Can a scammer really make it look like my bank is calling?
What is a KYC update scam call?
What should I do if I shared my OTP with a caller?
How do I permanently reduce spam calls in India?
Is it safe to call back an unknown missed call?
Got a Suspicious Call?
Check It. Report It.
Check any phone number against India's largest crowd-sourced fraud database before you call back. Or report a scam call to protect the next person from the same number.
🇮🇳 Protecting 2M+ Indians from phone fraud · 100% Free · No registration required