How to tell a real message from a fake one
Scammers copy logos, names and even your real vehicle or account details. These checks help, but when in doubt, check it yourself through the official app or website, never through the message.
Who sent the SMS?
- Banks, companies and government offices send SMS from a sender name like VM-HDFCBK-T, not from a normal 10-digit mobile number.
- Since May 2025 the last letter shows the type of message: -T for transactions such as OTPs and bank alerts, -S for service updates, -P for offers and ads, -G for government.
- A bank "alert" from a 10-digit mobile number or a WhatsApp number is a strong warning sign.
- A correct-looking sender name is a good sign, but not proof. Never act on a link inside any message.
Read the web address carefully
- Indian bank websites are moving to addresses that end in .bank.in, as the RBI requires.
- Government websites end in .gov.in or .nic.in. A site that only looks old or official is not proof.
- Look at the end of the address, just before the first single slash: sbi.co.in.kyc-update.xyz/login ends with kyc-update.xyz, so that is the real owner, not SBI.
- Look for spelling tricks such as hdfcbnak, paytrn or amaz0n, and for short links like bit.ly that hide the address.
On WhatsApp
- Verified businesses show a verification tick next to their name. A company logo as the profile photo proves nothing.
- Police, courts and customs do not send notices or demand payments on WhatsApp.
- Some banks offer WhatsApp banking, but only from their verified account, and never ask for your OTP or PIN there.
Where to check things yourself
- Parcel or courier
- the courier's own app or website; India Post: indiapost.gov.in
- Electricity bill
- your electricity company's official app or your printed bill
- Bank account or KYC
- your bank's app, your branch, or the number printed on your card
- Report a fraud SMS, call or WhatsApp
- Chakshu on Sanchar Saathi
Rules that are always true
- No bank, company or government office will ever ask for your OTP, UPI PIN, CVV or password.
- You never need to enter a PIN to receive money. A PIN always sends money.
- There is no "digital arrest". Police never arrest anyone on a video call.
- Real jobs never ask you to pay a fee.
- Hurry and fear ("today", "tonight", "or else") are the scammer's main tools. Slow down and ask someone you trust.