The easiest way to avoid scams is to stop before you act. Most scams try to make you do something quickly: send money, click a link, share an OTP, download an app, accept a job offer or invest before you have enough time to think.
Some immediate red flags are:
“Act now or your account will be blocked.”
“You have won a prize.”
“Pay first to receive your refund.”
“Guaranteed returns with zero risk.”
“Share the OTP for verification.”
“You are under digital arrest.”
“Download this app so I can help you.”
RBI has specifically warned about fraudsters using both tempting offers and threats while impersonating banks or officials.
What I've realized about scams is that they don't always look stupid. Good scams are designed to look believable. So being intelligent isn't enough; having the habit of verifying things is what actually protects you.
Protect Credentials
Never share your:
OTP
UPI PIN
ATM PIN
CVV
Banking password
Email password
Recovery codes
RBI repeatedly advises users not to disclose PINs, OTPs or passwords.
Also use different passwords for important accounts and enable two-factor authentication where available.
One simple rule works surprisingly well: if someone calls you and asks for an OTP, the conversation should basically end there.
Verify Identity
A profile photo, company logo, caller ID or even someone's name appearing correctly on WhatsApp does not prove identity.
If someone claims to represent your bank, police, courier company, employer or government department, don't verify them using the number or link they themselves provided.
Find the organization's official website or app independently and contact it from there.
I4C specifically recommends independently verifying suspicious callers, including people claiming to be law-enforcement officials.
Link Safety
Don't immediately click unexpected links received through SMS, WhatsApp, email or social media.
Look for:
Misspelled domains
Strange shortened URLs
Fake login pages
Unexpected attachments
APK/app download links
Messages creating artificial urgency
Typing the official website yourself takes maybe 20 extra seconds. Losing access to an account takes considerably longer to fix.
Payment Safety
Before sending money, verify the recipient name and amount.
Remember something especially important with UPI: you enter your UPI PIN to authorise a payment, not simply to “receive money.”
Also avoid scanning random QR codes because someone promises that doing so will credit a refund or prize.
For larger or unfamiliar payments, I would rather verify twice and look slightly paranoid than realise five minutes later that the money went exactly where the scammer wanted.
Job/Investment Scams
Job scams often promise easy work and unusually high income but ask you to pay registration, training, equipment or security fees first.
Investment scams work differently but use similar psychology:
“Guaranteed profit.”
“Double your money.”
“Only available today.”
“Everyone in our group is earning.”
Don't confuse screenshots of profits with evidence.
Before investing, check whether the platform and intermediary are appropriately regulated, understand where your money is actually going and be extremely suspicious of guaranteed high returns.
AI Scams
AI has made scam detection harder.
Voice cloning, deepfake videos, realistic phishing messages and impersonation can make fraudulent communication look or sound surprisingly convincing.
If someone you know suddenly calls asking for emergency money, especially from an unfamiliar number, verify through another channel. Ask something only the real person would reasonably know or call them back on their usual number.
The old rule “I heard their voice, so it must be them” isn't as reliable anymore.
What to Do After Fraud
If you've already transferred money, don't spend hours feeling embarrassed or arguing with the scammer.
Act quickly.
In India, financial cyber fraud can be reported through the National Cyber Crime Helpline at 1930 and the government's National Cyber Crime Reporting Portal.
Immediately contact your bank/payment provider too. Save transaction IDs, screenshots, phone numbers, messages, emails and other evidence; the cybercrime portal asks for transaction and supporting details when financial fraud is reported.
Quick Checklist
Before clicking, paying or sharing anything, ask:
Who is contacting me?
Can I independently verify them?
Why are they rushing me?
Why do they need my OTP/PIN?
Does this offer sound unrealistically good?
Can I verify the website myself?
What happens if I wait five minutes?
That tiny gap between receiving a message and reacting to it can save you from a very expensive mistake.
FAQs
How can I identify an online scam?
Unexpected requests for money, urgency, suspicious links, guaranteed returns, requests for credentials and impersonation are major warning signs.
Can banks ask for my OTP or PIN?
You should never disclose your OTP, PIN or password to someone contacting you. RBI advises customers to keep these credentials confidential.
What is a digital arrest scam?
It is an impersonation scam where fraudsters pretend to be police or government officials, accuse victims of crimes and pressure them into transferring money. I4C has issued specific warnings about this tactic.
Where should I report online fraud in India?
Report cyber financial fraud immediately through 1930 or the National Cyber Crime Reporting Portal.
Must Read: What are the scams happening in India now?
