An OTP — the one-time password your bank texts you — is the final lock on your money. Scammers have several ways to get it. Understanding each one is how you stop them.
The main ways OTPs get stolen
- Malicious apps reading your SMS. A side-loaded app with SMS or notification access silently forwards your OTPs to a criminal.
- Phone calls pretending to be support. “We need the OTP to verify your account” — no real bank or app ever asks you to read out an OTP.
- Fake payment screens. A cloned page tricks you into entering the OTP yourself.
- SIM swap. A criminal convinces your telecom operator to move your number to their SIM, so your OTPs go to them.
The rules that protect you
Never share an OTP with anyone, by voice, chat, or form — genuine staff never need it. Never install apps from chat links. Turn off SMS and notification access for apps that do not need it. If your phone suddenly loses signal for no reason, contact your operator immediately — it can be a sign of a SIM swap.
Add a second layer
Where possible, protect your bank and email with an authenticator app rather than SMS OTPs, and set a separate UPI PIN you never reuse. The harder your OTP is to reach, the safer your money.
Get help or report a scam
If you’ve lost money to a scam app, report it at cybercrime.gov.in or call 1930. If gambling is affecting your life or someone you love, you can reach the free, confidential mental-health helpline Tele MANAS at 14416. Asking for help early is a strength, not a weakness.
This article is for consumer awareness and harm prevention. It is not legal or financial advice.