Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
You searched for your bank’s customer care number, called what looked like a legitimate helpline, and someone on the other end walked you through “verification steps” that ended with your account emptied. This is one of the fastest-growing scams in India specifically because it exploits trust in search results, not suspicion of a random caller. Here’s exactly what to do.
Fraudsters deliberately post fake customer care numbers online — on fake websites, forum posts, or business listings — specifically engineered to rank in search results, sometimes even appearing above the genuine number. When you call, you reach a scammer, not your bank, who then asks for card details, OTPs, or convinces you to install a screen-sharing app under the guise of “troubleshooting” — and uses whatever you share to empty your account in real time.
Block your card and freeze net banking access through your bank’s official app (not the number you just called) — do this before anything else if you shared any sensitive information.
If you were guided to install a screen-sharing or “remote support” app, uninstall it immediately and run a full security scan — these apps are the mechanism through which many of these scams actually execute the fraud in real time.
Tell your bank exactly what happened — the number you called, what information you shared, and any app you installed — this context matters for both your liability claim and their own security response.
Report at cybercrime.gov.in or call 1930 immediately, given how quickly funds move once a scammer has live access during the call.
Where you found the number (a specific website, a search result, a business directory), report it to that platform directly — this helps prevent the next person from falling for the same fake listing.
This scam has caught genuinely careful people, including retired professionals who did everything that normally seems reasonable — searched, found a number, called it. The lesson isn’t to be more suspicious of phone calls; it’s to never trust a customer care number found through a general search. Always get your bank’s number from its official app, the back of your card, or a physical statement — never from a search engine result or a random website.
The moment a “support” call asks you to install a screen-sharing app, that’s an immediate red flag, regardless of how official or reassuring the conversation sounds — legitimate bank support does not need to see and control your screen to resolve an account issue. If you’re ever asked for this, end the call.
Because these scams often happen with the scammer having live, real-time access to your screen and device, funds can move within minutes of the call starting — this is precisely why reporting to your bank and the cybercrime portal needs to happen the instant you realize what occurred, not after you’ve had time to fully process it.
| Signal | What It Means |
|---|---|
| Number found via general web search | Treat with suspicion — verify through official channels only |
| Asked to install a screen-sharing app | A hard stop — legitimate support doesn't need this |
| Asked for your OTP 'for verification' | Never share this — no genuine bank process requires it |
| Number matches your bank's app/card exactly | Legitimate — this is the only way to verify a number |
Report to your bank immediately, and file on cybercrime.gov.in or via 1930. Report the fake listing to whichever platform hosted it.
Reporting to your bank, the cybercrime portal, and the hosting platform are all free.
Most cases proceed through the standard bank liability and cybercrime reporting process without needing a lawyer. Legal help becomes useful if your bank wrongly denies your claim despite this being a clear third-party deception case.
Need professional legal help with this?
Find a Lawyer on VidyodayFor the complete liability framework, see our pillar guide on RBI rules on unauthorized electronic transactions. For the broader picture of credential-compromise fraud, our guide on internet banking fraud covers other common mechanisms too.
Scammers use various techniques to get fake listings indexed and ranked, including fake business profiles, forum spam, and manipulated directory listings — this is a known, persistent problem search platforms actively work to combat but can’t fully eliminate.
An account number alone is generally not sufficient for a fraudster to complete a transaction, but report the call regardless — it establishes you were targeted and helps if related fraud attempts follow.
Compensation frameworks primarily address direct financial loss and, in escalated cases, mental harassment through consumer forums — this is worth raising specifically if you pursue a formal complaint beyond the basic bank process.
Report as soon as you realize, regardless of the delay — while faster reporting is always better for liability purposes, delayed recognition of a sophisticated scam doesn’t disqualify you from pursuing recovery.
Yes — cross-check it against your bank’s official app, the number printed on your card, or your latest account statement; these are the only sources you should trust for this specific purpose.
The same underlying scam pattern and precautions apply broadly to any customer care number found online, not just banking — the immediate response should be similar if you’ve shared sensitive information.
This is generally difficult and uncommon in practice — platforms typically aren’t liable for third-party content they didn’t create, though reporting and getting it removed remains the practical, effective response.
Uninstall and reinstall it fresh from the official app store if you continue to need it — don’t assume the version used during the scam call is still safe to keep on your device.
This article is for general information only and does not constitute legal advice. Liability determinations depend on the specific facts of each case — consult a cyber law lawyer for guidance specific to your situation.
