Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
A “delivery executive” calls and says he needs an OTP right now — to deliver a parcel, to cancel one, or to update your address. Some delivery OTPs are genuine, which is exactly what makes this scam work. The rule that keeps you safe is simple and worth memorising, and this guide explains it, along with what to do if you’ve already read a code out.
Some platforms send an OTP that you share with the delivery person in person, at the door, when you receive an order you actually placed. That’s a genuine delivery confirmation. What’s not genuine: giving an OTP over the phone, for an order you don’t recognise, for a “cancellation”, “refund”, or “address update”, or to someone who contacted you first.
Use the official number on your card and ask to block cards, UPI, and net banking. Minutes matter here.
Look at the SMS the code came in: the sender and message text say whether it was a bank transaction, a wallet login, or a shopping-account code.
Change passwords and enable two-step verification on email, banking, and shopping accounts.
Report at cybercrime.gov.in or call 1930, including the caller’s number.
List each unauthorised transaction. Prompt reporting affects liability under RBI’s rules.
Read the full OTP message before sharing any code: it normally states what it’s for. A code for “payment of ₹X” or “login” has nothing to do with a parcel, whatever the caller says. When in doubt, check the order in the shop’s own app instead of the caller’s story.
| Genuine | Scam Pattern |
|---|---|
| Code shared in person at the door for an order you placed | Code demanded over the phone |
| Order shows in your app with a matching delivery | Parcel you don't recognise, or 'cancellation/refund/address update' |
| OTP message says it's for delivery confirmation | OTP message says payment, login, or account change |
No. Reporting to your bank and on cybercrime.gov.in is free.
Yes. A lawyer is relevant only if your bank disputes liability despite prompt reporting.
Need professional legal help with this?
Find a Lawyer on VidyodaySee our guides on OTP fraud and the complete online shopping fraud guide.
Yes, on some platforms; it’s shared in person at delivery for an order you placed. Sharing it over the phone or for a cancellation is a scam.
It states what the code is for; a payment or login code has nothing to do with delivery.
Don’t share any code; check your orders in the shop’s official app.
It depends on speed and circumstances; report to your bank and 1930 immediately.
Codes are time-limited, so scammers time their calls with a transaction or login they’ve already started.
If they ask for an OTP over the phone, yes; then check the order through the shop’s app.
Recover it through the platform’s official process and change passwords from another device.
This article is for general information only and does not constitute legal advice. Delivery processes vary by platform — check the platform’s own guidance.
