Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
“Your KYC will expire in 24 hours” — a message like this, whether about your bank account, mobile number, or a wallet app, is one of the most common scam openers in India precisely because KYC deadlines and compliance requirements are genuinely real, which makes the fake version easy to believe. Here’s exactly how this scam works and how to protect yourself and report it.
KYC compliance deadlines are a real, recurring part of banking and telecom in India — RBI and TRAI genuinely do require periodic KYC updates, which means the fake version doesn’t sound implausible the way many other scams do. The artificial urgency (“will be blocked in 24 hours”) is specifically designed to make you act before you’d normally pause to verify.
Treat any unsolicited “urgent KYC” message with suspicion by default — genuine KYC requirements never depend on you acting within a few hours of receiving a single message.
Use the number printed on your card, passbook, or their official app — never a number provided in the suspicious message itself.
Your bank or telecom provider can confirm immediately whether any KYC update is actually required and, if so, the correct official process to complete it.
Report suspicious SMS/calls via the Chakshu feature on sancharsaathi.gov.in, and separately notify your bank if it impersonated them specifically.
If you clicked the link, entered any details, or shared an OTP before realizing it was a scam, report immediately at cybercrime.gov.in or call 1930, and contact your bank to secure your account right away.
No genuine bank, telecom provider, or wallet app will ever ask for your full card number, CVV, PIN, or OTP to “complete KYC” — a real KYC update typically requires visiting a branch, using the provider’s own official app, or a verified video-KYC process initiated by you, never a rushed action triggered by an unsolicited message.
| Genuine KYC Process | Scam Pattern |
|---|---|
| Initiated by you, through the provider's official app or branch | Arrives as an unsolicited, urgent SMS/call/email demanding immediate action |
| Never asks for your card CVV, PIN, or OTP | Directly requests these, or asks you to enter them on a linked page |
| Gives you a reasonable, clearly-stated timeframe | Threatens account/SIM blocking within hours to force a rushed decision |
No. Contacting your bank/provider directly and reporting via Chakshu or cybercrime.gov.in are all free.
Yes — verification and reporting are self-service. A lawyer becomes relevant only if you’ve suffered significant financial loss and your bank disputes liability despite prompt reporting.
Need professional legal help with this?
Find a Lawyer on VidyodayIf this scam specifically targeted your Paytm account, see our dedicated guide on the Paytm KYC update scam. For the broader identity-document misuse this can lead to if you’ve already shared details, see our guide on KYC fraud using your documents.
Yes, this does happen periodically — but always verify independently through your provider’s official app or branch, never through the unsolicited message itself.
It’s a feature on the Sanchar Saathi portal (sancharsaathi.gov.in) specifically for reporting suspected fraud communications like this.
The risk is lower than if you’d entered details, but it’s still worth reporting the message and being alert for any follow-up contact attempts.
Contact your bank immediately to block your card, then report on cybercrime.gov.in — treat this exactly like any other card-compromise situation.
Yes, very much so — appearance alone is not a reliable way to verify legitimacy; always confirm independently through an official channel instead.
Yes — reporting fraudulent messages, even ones you correctly identified and avoided, helps flag and block the sender for others who might not recognize it as quickly.
This is a common embellishment tactic — it doesn’t make the call legitimate; verify independently regardless of how personalized or official the caller sounds.
This article is for general information only and does not constitute legal advice. Scam tactics evolve constantly — always verify any KYC request independently through your bank or provider’s official channel.
