ScamSafe

Scam Checker

Paste any SMS, WhatsApp or email. Free, no sign-up.

Remove OTPs, passwords and card numbers before you paste. We don't save your message. How it's checked

Free to use, with a daily fair-use limit. 0 / 3,500 characters.

Lost money or shared an OTP? Call 1930 or report at cybercrime.gov.in.

Help

How to spot a scam message

Most scam messages use the same few tricks:

  • Urgency and fear — threats that your account, SIM, or parcel will be blocked "today" or "within hours" to rush you.
  • A request for an OTP, PIN, CVV or password — no genuine bank, courier, or government body ever asks for these.
  • A link to click — especially shortened or misspelt links, or domains that are not the official one.
  • A small "fee" to release something — a tiny redelivery charge, KYC fee, or job-registration payment.
  • An offer too good to be true — lottery wins, tax refunds, or high pay for trivial work you never applied for.
  • Contact only via chat apps — a "company" that will only talk on WhatsApp or Telegram, not an official channel.
Common scam patterns in India

TRAI SIM-Closure ("SIM will be disconnected") Fraud

You get a call or SMS claiming to be from TRAI (the telecom regulator) warning that your SIM or mobile number will be disconnected within hours "due to KYC issues" or "illegal activity," and that you must press a number or share Aadhaar, bank or OTP details to stop it. This is a scam. TRAI has publicly clarified that it does not regulate individual SIM cards and never calls or messages customers to disconnect numbers — those decisions rest with your telecom operator, who won't demand Aadhaar or OTPs over a call. The urgency and threat of disconnection are engineered to panic you into acting before you think. Real KYC updates happen through your operator's official app or store, never a random caller. Source: TRAI and Department of Telecommunications public advisories, and PIB Fact Check, which have repeatedly flagged this pattern. If you receive such a message, don't engage — report it on the Sanchar Saathi portal (sancharsaathi.gov.in) or call 1930.

Fake Courier / Delivery "Share OTP to Confirm Delivery" Requests

A message or call claims a parcel (often from a known courier like Delhivery, Blue Dart, FedEx, or India Post) is "out for delivery" but "stuck" — and the delivery agent asks you to share an OTP to "confirm" or "reschedule" delivery. Legitimate couriers do not need an OTP that they send to your phone to deliver a package; if anything, they read out an OTP to you. An OTP you share is almost always authorising something else — a payment, a new-device login, or a bank transaction. The scam may also include a small "redelivery fee" link that harvests card details. Genuine delivery problems are handled inside the courier's official app or website, using your order ID — not by reading a code aloud. Source: Indian Cyber Crime Coordination Centre (I4C) and bank advisories. Never share any OTP with a "delivery agent"; verify the parcel directly in the courier's official app.

Fake India Post "Address Update / Package Held" SMS

A smishing (SMS phishing) message impersonating India Post claims your package "could not be delivered because of incomplete address details" and asks you to click a link to "update your address" or pay a tiny redelivery charge. The link leads to a lookalike site that steals personal and card information. India Post does not ask customers to update delivery addresses through SMS links, and the domains used are never the official indiapost.gov.in. PIB Fact Check has repeatedly debunked these fake India Post delivery texts, which resurface in waves. Tell-tale signs: a shortened or misspelt link, a sense of urgency, a request for a small payment "to release" your parcel, and poor grammar. Source: PIB Fact Check and India Post advisories. If you're expecting a parcel, check its status only on the official India Post website or app using your tracking number — never through a link in an unexpected SMS.

Fake Bank "KYC Update / Account Blocked" Urgency Messages

You receive an SMS or WhatsApp claiming your bank account, PAN, or KYC "will be blocked today" unless you immediately click a link or call a number and verify your details. The message may spoof your bank's name and even use a sender ID that looks official. Banks and the RBI have stated clearly that they never ask for full card numbers, CVV, PIN, OTP, net-banking passwords, or KYC through SMS links or unsolicited calls. The goal is to rush you past your judgement using the fear of a frozen account. Real KYC updates are done in a branch or inside the bank's official app — never via a link someone sends you. Source: RBI customer-awareness advisories and I4C. If in doubt, ignore the message and call the number printed on the back of your debit/credit card or in your bank's official app — never a number from the suspicious message itself.

Fake Job Offers Asking for an Upfront Payment

A message on WhatsApp, SMS, or Telegram offers a work-from-home job, "part-time task" earning, or a role at a well-known company — but to "register," "get training material," "buy a starter kit," or "unlock your salary," you must first pay a fee or complete prepaid "tasks." Genuine employers never ask candidates to pay to be hired. These scams often start with a friendly, too-good-to-be-true offer and escalate: small early "earnings" are shown to build trust, then larger deposits are demanded and never returned. Red flags include vague company details, communication only via chat apps, pressure to pay quickly, and salaries far above market rate for trivial work. Source: I4C and cyber-cell advisories on task-based/investment job frauds. Before acting on any job offer, verify the company through its official website and never transfer money to receive a job.

What to do if you've already shared an OTP or paid

Act quickly. Take these steps in order:

  1. Contact your bank immediately using the number on the back of your card or in their official app — ask them to freeze the card or transaction.
  2. Report to the National Cyber Crime Helpline: call 1930 or file at cybercrime.gov.in.
  3. Change any shared passwords and turn on extra security where you can.
  4. Keep screenshots of the message and the transaction details for your complaint.
Is this SMS from TRAI real?
Almost certainly not. TRAI does not regulate individual SIM cards and never calls or texts customers to say a number will be disconnected, nor does it ask for Aadhaar, bank details, or OTPs. Any message claiming your SIM will be blocked unless you act immediately is a known fraud pattern flagged by TRAI, the Department of Telecommunications, and PIB Fact Check. Genuine KYC is handled by your telecom operator through their official app or store. If you get such a message, report it on sancharsaathi.gov.in or call 1930.
Why do scammers ask for OTP?
An OTP is a one-time password that authorises a specific action — a payment, a login on a new device, or a bank transaction. When a scammer gets you to read out an OTP, they are using it to approve something on your account in real time, not to 'verify' or 'confirm' anything for you. That is why no genuine bank, courier, or government body will ever ask you to share an OTP. Treat any request for an OTP — however it's framed — as a red flag, and never share it.
Is this checker 100% accurate?
No. It's a quick second opinion. When in doubt, call the company on its official number.
What should I do if I already shared my OTP or made a payment?
Don't panic — act quickly. Contact your bank immediately using the number on the back of your card or in their official app to freeze the transaction or card. Then report the fraud at cybercrime.gov.in or call the National Cyber Crime Helpline on 1930 as soon as possible — reporting within the first few hours gives the best chance of stopping or recovering the money. Change any passwords you may have shared, and keep a record of the messages and transaction details for your complaint.