How to prevent KYC Fraud: 3 simple yet powerful tips

How to prevent KYC Fraud: 3 simple yet powerful tips

Learn 3 smart ways to protect yourself from KYC Fraud.

We are all familiar with the KYC (Know Your Customer) process where customers provide relevant personal information for identity verification by banks and financial service providers. Thanks to the growing trend of digital banking and transactions, the KYC process has also found convenience and agility through digital means. However, amidst this positivity, a cause for concern has emerged, which is KYC frauds.
 

Just recently, if you’ve heard the news, hackers of Chinese origin duped customers of a prominent Indian bank by asking them to update their KYC process. In fact, amidst the pandemic, instances of KYC frauds in banks have seen a major rise. Even the Reserve Bank of India had to release a cautionary notice warning people against KYC update frauds and asking them to not share personal information with unidentified people.

So, what exactly is a KYC fraud and how can you prevent KYC fraud? Let’s learn about it below:

Types of KYC fraud

With India rapidly shifting towards a digital economy, more and more people are growing familiar with digital ways to make payments, open accounts, apply for a loan or invest online. This is, unfortunately, being leveraged by fraudsters and scam artists who have now begun employing highly deceptive methods, such as social engineering, to target innocent customers or those who are still not completely comfortable with digital ways of conducting activities.

Fake KYC Update: In the façade of a bank official or customer support officer, a fraudster calls an unsuspecting customer and urges him/her to share personal account details to update their KYC database. They can also either lure people with the promise of gifts or discounts or threaten people that their account will be closed if they don’t share details such as account login credentials, passwords, OTPs, card information, etc. This can also occur through emails or SMSes, wherein a fishy link is shared, urging customers to visit it and input personal info to update KYC.

 

 

  1. Vishing: Following the previous modus operandi, the fraudster will call the customer and ask him to install a malicious app from which he can defraud the customer. This is called vishing.
  2. Smishing: KYC frauds in banks can also occur in a reverse manner wherein, first, the customer gets a suspicious link through an SMS to update KYC details, and then is asked to call a number. This is termed as smishing.
  3. Remote Access: Another rising scam is the one wherein the fraudsters gain remote access to a person’s desktop or smartphone through an app installed in the guise of a KYC update. Later on, fraudsters can ask the customer to verify on the device, thereby leading to a leak of bank details.

 

3 Tips to Prevent KYC Fraud

The most important thing we need to do to prevent KYC fraud is alertness. Here’s how you can prevent KYC scams:
 

 

  1. Think before clicking on a link: Any threatening, too-good-to-be-true, or suspicious SMS, email, or social media message that asks you to click on a link to update your KYC should be treated with caution. Don’t click on it unless you are absolutely sure of the sender’s identity.
  2. Never share personal info with unverified sources: Remember, you are not supposed to share personal information such as bank account details, login verification, passwords, card information, etc., over a call or elsewhere with anyone – not even your bank!
  3. Don’t pay heed to unsolicited KYC update demands: A bank will never share a link with you to update your KYC in an unsolicited manner. Banks and financial institutions also don’t ask you to install any third-party apps for the same.
  4. Lastly, always report such instances at the cybercrime.gov.in portal, and also to the bank authorities.

 

What to do in case of a KYC fraud?

Many prominent banks and financial institutions have been targeted with KYC frauds in their name, and the same is the case with Bajaj. Remember, Bajaj will never ask you to update KYC either through an SMS link or through its representatives. In case you have fallen for a KYC scam in Bajaj’s name, immediately report it to the cybercrime authorities as well as at /reach-us.
 

Read more:
 

Frequently asked questions

Overview

Identification

Prevention

Others

What is KYC fraud?

KYC fraud occurs when scammers pose as bank or financial institution representatives and trick people into sharing personal or financial details under the guise of updating their KYC.

What has RBI done to help prevent KYC frauds?

The Reserve Bank of India (RBI) released a cautionary notice warning people against KYC update frauds and asking them not to share personal information with unidentified people.

How do scammers make KYC requests look genuine?

They often copy official language, logos, and messaging styles. Communication may appear legitimate, making people believe the update request is real.

What information does fraudsters usually target in KYC scams?

They aim to steal OTPs, passwords, login details, bank information, card numbers, or document copies. Sharing any of these can expose accounts to misuse.

What is a fake KYC update scam?

Fraudsters call, email, or message pretending to be officials and demand personal details. They often threaten service suspension or lure you with gifts to push you into compliance.

What is vishing in a KYC fraud?

Vishing involves fraudsters calling victims and persuading them to install malicious apps. These apps can capture sensitive data or give remote access to devices.

What is smishing in KYC scams?

Smishing uses SMS links that claim to update KYC or fix account issues. When users click the link, they are asked to share sensitive information or call fraudulent numbers.

How do scammers use remote access apps?

Fraudsters gain remote access to your desktop or smartphone through an app installed under the guise of a KYC update. This leads to a leak of your bank details when they later ask you to verify on the device.

Why should suspicious links be avoided?

Threatening or overly attractive messages asking you to “update KYC immediately” often lead to fake pages. Clicking such links may expose your data or device to fraud.

Should personal details ever be shared over calls?

No. Banks and financial institutions never ask for login details, card numbers, or OTPs on calls. Sharing such information can lead to immediate account misuse.

How do I identify genuine KYC update requests?

Authentic updates are communicated through official channels—not via random SMS links, calls from unknown numbers, or third‑party apps.

What should I do if I receive unknown KYC links?

Ignore the message and verify directly through your bank’s official website or app. Any unverified source should be treated as suspicious.

What should I do if I face a KYC fraud?

Report the incident immediately on the national cybercrime portal i.e., cybercrime.gov.in. Quick reporting improves the chances of limiting further misuse.

Should I inform my financial institution after a KYC scam?

Yes. Alert your bank or NBFC to block access, monitor transactions, and protect your accounts from additional fraud attempts.

How can I report KYC fraud involving Bajaj Finserv?

If the scam involves Bajaj’s name, visit the official support page: https://www.bajajfinserv.in/reach-us. page. This allows the team to act and guide you appropriately.

Why is quick reporting important in KYC fraud cases?

Delays allow fraudsters more time to misuse your data. Acting immediately helps mitigate damage and strengthens your case during investigation.

Show More Show Less

Disclaimer

While care is taken to update the information, products, and services included in or available on our website and related platforms/websites, there may be inadvertent inaccuracies or typographical errors or delays in updating the information. The material contained in this site, and on associated web pages, is for reference and general information purpose and the details mentioned in the respective product/service document shall prevail in case of any inconsistency. Subscribers and users should seek professional advice before acting on the basis of the information contained herein. Please take an informed decision with respect to any product or service after going through the relevant product/service document and applicable terms and conditions. In case any inconsistencies observed, please click on reach us.

*Terms and conditions apply