Call Merging Scam Alert: A Warning from NPCI

A new financial scam known as the call merging scam is swiftly spreading across India, prompting the National Payments Corporation of India (NPCI) to issue a critical warning. This scam involves fraudsters using a simple method to steal one-time passwords (OTPs) and drain funds from victims’ bank accounts.

Understanding the Call Merging Scam

The call merging scam involves a clever tactic that circumvents standard security measures, targeting unsuspecting victims through the call merge feature on their mobile devices. Here’s a breakdown of how this scam typically occurs:

Unexpected Call

The victim receives a call from an unknown person who claims to have their number through a mutual friend. The scammer might present an exclusive event invitation or a promising opportunity to gain the victim’s trust.

Request to Merge Calls

The scammer then states that the supposed friend is calling from another line and requests the victim to merge the calls.

Linking to an OTP Call

In reality, the second call isn’t from a friend; it is an automated OTP verification call from the victim’s bank.

Unintentional OTP Sharing

Once the calls are merged, the victim unwittingly shares the OTP, allowing the scammer to use it swiftly to carry out fraudulent transactions.

Financial Loss

As soon as the OTP is revealed, the scammers proceed with the transaction, resulting in a drained bank account for the victim.

Why This Scam Is a Serious Threat

The call merging scam is particularly dangerous as it exploits a basic functionality of mobile phones, unlike traditional phishing scams that depend on deceptive emails or websites. Many individuals do not suspect any wrongdoing and may comply without realising they are giving criminals access to their financial information. The timing of the OTP request makes this scam exceptionally potent, even targeting those who are technologically savvy.

Precautions to Ensure Safety

In light of the alarming increase in this scam, the NPCI has issued a public warning on X (formerly known as Twitter).

To help individuals stay safe, the NPCI recommends several key precautions:

Avoid Merging Calls with Unknown Numbers

Do not merge calls with unknown callers. If someone insists on merging the call, decline and verify their identity through different means.

Verify Caller Identity

If someone claims a friend is attempting to reach you, contact that friend directly to confirm before proceeding.

No OTP Requests from Banks Over Calls

Banks will never ask for OTPs over the phone. If you receive an unsolicited request for an OTP, do not disclose it.

Report Any Suspicious Activity

If you receive an OTP for a transaction you did not initiate, promptly contact the cybercrime helpline at 1930 and inform your bank.

Actions to Take If You’ve Been Scammed

If it becomes apparent that you have been targeted by this scam, immediate action is essential:

Contact Your Bank

Notify your bank to block any unauthorised transactions.

Report the Fraud

Inform the cybercrime helpline (1930) or submit a complaint on cybercrime.gov.in.

Monitor Bank Statements

Keep an eye on your bank statements for any suspicious activities and change your online banking credentials promptly.