IntroductionCyber fraud targeting bank customers has become increasingly sophisticated. One of the most common schemes involves fake calls and messages impersonating banks, often aiming to steal personal and financial information. These scams exploit the
Know Your customer (KYC) process, tricking individuals into revealing sensitive data.
What Is KYC and Why It MattersKYC (Know Your Customer) is a mandatory process used by banks to verify the identity of their clients. It ensures:
- Compliance with legal and regulatory frameworks.
- Prevention of money laundering, fraud, and financial terrorism.
- Safety and security of customer accounts.
Fraudsters exploit the KYC process by pretending to be bank representatives requesting “urgent” verification, making victims believe that their account could be blocked or flagged.
Common Tactics Used in KYC Cyber Fraud1. Fake phone CallsFraudsters call victims pretending to be from their bank. Typical tactics include:
- Claiming suspicious activity on the account.
- Asking to “verify” account details, OTPs, or PINs.
- Pressuring the victim to act immediately, creating panic.
2. SMS and whatsapp ScamsScammers send messages claiming to be from a bank, including:
- Links to fake bank websites for KYC updates.
- Requests for confidential information like account numbers or OTPs.
- Threats of account suspension if instructions aren’t followed.
3. Phishing EmailsFraudulent emails mimic bank communications:
- They often carry official-looking logos and formatting.
- Contain links to fake portals requesting KYC documents.
- May include malware to capture sensitive data.
How Fraudsters Exploit KYCFraudsters leverage KYC by:
- Collecting personal data (name, DOB, PAN, Aadhaar).
- Using stolen information to access accounts or open fraudulent accounts.
- Requesting OTPs or PINs to authorize transactions.
- Manipulating victims into sharing confidential information under urgency or fear.
Warning Signs of KYC Scams- Unsolicited calls or messages claiming urgent action.
- Requests for confidential information over phone, SMS, or email.
- Poor grammar or spelling in official-looking messages.
- Links redirecting to unfamiliar or suspicious websites.
- Pressure tactics or threats of account suspension.
How to Protect YourselfVerify the Source: Always call the bank’s official number to confirm messages or calls.
Never Share OTPs or PINs: Legitimate banks never ask for passwords, PINs, or OTPs over the phone.
Check Website URLs: Avoid clicking links in unsolicited messages. Look for “https://” and official domains.
Report Suspicious Activity: Notify your bank or cybercrime authorities immediately.
Keep Documents Secure: Avoid sharing sensitive documents via phone or email.
ConclusionKYC cyber fraud is a growing threat, exploiting the trust between banks and customers. Awareness, caution, and verification are key defenses. By staying alert and following safe banking practices, individuals can protect themselves from falling victim to these scams.
Disclaimer:The views and opinions expressed in this article are those of the author and do not necessarily reflect the official policy or position of any agency, organization, employer, or company. All information provided is for general informational purposes only. While every effort has been made to ensure accuracy, we make no representations or warranties of any kind, express or implied, about the completeness, reliability, or suitability of the information contained herein. Readers are advised to verify facts and seek professional advice where necessary. Any reliance placed on such information is strictly at the reader’s own risk.