"Your account will be blocked today": the fake KYC message

What happened

You receive a message that looks like it is from your bank, a payment app, an electricity board or your mobile operator: "KYC pending. Account will be blocked in 24 hours. Click here to update." The link opens a lookalike page that collects your card number, OTP or net-banking password, or it downloads an app that reads your SMS and takes over your accounts.

Red flags

• A deadline of "today" or "24 hours", and a threat of blocking.
• A shortened or odd-looking link, or a request to install an app from a link.
• A sender that is a plain 10-digit mobile number.
• Requests for card number, CVV, PIN or OTP.

Banks do not ask for OTP, PIN or CVV, and they do not send APK files for KYC.

What to do now

1. Do not tap the link. Delete the message.
2. If you tapped and entered details, call your bank immediately to block cards and change passwords.
3. If you installed an app, uninstall it, switch off mobile data and call 1930.
4. For real KYC, visit your branch or use the bank's own app or website, typed directly.