The 'bank' call that asks for your OTP

A caller claims to be from your bank and asks for a code, PIN or card details.

How it works

You get a call, message or email saying your account is blocked, your KYC has expired or a suspicious payment was made.
The caller sounds professional, may know your name, and asks you to 'verify' by reading out a one-time passcode (OTP), PIN or card number, or to install an app.
That code is exactly what lets them approve a payment from your account.

Warning signs

Urgency: 'your account will be closed in 30 minutes'.
A request for an OTP, PIN, password or card verification code.
A link or a number you are told to use instead of the official one.
Pressure to stay on the line and not tell anyone.

What to do

End the call. Do not press any link.
Call your bank on the number printed on your card or on its official website.
Remember: the bank never needs your OTP or PIN from you.

A made-up example of what you might hear

'Sir, your account will be frozen today unless you complete verification. A code has just been sent. Please read it to me so that I can stop the block.'

If you already paid or shared a code

Call your bank or card issuer straight away and ask them to block the card, account or payment. Use the number on the card or the official website.
Change passwords for any account that may be affected, starting with email and banking. Turn on two-step verification.
Report it to the authorities (see the list below). Keep screenshots, phone numbers, account details, transaction IDs and times.

Where to report

Author and editorial reviewer: Prashant Nandkishor Maheshwari, 2026-10-18. Education only. Rules and reporting channels differ by country.