A fake bank email, an SMS saying your KYC will expire, and a phone call from a “fraud department” may look different, but all three can be versions of the same attack: social engineering designed to make you reveal information or authorise a payment.
What is phishing?
Phishing is the broad term for deceptive communication that impersonates a trusted organisation or person. Email is a common channel, but phishing can also appear through websites, social media and messaging platforms.
What is smishing?
Smishing is phishing delivered through SMS or similar text messaging. A message may claim your bank account will be blocked, a parcel is waiting, or a refund requires immediate action.
What is vishing?
Vishing is voice phishing. A caller may pretend to be from a bank, police department, courier service or employer. AI voice cloning can make some vishing attempts more convincing.
Common banking scam hooks
- “Your KYC expires today.”
- “A suspicious transaction needs immediate reversal.”
- “Your card will be blocked in 10 minutes.”
- “Share the OTP so I can cancel the charge.”
- “Install this support app so I can fix your account.”
What legitimate banks will not need from a random call
Never share your UPI PIN, card PIN, password or OTP with a caller. Do not install a remote-access app because an unsolicited caller tells you to.
How to verify safely
- Do not use the link or number in the suspicious message.
- Open the bank’s official app or type the official website yourself.
- Call the number printed on your card or shown inside the official app.
- Check the transaction independently.
What if the message uses your real name?
Personal information can come from data leaks, public profiles or previous transactions. Knowing your name does not prove the caller is legitimate.
What if you already shared details?
Contact your bank immediately, change compromised credentials, block affected cards if necessary and report financial fraud through the 1930 helpline and official cybercrime portal.
For AI-assisted impersonation specifically, read our AI voice scam guide.
Final takeaway
Phishing, smishing and vishing use different channels but the same psychological tools: urgency, fear and trust. Verify through a separate official channel before clicking, sharing credentials or sending money.
