Impersonation fraud: One phone call could cost you your identity and your money—how to recognize it and protect yourself

Representative image

In the era of online banking and instant fund transfers, impersonation fraud is a riskiest and fastest-changing financial fraud in India. It takes just one swift phone call. An impersonator can pretend to be a bank executive, government representative, or even a technical support representative—and in minutes, he can have access to your personal data, bank accounts, and even your Aadhaar or PAN numbers. If you fall prey, your money—and your identity—might disappear before you even know what has happened.

What is impersonation fraud?

Impersonation fraud is where fraudsters pretend to be a familiar authority such as a bank employee, police officer, or telecommunication officer to acquire sensitive financial and personal information. The schemes begin with a call but also occur via email, WhatsApp, or spoofed websites. The fraudster may ask for your OTP, debit card number, CVV, or ask you to install remotely accessible software on your behalf for the purpose of helping you with a problem.

You find out about what happened only after unauthorized payments have already been done or your virtual identity has been used to get loans or account openings in your name.

How fraudsters trick you

The scammers tend to use fear or the fear of urgency in order to prompt you to act quickly. They might tell you that your bank account will be frozen, your Aadhaar is being misused, or your KYC needs to be updated within a short period of time or you would be charged. They tend to have incomplete information with them—like your name, date of birth, or bank name—so their method appears more authentic.

They also mimic dialling actual numbers so that it appears as if the call is coming from your bank or some government office. That creates the impression of the call being genuine and makes the victim drop his guard.

Red flags to watch out for

No official bank, government department, or agency will ever ask for your OTP, card PIN, net banking password, or CVV over the phone. Similarly, you would never be required to download any application for "remote support" from unauthorized sources or click on some dubious link sent over SMS or email.

If you are called saying they are calling on behalf of the RBI, UIDAI, or your bank and threatening to freeze your account if you do not answer immediately—stop and verify. Verify the official contact number and call back to verify.

How to remain safe

Always verify the caller's identity before disclosing anything. In the event that you receive a call pretending to be from the bank or any government agency, hang up and call the official customer care number listed in their website.

Never give OTPs, UPI PINs, or passwords to anyone, even to a seemingly authentic individual. Activate transaction alerts through SMS and email to track your bank transactions in real time. In the event of being a victim of fraud, immediately call your bank's customer care and register the case on the National Cyber Crime Reporting Portal (cybercrime.gov.in) or call 1930, the national cyber fraud helpline.

It is a good practice to have your devices updated, not download applications from foreign websites, and not store bank details in insecure applications or phone notes.

Impersonation fraud succeeds because it exploits trust and urgency. But with caution and sensitivity, you can protect yourself and your money. Always take time to reflect, verify, and check before you respond to any unsolicited call or message. In doubt, hang up—and call through proper channels.