‘Call merging scam’ can drain your bank account, here’s how to stay safe

Scam alert

A new scam is tricking people into unknowingly sharing their OTPs, allowing fraudsters to steal money within seconds. Known as the ‘call merging scam,’ this method catches victims off guard by exploiting a simple phone call.

How does the scam work?

Scammers have devised a way to bypass the usual security barriers of OTP-based transactions. Here’s how they do it:

Fake event invite or opportunity

The victim receives a call from a stranger claiming to have their number from a mutual friend. The caller may talk about an exclusive event or a lucrative opportunity to gain the victim’s trust.

Merging request

The scammer then tells the victim that the supposed friend is calling from a different number and asks them to merge the calls.

OTP call

What actually happens is that the second call is not from a friend but from the victim’s bank, delivering a one-time password (OTP) for a transaction.

Unintentional OTP sharing

Since the call is merged, the victim unknowingly shares the OTP with the scammer.

You have been duped now

The moment the OTP is revealed, the scammers finalise the fraudulent transaction, and the victim’s money vanishes from their account.

What makes this scam dangerous?

Unlike traditional phishing scams that rely on fake websites or emails, this method exploits a basic phone function—call merging. Many people don’t suspect foul play and comply without realizing they are handing over access to their bank accounts. The well-timed nature of the OTP request makes the scam highly effective, even against tech-savvy individuals.

How to protect yourself from call merging scams

To stay safe from this fraud, follow these precautions:

Never merge calls with unknown numbers. If someone insists on merging a call, refuse and verify their identity separately.

Confirm directly with your friend. If someone claims that a friend is trying to reach you, contact that friend independently to confirm.

Be cautious of unexpected OTP requests. If you receive an OTP without attempting a transaction, it could be a sign of fraud.

Report any suspicious activity. If you suspect a scam or have already received an unknown OTP, immediately report it to the cybercrime helpline at 1930.

What to do if you’ve been scammed

If you realize that you’ve fallen for this scam, take immediate action:

Call your bank to block unauthorized transactions.

Report the fraud to the cybercrime helpline (1930) or file a complaint at cybercrime.gov.in.

Monitor your bank statements for any suspicious activity.

The rise of digital banking has also led to more sophisticated fraud attempts. Staying informed and vigilant is the best defence against these evolving scams.