eSIM scam in India: How criminals hijack numbers and steal money; follow these tips to protect yourself

eSIM Scam

Cybercriminals in India are exploiting eSIMs, the digital SIMs stored on phones, to hijack mobile numbers and empty bank accounts within minutes. In one reported case, a victim lost ₹4 lakh after scammers took control of their number and intercepted OTPs.

The attack usually begins with a convincing call or SMS claiming to be from a mobile operator. Scammers then send a fake eSIM activation link via SMS or email. Once clicked, the user’s physical SIM deactivates, the phone loses signal, and the number transfers to the attacker’s device.

From there, every call, message, and OTP goes directly to the scammer. With OTPs in hand, they can approve transactions, reset passwords, and move money without needing physical cards or account credentials.

eSIM technology was designed for convenience, but that same flexibility gives attackers a fast route into your digital identity and finances. Even users who have disabled UPI or ATM services are at risk once their number is compromised.

Not entirely. SIM swap scams have existed for years. The difference is speed: eSIM fraud can occur in minutes, without a visit to a store or physical chip replacement. Some users feel more secure with physical SIMs because telcos often require in-person verification for swaps. Ultimately, the weak link is social engineering, not the SIM itself.

Authorities including the Indian Cybercrime Coordination Centre (I4C) are warning users to stay vigilant. These scams move quickly, and victims can lose large sums in under five minutes. Never click links from unsolicited messages claiming to be from your operator and verify any SIM-related request directly with your provider.