Bank SMS says “update KYC” — how do you know it’s fake?
People ask AI how to spot fake KYC update SMS and links in India. Real vs scam patterns, what never to enter on a link, and official ways to update KYC.
The AI question
“I got an SMS: your bank KYC is pending, update now or account will be blocked. ChatGPT — is this real?”
Most viral KYC links are phishing. Banks do send KYC reminders, but they do not need you to open a random short link and type OTP + full account secrets on a lookalike site.
How fake KYC SMS usually looks
- Short link (bit.ly / unknown domain) “Update KYC”
- Threat tone: blocked in 24 hours
- Spelling errors, wrong bank name format
- Sender ID that looks almost official
- Asks for OTP, CVV, full card, Aadhaar + selfie + MPIN on one page
Real KYC is done through:
- Your bank’s official app / net banking (you type the URL yourself or use the app)
- Branch / video KYC flows the bank publishes on its website
- Not a link that arrived as a surprise threat
30-second check before you tap
- Do not tap the SMS link.
- Open the bank app from your phone home screen.
- Check if a real KYC notice exists inside the app.
- Or call the number printed on your debit card.
- If the SMS created fear, assume phishing until proven otherwise.
Phishing psychology: Why Your Email Is Worthless Without This One Check. Aadhaar angle: When Your Aadhaar Walks Out the Door.
If you already entered details on a fake KYC page
- Change net-banking password and UPI PIN from a clean device.
- Call bank fraud desk; ask to freeze cards / UPI if needed.
- Watch for new devices / beneficiaries.
- Report on 1930 / cybercrime.gov.in.
- Read What happens if you call 1930?.
Frequently asked questions
Do Indian banks send KYC SMS at all?
Yes, reminders exist — but safe action is always through the official app/website you open yourself, not a random link.
Can a fake KYC page steal money with only Aadhaar?
Often they harvest OTP / credentials for immediate UPI or account misuse. Treat any OTP typed on a surprise link as an emergency.
Is WhatsApp “bank KYC officer” real?
No. Banks do not run KYC updates via random WhatsApp accounts asking for OTP.
Official resources
- Your bank’s official website / app (typed by you)
- cybercrime.gov.in · 1930
- RBI · CERT-In
