"Dear customer, your account will be blocked today. Update your KYC now."
There is a link, or a number to call.
It looks urgent, and the bank's name is right there.
This is one of the most common messages scammers send in India.
Does my bank really need my KYC updated?
Sometimes, yes.
Banks do refresh KYC every few years.
That is exactly why the scam works so well.
So how do I tell the real one from the fake?
Look at what it asks you to do.
A fake message pushes you to click a link, call a mobile number or install an app.
It threatens that your account will be frozen within hours.
It asks for your card number, PIN, OTP or password.
A real KYC update never needs any of those.
The RBI has repeatedly warned people about exactly this pattern.
What does real KYC look like?
You update it at a branch, or inside your bank's own official app or website.
You might upload a document or confirm your address there.
You never send documents to an unknown person on WhatsApp.
You never install a screen-sharing app for it.
What should I do with the message?
Do not click anything in it.
Open your bank's app yourself, or call the number printed on your card.
Ask them directly whether any KYC update is pending.
If it is genuine, they will tell you how to do it properly.
Then delete the message, after reporting it.
Where do I report it?
If you did not lose money, report the message on Chakshu at sancharsaathi.gov.in.
If you clicked, shared details or lost money, call 1930 immediately.
Also report at cybercrime.gov.in, and call your bank to block your card or account.
Things to Remember
- Real KYC is done in your bank's own app, website or branch.
- Never click a KYC link in an SMS, email or WhatsApp.
- No bank needs your PIN, OTP or password for KYC.
- Check by calling the number on your card, not the one in the message.
- Lost money? Call 1930 at once.