OTP Scam Latest Technology Trap: How Hackers Steal Money Without Asking for Code

In India, cyber fraud is increasing in new and dangerous ways. For many years, banks and the police have continuously advised us never to share our OTP or PIN with anyone. Earlier, we believed that as long as we kept that 6-digit code confidential, we would remain safe.A new and dangerous wave of cyber fraud is spreading across India. For years, banks and police have told us: “Never share your OTP.” We thought we were safe if we kept that 6-digit code secret.

But scammers have found a way around it.

In the latest “technology trap,” fraudsters are stealing money without even asking for the OTP. They use a clever trick involving your phone’s call settings and malicious apps to silently hijack your messages. This article explains how this sophisticated trap works, why it is dangerous, and exactly what you must do to protect your hard-earned money.

The “Silent” Trap: How It Works

The scariest part of this new scam is that the victim often believes they are being careful. Scammers are using two main technology traps to bypass the need for you to speak the OTP out loud.

1. The Call Forwarding Trick (*401* Scam)

This is currently the most popular method used by fraudsters in India. It works on a simple feature provided by telecom operators called “Call Forwarding.”

• The Trap: You receive a call from someone posing as a customer care agent from your mobile network (Jio, Airtel, Vi) or a delivery boy. They claim there is an issue with your SIM card or a package delivery.
• The Action: They ask you to dial a specific code to “fix” the issue. The code usually looks like this: *401*<Mobile Number># or *21*<Mobile Number>#.
• The Result: The moment you dial this, Unconditional Call Forwarding is activated.
• The Theft: Now, when the scammer tries to login to your WhatsApp or Bank account, the “Voice OTP” call does not ring on your phone. It gets forwarded directly to the scammer’s phone. They answer the call, hear the OTP, and empty your account.

2. The Screen Sharing App Trap

Scammers convince users to download legitimate remote-support apps like AnyDesk, TeamViewer, or RustDesk.

• They may claim your bank KYC is pending or your electricity will be cut off.
• Once you install the app and share the 9-digit access code, the scammer can see your mobile screen in real-time.
• They trigger an OTP. You see the SMS pop up on your screen. They see it too. They don’t need to ask you for it; they just read it off your screen and steal your money.

3. The Malicious APK (Pink WhatsApp/Rewards)

Fraudsters send links on WhatsApp promising “Pink WhatsApp” (a fake update) or “Free Solar Scheme” apps.

• These are APKs (Android application package files) that are not on the Google Play Store.
• Once installed, these apps contain malware that asks for “SMS Permissions.”
• If you click ‘Allow’, the app silently reads your bank OTPs in the background and sends them to the hacker.

Why This Matters Now

This trend is alarming because it defeats the average person’s primary defense mechanism. Most Indians are now smart enough to say “No” when asked for an OTP. But they are not trained to suspect a code like *401* or a “screen support” app.

Key Impacts in India:

• Loss of Life Savings: Senior citizens are the biggest victims as they often struggle with technical settings.
• Digital Arrests: This tech trap is often combined with “Digital Arrest” threats, where scammers pose as police officers to scare victims into following these technical instructions.
• Trust Deficit: People are becoming afraid to use genuine digital payment methods like UPI.

Important Government Updates: The ‘Chakshu’ Shield

The Government of India has taken serious note of these technology traps. The Department of Telecommunications (DoT) has launched the Chakshu facility on the Sanchar Saathi portal.

• What is it? A dedicated platform to report suspected fraud communications (calls/SMS/WhatsApp).
• What to do: If you receive a call asking you to dial *401* or download an unknown app, you can report the number immediately on sancharsaathi.gov.in.
• Results: The government has already disconnected lakhs of SIM cards and blocked thousands of mobile handsets based on these reports.

How to Check if You Are at Risk

You can check right now if your calls are being forwarded to a scammer:

Read More : Android 17 UI Blur Feature Leaked

1. Open your phone dialer.
2. Dial *#62# or *#21#.
3. If it says “Not Forwarded,” you are safe.
4. If it shows an unknown mobile number, dial ##002# immediately. This code erases all call forwarding settings on most Indian networks.

Frequently Asked Questions (FAQs)