E-SIM scam alert: Govt warns of mobile number hijack, bank fraud


Daijiworld Media Network – Bengaluru

Bengaluru, Sept 4: In response to a surge in high-tech financial scams, the Indian government has issued a nationwide cyber fraud alert, warning citizens about a sophisticated eSIM scam that allows fraudsters to hijack mobile numbers and drain bank accounts.

The Indian Cyber Crime Coordination Centre (I4C), under the Ministry of Home Affairs, has flagged a disturbing rise in eSIM-based fraud, where victims' phone numbers are silently taken over and used to bypass security protocols such as One-Time Passwords (OTPs).

To combat this threat, I4C has issued an advisory to all law enforcement agencies, telecom providers, and financial institutions across the country. The scam represents a dangerous evolution in cybercrime, exploiting the growing use of eSIM technology for seamless mobile connectivity.

How the eSIM scam works – a step-by-step fraud

In its advisory, I4C revealed that scammers are employing deceptive social engineering tactics to fool victims into surrendering control of their mobile numbers.

“Fraudsters are calling unsuspecting users, pretending to assist with eSIM activation, and then sending malicious links. The moment the user clicks on the link, their existing SIM is deactivated and a new eSIM is activated on the scammer’s device,” the advisory said.

Once this switch occurs, victims lose signal on their physical SIM card, and scammers gain full access to the victim’s mobile number—allowing them to intercept banking OTPs, access UPI apps, and perform unauthorised financial transactions.

In one case reported to I4C, fraudsters successfully withdrew Rs 4 lac from a victim’s bank account, despite the user’s ATM card and UPI credentials being deactivated—thanks to OTP access via the hijacked mobile number.

Red flags to watch for

Citizens are being urged to take extra precautions, especially if they notice sudden signal loss on their phones, which could indicate an ongoing SIM swap.

“If your mobile suddenly goes out of service without warning, contact your telecom provider and bank immediately. Do not ignore this—it could be the first sign that your number has been compromised,” the I4C warned.

Additionally, users should remain vigilant against unknown calls or messages, especially those claiming to be from telecom or banking representatives. Clicking suspicious links can trigger an unauthorised SIM transfer without the victim’s knowledge.

Dos and Don'ts for your digital safety

I4C has issued the following guidelines to help users avoid falling prey to such scams:

• Ignore calls from unknown numbers, especially those offering help with eSIM activation or mobile services.

• Never click on suspicious links sent via SMS, WhatsApp, or email—even if they appear official.

• Do not share personal details or OTPs with anyone over the phone.

• If your phone suddenly loses signal, treat it as a potential security breach and immediately report it to your bank and mobile service provider.

Government’s crackdown: Blocking fraudulent numbers and SIMs

In light of these emerging threats, the Department of Telecommunications (DoT) has blocked over 3 to 4 lakh SIM cards found to be linked to fraudulent activities.

“We are using AI-driven tools to identify suspicious mobile numbers, and currently blocking 2,000 such numbers per day,” a senior DoT official stated.

These efforts are part of a broader government initiative to strengthen the digital security infrastructure and curb rising incidents of financial fraud.

If you suspect you’ve been targeted or defrauded:

• Call the Cyber Crime Helpline: 1930

• File a complaint online at: ?? www.cybercrime.gov.in

  

Top Stories


Leave a Comment

Title: E-SIM scam alert: Govt warns of mobile number hijack, bank fraud



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.