One Call Can Empty Your Bank Account: New Cyber Fraud Alert Warns Against Dangerous USSD Codes

Cybercrime tactics in India are evolving rapidly, and authorities are now warning citizens about a new scam that does not require internet access, suspicious links, or malicious apps. A single phone call and dialing a short USSD code can be enough to put your entire bank account at risk. India’s cyber security agencies have issued a fresh alert, urging people to stay cautious and avoid dialing certain USSD codes under any circumstances.

Cyber Agencies Issue Nationwide Warning

The alert has been released by the National Cybercrime Threat Analytics Unit, which operates under the Indian Cyber Crime Coordination Centre (I4C). Officials say cybercriminals are misusing standard telecom features in a highly deceptive way. Instead of hacking systems, scammers are tricking users into enabling services on their own phones—without realizing the consequences.

According to officials, this method is particularly dangerous because it appears legitimate and leaves almost no immediate trace for the victim to detect.

What Is the USSD Call Forwarding Scam?

This newly identified fraud revolves around call forwarding, a basic telecom feature that allows incoming calls to be redirected to another number. Scammers exploit this service by manipulating victims into activating it unknowingly.

The fraud typically begins with a phone call. The scammer often pretends to be a courier, delivery agent, or logistics executive. They may claim that a parcel delivery has failed, needs rescheduling, or requires address confirmation. Once the victim is engaged, the caller asks them to dial a specific USSD code to “confirm” or “update” delivery details.

These USSD codes usually start with numbers like 21, followed by a mobile number controlled by the fraudster.

How the Scam Works Step by Step

As soon as the victim dials the suggested USSD code, call forwarding gets activated silently on their phone. From that moment onward, all incoming calls—including crucial ones—are redirected to the scammer’s number.

This includes:

• Bank verification calls

• OTP verification calls

• Security calls from payment apps

• Verification calls from WhatsApp, Telegram, or other messaging platforms

The most alarming part is that the victim does not receive any notification, message, or alert confirming that call forwarding has been enabled. Everything appears normal on the phone, while the scammer gains access to sensitive verification calls in the background.

Why This Fraud Is Extremely Dangerous

Cyber experts say this scam is more threatening than traditional online fraud for several reasons. First, it does not require internet access, so even users with basic phones are vulnerable. Second, USSD codes work instantly and rely on telecom infrastructure, making them appear trustworthy.

Because no malicious app or link is involved, antivirus software, spam filters, and phone security apps usually fail to detect the threat. Victims may continue using their phones normally, unaware that their banking and verification calls are being intercepted. By the time suspicion arises, money may already be withdrawn, accounts locked, or digital identities compromised.

USSD Codes You Must Never Dial

Authorities have strongly advised people to never dial USSD codes shared by unknown callers. In particular, avoid codes that begin with:

• 21

• 61

• 67

If you suspect that call forwarding has been activated on your phone, immediately dial ##002#. This universal code disables all call forwarding services and helps regain control of incoming calls.

Safety Tips to Protect Yourself

Cybercrime officials recommend extra caution when receiving calls related to deliveries or services. Always verify delivery details through official company apps or customer care numbers. Never dial any code at the request of an unknown caller, and do not share OTPs or verification details over the phone.

If something feels suspicious, disconnect the call immediately. Remember, legitimate companies never ask customers to dial USSD codes for verification.

What to Do If You Are a Victim

If you believe you have been targeted or notice unauthorized transactions, act quickly. Call the national cybercrime helpline 1930 without delay. You should also file a complaint on the National Cyber Crime Reporting Portal to increase the chances of blocking transactions and recovering funds.

Cyber officials emphasize that a moment of caution can save a lifetime of savings. Staying alert, informed, and skeptical of unexpected calls is the strongest defense against such emerging digital threats.