eSIM Scam Alert: Government Issues Warning as Cybercriminals Target Bank Accounts Without OTP
New Delhi, September 2, 2025 – The Government of India has issued an urgent advisory to mobile users across the country, warning them about a rising wave of eSIM-related cyber frauds. According to officials, scammers have devised a new trick that allows them to steal money from victims’ bank accounts without requiring an OTP or ATM details.
The alert, issued by the Indian Cyber Crime Coordination Centre (I4C), comes after a recent case in which fraudsters siphoned off nearly ₹4 lakh from a victim’s account using this method. Authorities caution that the scam is spreading rapidly and urge citizens to remain vigilant.
How the eSIM Scam Works
The I4C has detailed the modus operandi used by cybercriminals:
-
Step 1: The bait – Scammers first call the victim and send a malicious eSIM activation link.
-
Step 2: SIM swap trick – Once the victim clicks on the link, their physical SIM card automatically converts into an eSIM without authorization. This deactivates the original SIM, cutting off network signals, calls, and text messages.
-
Step 3: Total control – With the victim’s SIM inactive, all communication including bank OTPs gets redirected to the fraudsters’ eSIM. This gives scammers complete control of the victim’s phone number.
-
Step 4: Fraudulent transactions – Using redirected OTPs, criminals initiate bank transactions and transfer funds within minutes.
In the recent case flagged by I4C, a user unknowingly clicked on such a link, lost network access instantly, and within moments, fraudsters successfully withdrew ₹4 lakh from their bank account.
How to Protect Yourself from eSIM Fraud
To safeguard against such sophisticated scams, the government has recommended three critical safety measures:
-
Stay alert – Avoid responding to unknown callers and never click on suspicious links. Always verify the authenticity of any link before proceeding.
-
Take control – Never rely on third parties for SIM-to-eSIM conversions. Always initiate such requests only through official and trusted service providers.
-
Act quickly – If your phone suddenly loses network connection, immediately contact your bank and mobile service provider to prevent potential fraud.
What to Do If You Fall Victim
In case of online fraud or cybercrime, citizens can file complaints through two primary channels:
-
Helpline 1930 – Call the national cyber fraud helpline to report the incident.
-
Cybercrime Portal – Visit cybercrime.gov.in to lodge an official complaint.
Authorities emphasize that quick reporting can help minimize financial losses and improve the chances of tracing fraudsters.
A Growing Threat
Cyber experts warn that eSIM scams are more dangerous than traditional phishing attacks, as they bypass OTP verification, making victims more vulnerable. With digital banking and mobile-based authentication becoming the norm, such frauds highlight the urgent need for public awareness and digital safety practices.
The government has urged citizens to remain cautious, follow cyber hygiene, and immediately report any suspicious activity.
