Call Merging Scam: Cybercriminals Use New Tactic to Steal OTPs, UPI Warns Users—Know How to Protect Your Bank Account

Cybercriminals in India are constantly evolving their tactics to defraud people, with the Call Merging Scam surfacing after the Missed Call Scam. The Unified Payments Interface (UPI) has issued a warning, highlighting how scammers are exploiting this method to gain access to OTPs, increasing the risk of unauthorized bank transactions. In a post on its X handle, UPI cautioned users about fraudsters merging calls to deceive victims. The post also detailed how the scam operates and provided guidelines on how to stay protected.

How Does the Call Merging Scam Work?
Scammers may call, pretending to invite you to an event or offering a job, claiming they got your number from a friend. They tell you that your friend is trying to reach you from another number and ask you to merge the call. However, instead of your friend, the second call is an OTP service. Once you merge the call, the scammer listens to the OTP and uses it to conduct unauthorized transactions, potentially emptying your bank account.

OTPs can be received via SMS or phone call. This scam is also seen on WhatsApp, where fraudsters trick users into selecting the option to receive OTPs through calls, making interception easier. Scammers exploit the OTP via Call feature to gain unauthorized access to accounts. First, they gather basic details to initiate the login process for your WhatsApp, social media, or bank account.

Next, they call you, posing as someone offering an event invite or job opportunity, claiming to have received your number from a friend. They further convince you that your friend is trying to reach you, prompting you to merge the call. However, the incoming call is not from your friend but an OTP service.

In a rush, you may unknowingly merge the call without noticing the details. Once the OTP is spoken on the call, the scammer listens in and immediately gains access to your account—whether it’s a bank account or any other online platform.

How to Protect Yourself from the Call Merging Scam?
Falling victim to this scam can result in significant financial loss. With several such incidents reported recently, staying vigilant is crucial.

Stay Aware and Informed
Awareness is the first line of defense against scams. Knowing about emerging fraud tactics helps you avoid falling into scammers’ traps. If you are unaware, you may unknowingly become a victim.

Avoid and Block Suspicious Calls
Never entertain unknown calls asking you to merge another call. Immediately disconnect and block such numbers. Airtel has introduced a spam detection service, which alerts users by displaying a Spam Detected message for marketing or scam calls. If you see this message, do not answer the call.

Verify Before Merging Calls
If someone asks you to merge a call claiming to be a friend, disconnect and verify their identity by calling them directly on their known number. This simple step can help prevent falling prey to scammers.