Beware of Call Merging OTP Scams

Beware of Call Merging OTP Scams

Cybercriminals are constantly evolving their tactics to trick victims into revealing sensitive information. One such emerging scam involves social engineering and call merging to bypass OTP (One-Time Password) security measures.

How the Scam Works:

1. The Attacker Calls the Victim

The scammer poses as a bank representative, telecom employee, or any other professional entity.

They create urgency, claiming an issue with the victim’s account, a job opportunity, or a financial transaction that needs immediate attention.

2. Request to Merge a Second Call

While on the call, the attacker asks the victim to merge an incoming call, saying it’s from another professional verifying details.

In reality, the second call is an automated OTP verification system (e.g., from a bank or payment service).

3. OTP Theft

The scammer listens in and notes down the OTP, which they then use to authorize unauthorized transactions, access bank accounts, or reset passwords.

How to Protect Yourself:

✅ Never Merge Calls with Unknown Numbers – If someone insists on merging a call, decline and verify separately.

✅ Do Not Share OTPs – No legitimate company or bank will ever ask for an OTP over the phone.

✅ Verify Directly – If a caller claims to be from a bank or company, hang up and call the official customer service number.

✅ Be Skeptical of Urgent Requests – Scammers often create panic to rush victims into making mistakes.

✅ Enable Two-Factor Authentication (2FA) – Use app-based authenticators instead of SMS OTPs whenever possible.

This scam exploits human psychology and trust, making awareness the best defense. If you ever receive such a call, report it to your bank, telecom provider, or cybercrime authorities ( 1930 is the number for the National Cyber Crime Helpline in India. You can call this number to report cybercrime, including financial fraud. You can also file a complaint online at cybercrime.gov.in. )

:) Stay alert, stay safe! :)