In short
An SMS or email says your bank KYC is due and includes a link or urgent instruction The objective is typically to capture credentials or move the victim into a fraudulent payment/account-takeover flow.
What it is
The message claims account restrictions or closure may follow unless KYC is updated. The victim is then pushed to click a link and enter identity, banking or authentication details.
How it starts
An SMS or email says your bank KYC is due and includes a link or urgent instruction.
What they tell you
The message claims account restrictions or closure may follow unless KYC is updated
What they want you to do
Click a link and enter identity, banking or authentication details
How you lose money
capture credentials or move the victim into a fraudulent payment/account-takeover flow
What happens next
After the first successful step, the fraudster may demand more money/information, deepen account or device access, or disappear.
Warning signs
fear | urgency | authority | phishing | smishing | lookalike website
Where this is documented
India — officially documented by an Indian authority/regulator
How to avoid it
Use only the bank/payment app or official contact details; never share OTP, PIN, password or screen access; verify the payee and transaction purpose before approving.
If it already happened
Contact the bank/payment provider immediately if money moved; report financial cyber fraud promptly via 1930 and cybercrime.gov.in; preserve messages, transaction IDs, phone numbers and URLs.