How to spot a fake bank message

Fake bank messages are designed to make you panic and click. Run any “bank” message through this quick checklist before you do anything.

Red flags to check

• It asks for an OTP, PIN or password. Banks never do this. Stop here.
• It threatens to block your account unless you act immediately. Urgency is the trick.
• It contains a link to “update KYC” or “verify”. Real KYC is never done via a random SMS link.
• The link isn’t your bank’s real website (look closely — sbi-kyc-verify.link is not sbi.co.in).
• Poor grammar, odd sender, generic “Dear customer”.

What to do instead

• Don’t tap the link. Open your bank’s official app or type the website yourself.
• Call the number printed on the back of your card — never a number from the message.
• Forward the message to ScamShield if you’re unsure.

If a message pressures you to act “right now”, that pressure is the warning sign.