Quick answerYour bank will never ask you for an OTP, PIN, CVV or full card number on a call or message. If a caller claiming to be your bank asks for any of these, hang up and call the number on the back of your card or in the official app yourself. Sharing an OTP lets the caller approve a transfer or add your card to their phone.

The caller says they're from your bank's fraud department, a wallet company or even the State Bank. They know your name and maybe the last digits of your card, often from leaked data. They warn of a suspicious transaction or a blocked account, then say a code is coming by SMS that you need to read back to "cancel" it. That code actually approves a payment, a new device or a password reset.

The one rule

An OTP is a signature. Reading it to anyone is the same as signing a cheque for them. No bank, wallet, telecom or government official will ever ask for it.

Other versions of the same trick

  • "Your ATM card will be blocked, confirm your PIN."
  • "We're upgrading your account / Raast ID, tell us the code we sent."
  • A WhatsApp profile with the bank's logo and a "verified"-looking badge.
  • A follow-up call from a fake "police officer" or "cyber crime officer" about the same case.

What to do during the call

  1. Say you'll call the bank back, and hang up.
  2. Call the number printed on your card or shown in the official app, not a number the caller gives you.
  3. Report the caller's number to the bank and your mobile operator.

If you already shared the code

Call your bank immediately and ask them to block your card or account and reverse any pending transaction. Change your app PIN and password. Then file a complaint with your country's cyber crime agency and keep the reference number.

Frequently asked questions

Will my bank ever ask for an OTP over the phone?

No. Banks and wallets never ask for OTPs, PINs or CVVs on calls, SMS or WhatsApp.

How did the scammer know my name and card digits?

Usually from leaked customer data or earlier phishing. Knowing a few details does not prove a caller is genuine.

I read the OTP but no money was taken yet. What now?

Call your bank immediately to block the card or account, change your PIN and password, and check for new devices linked to your banking app.

Related guides