Short answer
Yes. Banks and wallets never ask for your OTP, PIN or password by phone, message or link. The most common trick is a call saying your KYC must be updated or your account will be blocked. Others are fake login links, prizes or parcels that need a fee and people claiming they sent you money by mistake. If you've already shared a code, call your bank or wallet at once to block the account, change your passwords and report it to the police.
The details
The usual scripts
| What they say | What's really happening |
|---|---|
| "Your KYC is incomplete. Tell me the code we sent." | The code logs them into your account |
| "Click this link to unblock your wallet." | A fake login page steals your password |
| "You've won a prize. Pay a small fee to claim it." | There's no prize |
| "I sent money by mistake, please return it." | Often no money arrived, or it was stolen money |
| "A parcel from abroad is held at customs." | There's no parcel, only fees |
The rule is simple: never share an OTP, PIN or password with anyone, including someone who says they're from the bank.
Common problems
Someone says they sent money to my wallet by mistake and wants it back.
Check your actual balance in the app, not a screenshot or SMS they send. If money really arrived, return it only through your wallet or bank's official dispute process, not by sending to a number they give you.
I clicked a link and entered my login.
Change your password and PIN immediately from the official app, then call the wallet or bank to check for transactions and block the account if needed.
The caller knew my name and account details.
Scammers often have leaked details. Knowing your name doesn't make them genuine. Hang up and call the official number on the bank's website or card.
Do wallets warn about this?
Police and the Cyber Bureau repeat that banks don't ask for KYC updates or personal details over the phone. Wallet, bank and SMS fraud made up 744 of the cybercrime complaints in 2082/83.
Real experiences
Been through this recently? Tell the next person which office you went to and what they asked for. Reports are published as community notes, apart from the official information.
Share your experienceSources
- Ratopati: police warnings on wallet hacking and fake KYC calls (July 2026)english.ratopati.com
- The Himalayan Times: cybercrime complaints by platform (August 2026)thehimalayantimes.com
Written from the sources above and last checked on 8 Oct 2026. Some details aren't confirmed against an official page yet, so check fees and documents with the office before you go.
Spotted something out of date?Related