That eKYC Video Call Could Be a Scam: 7 Checks Before You Show Your ID
A message says your bank, wallet, delivery account, SIM, or investment app needs urgent eKYC. Then someone asks for a video call, a selfie, your Aadhaar or PAN, and an OTP. Stop before you turn on the camera.
eKYC is now normal. People use it for bank accounts, mobile connections, wallets, trading apps, insurance, travel, and delivery platforms. That normality is exactly why scammers use it. A fake verification message does not need to sound dramatic. It only needs to sound official enough for you to share your face, ID, screen, or OTP.
The scam often starts on WhatsApp, Telegram, SMS, email, or a phone call. The sender may claim your account will be frozen, your SIM will be blocked, your parcel will be returned, your payment will fail, or your KYC will expire today. Some attackers impersonate a known bank or wallet. Others copy the look of a government service, telecom operator, broker, or courier company.
The rule that blocks most fake eKYC scams: Never complete identity verification from a link or call someone sent you. Open the official app or website yourself, then check whether eKYC is really pending.
1. The verification starts from WhatsApp or Telegram
A real company may send reminders, but sensitive identity checks should happen inside the official app, branch, or verified website. Be careful when a stranger pushes you to install an app, join a video call, scan a QR code, or open a shortened link. Do not trust the chat photo, name, or copied logo. Those are easy to fake.
2. They ask you to show Aadhaar, PAN, passport, or card details on camera
Your ID can be recorded, screenshotted, and reused. A scammer may ask you to hold your Aadhaar, PAN, passport, bank card, or cheque near your face to "confirm ownership." That gives them both document data and face data in one clean capture. If identity verification is required, use the official flow you opened yourself.
3. The caller wants your OTP, PIN, or screen share
No legitimate eKYC agent needs your banking PIN, UPI PIN, card CVV, password, or full OTP read aloud on a call. Screen sharing is also risky because it can expose SMS codes, notifications, contacts, email, and payment apps. If a caller says the OTP is "only for verification," assume it can move money, reset access, or approve a login.
4. The deadline is designed to scare you
Scammers use phrases like account blocked in 30 minutes, final notice, regulator order, police verification, SIM suspension, or pending fraud case. Real services may have deadlines, but they do not need you to panic through a random video call. Slow down, end the call, and check the official app, statement, or customer support number from the company's own website.
5. The app or website looks almost right
Fake eKYC pages often copy colors, icons, and forms from real brands. Look closely at the domain, spelling, unusual file downloads, missing HTTPS, odd language, and payment prompts. Do not install APK files sent in chats. On Android, unknown apps can ask for SMS, accessibility, notification, and screen permissions that help attackers take over accounts.
6. They turn verification into a payment
Some fake eKYC calls end with a small "refundable" charge, courier fee, SIM reactivation fee, wallet unlock fee, or tax payment. The amount may be small so you do not think twice, but the payment page can capture card data or approve a larger debit. Identity verification should not require payment to a personal UPI ID or random bank account.
7. The image proof is only a screenshot
The caller may send a screenshot showing your account marked pending, a fake ticket number, a government-style notice, or a customer profile page. Treat screenshots as claims, not proof. They can be edited in minutes. Verify inside your own account, through official email history, bank records, or customer support you contact independently.
What to do if you already joined the call
If you showed an ID, shared an OTP, installed an app, or made a payment, act quickly. Disconnect the call. Remove unknown apps and risky permissions. Change passwords for banking, email, wallet, telecom, and broker accounts from a trusted device. Contact your bank or wallet provider if money moved. In India, report online financial fraud through 1930 and cybercrime.gov.in as soon as possible.
The family rule for eKYC requests
Make one simple rule at home: no one shows an ID card, face, OTP, or payment screen on a call without checking with another person first. This helps students, parents, older relatives, new bank users, and family members living abroad who may respond quickly to account-freeze messages.
How FakeOut helps
Fake eKYC scams often depend on edited screenshots, fake notices, copied identity forms, and suspicious profile images. FakeOut helps you check whether an image or screenshot may have been manipulated before you trust it, forward it, or act on it.