The Scammer's Festive Opportunity
During festive periods like Diwali and Christmas, online shopping traffic surges. People are hunting for deals, juggling multiple orders, and are more likely to be in a rush. Scammers thrive on this urgency and distraction. They know you might be expecting
calls about deliveries or payments, making you a prime target for what is known as 'vishing' or voice phishing. This is a type of fraud where criminals impersonate legitimate company representatives over the phone to trick you into revealing sensitive information.
Anatomy of a Fake Support Scam
The scam often starts with an unsolicited call or message. The fraudster, posing as a customer service executive from a major e-commerce site, claims there is an urgent problem with your account—a suspicious transaction, a failed payment, or a delivery issue. They create a sense of panic, insisting you must act immediately to avoid financial loss or to secure a too-good-to-be-true refund. The ultimate goal is to persuade you to share confidential details like your credit card number, CVV, password, or, most commonly, a One-Time Password (OTP). In other variations, they might ask you to click a malicious link or download a remote access application.
Key Red Flags to Watch For
Recognising a fraudulent call is the first step to protecting yourself. Be immediately suspicious if the caller:
- Contacts you unexpectedly about a problem you were not aware of.
- Creates an intense sense of urgency or panic.
- Asks you to share your OTP, PIN, or password. Legitimate companies will never ask for this information.
- Instructs you to download an app to 'fix' the problem. These are often remote desktop apps like AnyDesk that give them full control of your device.
- Asks you to pay a fee to resolve an issue or receive a refund, especially through gift cards, QR codes, or a direct UPI transfer.
The 'Remote Access' Deception
A particularly dangerous tactic involves convincing you to install remote access software. The scammer will guide you through the process of downloading an app from the Play Store, claiming it's necessary to provide technical support. Once you grant the required permissions, the fraudster can see your screen, record your keystrokes, and access your banking apps and saved passwords. They can then initiate transactions and approve them by viewing the OTPs sent to your phone, all while you are still on the call with them, completely unaware.
How to Stay Safe While Shopping
Vigilance is your best defence. Always assume that any unsolicited call from customer support is suspicious. If you receive such a call, hang up immediately. If you're concerned there might be a genuine issue, contact the company yourself using the official customer care number listed on their website or app—never use a number provided in an email or SMS. Remember that RBI has mandated specific number series for financial institutions; for instance, transactional calls should come from numbers starting with '1600' and promotional calls from '140'. Always double-check website URLs for spelling errors and ensure they begin with 'https'. Finally, regularly review your bank and credit card statements for any unauthorised transactions.
What to Do If You Get Scammed
If you suspect you've fallen for a scam and lost money, time is of the essence. First, immediately call your bank or card issuer to report the fraudulent transaction and block your card or account. Next, report the incident by calling the National Cyber Crime Helpline at 1930. You should also file a formal complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in). The sooner you report the fraud, the higher the chances of freezing the transfer and potentially recovering your funds. Preserve all evidence, including screenshots of messages, call logs, and transaction details, as this will be crucial for the investigation.
