India’s 146% Surge in SMS Banking Scams: Mobile Fraud Crisis Explained
India experienced a 146% increase in SMS-based banking fraud incidents between the second half of 2025 and the first half of 2026 compared to the same period in 2024, reflecting a significant escalation in mobile-centric financial deception, according to a study published by a fraud analytics firm.
Rise in SMS-Based Banking Fraud
The research indicated a 67% overall rise in mobile fraud activity during the timeframe, with iOS devices seeing an 86% surge and Android devices recording a 35% growth. Meanwhile, fraudulent activity originating from web browsers declined by 10%, signaling a strategic shift by cybercriminals toward mobile platforms. The analysis, derived from transaction data collected by the firm’s banking clients in India, revealed a 35% rise in the total value of attempted fraudulent transactions. Concurrently, the average length of scam-related phone calls dropped by 31%, and the median duration of fraud sessions decreased by 32%, suggesting that perpetrators are executing transactions more rapidly.
Mobile Fraud Trends and Device-Specific Data
The research indicated a 67% overall rise in mobile fraud activity during the timeframe, with iOS devices seeing an 86% surge and Android devices recording a 35% growth. Meanwhile, fraudulent activity originating from web browsers declined by 10%, signaling a strategic shift by cybercriminals toward mobile platforms.
Shift in Cybercriminal Tactics
The average length of scam-related phone calls dropped by 31%, and the median duration of fraud sessions decreased by 32%, suggesting that perpetrators are executing transactions more rapidly.
Impact of Digital Payments Infrastructure
The report attributed part of the trend to India’s expanding digital payments infrastructure, including widespread use of the Unified Payments Interface (UPI), mobile banking apps, e-commerce services, and online investment platforms. While these technologies have enhanced financial accessibility, they have also created new vulnerabilities for cybercriminals.
Advancements in Fraud Detection
Despite the higher value of attempted fraud, BioCatch noted a 12% reduction in the total number of fraud attempts among its clients, implying advancements in detection mechanisms.
Collaborative Efforts in Combating Fraud
Subhashish Bose, Global Advisory Director at BioCatch, emphasized that collaboration between financial institutions, the Reserve Bank of India (RBI), the Indian Cyber Crime Coordination Centre (I4C), and law enforcement agencies is improving the nation’s capacity to counter financial crimes. He explained that behavioral analytics enables banks to monitor user activity continuously rather than relying solely on static authentication methods, allowing earlier identification of suspicious behavior.
Evolving Smishing Techniques
A security researcher from Algoritha Security noted that SMS phishing, or smishing, is evolving as attackers integrate fake banking alerts, malicious links, and psychological manipulation techniques to compromise credentials and authorize unauthorized transactions.
User Recommendations for Protection
Users are advised to avoid engaging with links from unsolicited messages, confirm requests through official banking channels, and activate multi-factor authentication. Cybersecurity professionals also recommend keeping mobile operating systems and banking applications updated, refraining from sharing One-Time Passwords (OTPs) or login details, and reporting suspicious communications to financial institutions and the national cybercrime helpline 1930 or the National Cyber Crime Reporting Portal.
Tom Peacock, Director of Global Fraud Intelligence at BioCatch, highlighted that SMS scams remain effective due to their exploitation of user trust in text messaging. Fraudulent communications are often crafted to mimic legitimate notifications, pressuring recipients to act impulsively without verifying the message’s authenticity.
Subhashish Bose, Global Advisory Director at BioCatch, emphasized that collaboration between financial institutions, the Reserve Bank of India (RBI), the Indian Cyber Crime Coordination Centre (I4C), and law enforcement agencies is improving the nation’s capacity to counter financial crimes.
A security researcher from Algoritha Security noted that SMS phishing, or smishing, is evolving as attackers integrate fake banking alerts, malicious links, and psychological manipulation techniques to compromise credentials and authorize unauthorized transactions.
About Author
English