Bank Details at Risk as Cybercriminals Target OTPs, Warns Police
Bank Details at Risk as Cybercriminals Target OTPs, Warns Police
Pimpri-Chinchwad | October 29, 2025: A circular warning citizens about a new digital fraud technique that is sweeping Maharashtra’s metropolitan belt was released by Cyber Police officers at the Pimpri-Chinchwad Police Commissionerate (PCPC). The tactic, known as the “Call Forwarding Scam,” uses false pretenses to persuade unwary citizens to dial a particular mobile code, which frequently starts with 21 or 401.
All incoming calls to the victim’s number are routed to the fraudster’s device after the code has been entered. According to authorities, this straightforward rerouting gives hackers total control over the victim’s phone conversations, allowing them to monitor banking activities, intercept OTPs, and pose as victims during crucial financial transactions.
How the Scam Works
Officials said the operation starts with a call from a person claiming to be from a SIM card firm or telecom company. The scammer asks the victim to dial a short code in order to “activate” or “verify” the service after claiming there is a network upgrade, a service interruption, or a promotional offer.

A digital trap is what comes next. Call forwarding is secretly enabled as soon as the victim contacts the number. From then on, the criminal’s device receives all OTPs associated with bank or UPI transactions, as well as incoming calls. In a number of recent cases, victims were unaware that they had lost control of their phones until their bank accounts began to decline.
The Hidden Costs of a Simple Code
According to investigators, there are four main consequences of this scam:
| OTP Theft | One-time passwords associated with financial accounts are intercepted by fraudsters. |
| Missed Calls | All incoming calls are sent to the scammer, and victims no longer get any. |
| Social Engineering | To trick friends, family, or coworkers, criminals pose as victims. |
| Privacy Breach | Personal safety is at risk when call logs and bank messages are accessible. |

These seemingly insignificant manipulations, according to cyber cops, are a worrisome development in social engineering.
| “Residents have reported that scammers pose as mobile company officials or government representatives, asking them to dial a code for updates or offers,” a PCPC official said. “Once you comply, they control your phone.” |
Reporting and Prevention: The Golden Hour
Dr. Shivaji Pawar, Deputy Commissioner of Police (Crime), stressed the value of prompt reporting, or what police refer to as the “golden hour.”
| “If you are defrauded through call forwarding, immediately contact cybercrime.gov.in or call the national helpline 1930,” he said. |
Police emphasize that the likelihood of retrieving stolen funds is significantly increased when a cybercrime is reported within the first hour of being discovered. Even while thieves frequently transfer stolen money overseas or convert it into cryptocurrency, prompt reporting can still stop many transactions before they are finished.

In order to stop these attacks, people are asked to:
- Never enter the USSD code that an unknown caller suggests.
- Use *#21# to see if call forwarding is active.
- Use ##002# to deactivate all forwarding.
- For verification, get in touch with telecom support.
- Notify the bank right away if there are any fraudulent transactions.
| “Many people have already lost a lot of money because this scam is new in our area,” a Pimpri-Chinchwad Cyber Police official stated. “One call at a time, it demonstrates how criminals are adapting more quickly than the general public is aware of.” |
About The Author:
Yogesh Naager is a content marketer who specializes in the cybersecurity and B2B space. Besides writing for the News4Hackers blogs, he also writes for brands including Craw Security, Bytecode Security, and NASSCOM.
Read More:
WhatsApp Sends you Fake Official RTO Challans via APK Malware: Police Alert