Fake Customer Care Number Scams: How They Work and What to Do

A fake customer care number scam works like this: you search for a company's helpline, call a number that looks official but belongs to a fraudster, and the "agent" talks you into sharing an OTP, card details or installing a screen-sharing app. The fix is to never take a helpline from a search result or map listing, and to use the number printed on your card, statement or the company's own app. If you have already called, tell your bank immediately and report the fraud on 1930 and at cybercrime.gov.in.

Who this guide is for

This guide is for anyone who looks up support numbers for banks, courier firms, online shops, airlines, gas agencies or telecom providers. By the end you will know how the scam unfolds, which warning signs matter, how to find a number you can trust, and what to do in the first hour if you suspect you have already been caught. It describes the pattern only so you can recognise it; it does not describe how to run it.

How the scam works

Reports from police and banks in India describe a consistent pattern. News and fact-check coverage of cases in Kerala, for example, describes fraudsters posting fake helpline numbers online for banks and e-commerce companies, and then waiting for people to call them.

1. A problem or a need. You have a failed transaction, a delayed parcel, a refund that has not arrived or a card you want to block.
2. A search for the number. You type the company name plus "customer care" into a search engine or a map app. Fact-check reporting has described cases in which victims called numbers shown in a search or map listing, and notes that scammers exploit the fact that business listings can be added.
3. A convincing call. The person who answers sounds professional, may know the name of the company, and asks about your problem.
4. A request that does not fit. The "agent" asks you to install a remote-access app, to pay a very small "registration" or "verification" amount, or to read out an OTP or card number. Kerala government and police warnings mention remote-access apps and a small fee, such as Rs 5, used as bait.
5. The loss. With your screen visible, or your OTP in hand, they move money out of your account.

A related pattern is the call-back: you post a complaint on social media, and a fake "support" account sends you a number to call. The same rules apply.

Warning signs during the call

Any one of these should end the call:

If you are unsure, hang up. A genuine company will still be reachable after you check.

How to find a number you can trust

Use sources that the company controls and that you reached by a route you control.

Banks and cards

• The number printed on the back of your debit or credit card.
• The number on your bank statement or cheque book.
• The contact page of the bank's website, reached by typing the address yourself or from the bank's mobile app that you installed from the official app store.

Banks themselves advise this. A security advisory from UCO Bank, for example, tells customers not to search for helpline numbers on search engines and to use official websites or apps for contact details instead. Other banks publish similar advice.

Shops, couriers and service providers

• The order confirmation email or SMS from the company, and the company's app.
• The address you typed yourself into the browser, rather than a link in an SMS or an advert.
• Inside the shopping app: most have a help or support section tied to your order.

If you must use a search engine

Treat the result as a lead, not as proof. Check that the web address is exactly the company's, not a lookalike with extra words. Then open that site and find the contact number there rather than reading the number from the search snippet. Do the same for numbers shown on a map listing: the listing is not verified by the company just because it appears.

What to do if you already called

Speed matters most when money has left your account. Work through these steps in order.

If you shared an OTP, card details or UPI PIN, or money has moved

1. Stop the call and do not follow any further instruction, including "to cancel the transaction".
2. Call your bank on its genuine number (from your card or its official app), say that you have been defrauded, and ask them to block the card, UPI access or net banking and to flag the transaction.
3. Call 1930, the national cyber crime helpline. Give the transaction details as soon as you can, as speed improves the chance of holding the money.
4. File a complaint on cybercrime.gov.in, the National Cyber Crime Reporting Portal, with the transaction IDs, the number that called you, screenshots and the time of the call.
5. Keep evidence: call log, SMS messages, screenshots, bank alerts and the web page or listing where you found the number.

If you installed a remote-access or screen-sharing app

1. Disconnect from the internet (turn on aeroplane mode) so that the session ends.
2. Uninstall the app: on Android, long-press the app and choose Uninstall, or open Settings, then Apps, find the app and uninstall it. On iPhone, press and hold the icon and choose Remove App.
3. Change the passwords for your email and banking from a different, clean device, and sign out of other sessions.
4. Contact your bank as above, even if nothing has been debited, because they may have seen your balance and your messages.

If you did not share anything

Block the number, do not call it again, and consider reporting it on cybercrime.gov.in. Watch your bank statements for a few weeks. Be careful with callers who ring back and quote your name, as the scammer may keep the details you said.

Verification checklist for any support call

Run through this before giving any information to a support person:

• Did I find this number on my card, statement, or the company's own app or site?
• Did I call them, or did they call me? If they called me unexpectedly, hang up and call the number I trust.
• Are they asking for an OTP, PIN, CVV, a remote-access app or a fee? If yes, stop.
• Can the problem be solved inside the app, such as raising a refund request in my order screen?

Common questions that come up

Does a number at the top of a search page mean it is official?

No. Rank in search results or a map listing is not a verification of ownership. Use the card, the statement, or the app.

Can a company's real support ask me to install an app?

Some companies do use screen-sharing for technical support, but only for their own, named tool and when you called a number you trust. If you are asked to install a remote-access app to get a refund or fix a payment, treat it as a scam.

Is the 1930 helpline only for losses?

It is the national helpline for reporting cyber financial fraud. If a transaction has happened, call straight away. For other cases, you can file a complaint on cybercrime.gov.in.

Related reading

For another impersonation scam that targets people in India, read Digital Arrest Scam: What It Is and What to Do If You Get the Call. To protect the accounts that scammers go after, see Turn On Two-Step Verification for Google, Microsoft and Apple Accounts.

Summary

• Never take a helpline number from a search result, social media reply or map listing.
• Use the number on your card or statement, or in the company's own app.
• No genuine agent needs your OTP, PIN, CVV or a remote-access app.
• If money has moved, call your bank and 1930 immediately, then file at cybercrime.gov.in.
• Keep evidence, uninstall any remote-access app and change passwords from another device.

References

• National Cyber Crime Reporting Portal: https://cybercrime.gov.in
• UCO Bank, security advisory on cyber fraud awareness: https://ebanking.uco.bank.in/Preloginscreenfiles/Security3.html
• Outlook India, Kerala Police warning on customer care numbers from web searches: https://www.outlookindia.com/national/don-t-trust-customer-care-numbers-from-web-searches-keralam-police
• Fact Crescendo, scam explainer on fake customer care numbers (3 November 2025): https://english.factcrescendo.com/2025/11/03/fake-customer-care-number-scam/