Telangana cyber cops expose premium credit card phone scam

Telangana Cyber Security Bureau (TGCSB) has uncovered a new cyber fraud where victims receive fake ‘DoT-verified’ smartphones preloaded with malware that hijacks OTPs. A Hyderabad man lost Rs. 77 lakh in 24 hours. TGCSB has issued safety advisories

Hyderabad: A new cybercrime modus operandi, where fraudsters exploit public trust in banks and government agencies by sending ‘DoT-verified’ smartphones, has been uncovered by the Telangana Cyber Security Bureau (TGCSB).

The scam starts with a phone call from conmen posing as bank executives, offering a premium credit card with exclusive benefits but insisting on Department of Telecommunications (DoT) verification. Days later, a neatly packed smartphone, complete with fake bank stickers, is delivered to the victim’s doorstep.

---

According to TGCSB officials, the phones are preloaded with a hidden SMS-forwarding app that silently diverts one-time passwords (OTPs) and messages to fraudsters once the victim inserts their SIM card. To appear authentic, a fake “DoT Secure” icon is also displayed on the device.

In one case, a Hyderabad resident lost Rs. 77 lakh in less than 24 hours after falling prey to the scam. The victim realised something was amiss only when SMS alerts stopped reaching his other SIM card.

Shikha Goel, Director of TGCSB, described the scheme as a dangerous evolution in cyber fraud. “Fraudsters are hijacking OTPs and banking access by tricking people into inserting SIMs into compromised devices. Citizens must be extremely cautious,” she warned.

She added: “Stay alert. Do not let fraudsters hijack your bank account by hijacking your SIM.”

TGCSB advisory:

• Never accept unsolicited gadgets or phones claiming to be from banks or DoT.
• Avoid inserting SIM cards into unknown devices.
• Cross-check with official bank or DoT helplines before responding to such calls.
• Treat sudden stoppage of OTPs and SMS as a red flag.
• Report suspicious activity to Cybercrime Helpline 1930 or file a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in).