HDFC/SBI reward points expiring today call India — what to do?

Imagine you receive a call from a number that subtly resembles your bank's customer service, or perhaps even an unknown number. The caller, speaking fluent Hindi or English with a professional tone, introduces themselves as an "HDFC Bank Rewards Team" or "SBI Credit Card Points Department" representative. They immediately create a sense of urgency, informing you that a significant amount of credit card reward points – say, 9,000 points – are about to expire by the end of the day or even within the next hour. Feeling the pressure of losing out on these valuable points, you naturally pay close attention. The scammer then offers to "assist" you in redeeming these points immediately. They might mention options like converting them to cashback, gift vouchers, or even travel miles. To facilitate this, they claim there's a small "processing fee" or "verification step" that requires you to download a specific screen-sharing application from your phone's app store. Popular examples include AnyDesk, TeamViewer, or other seemingly legitimate remote access apps. Once you download and install the app, they instruct you to provide them with the unique access code generated by the application. This is the critical step where they gain complete control over your phone screen. While you watch, they might pretend to navigate through a "rewards redemption portal" that looks very much like your bank's website. They then ask you to log into your actual net banking or credit card account. As you type in your credentials, they are watching every keystroke, effectively stealing your username and password. With screen access, they can initiate transactions, add beneficiaries, or even transfer funds from your account. They might even trick you into approving OTPs that pop up on your screen, explaining them away as "verification codes" for the rewards redemption. By the time you realize what's happening – perhaps an unexpected debit alert or an SMS about a large transaction – your bank account could already be emptied, and your credit card details compromised. The sense of urgency and the illusion of legitimacy are powerful tools in their arsenal, preying on your trust in established financial institutions.

• Unsolicited Calls about Expiring Points:** Banks rarely call customers out of the blue specifically to warn about expiring points. Point expiry notifications are typically sent via official email, SMS to your registered number, or visible on your net banking portal.
• Insistence on Screen Sharing Apps:** NO legitimate bank or financial institution will ever ask you to download a third-party screen-sharing application to help you redeem rewards or resolve any issue. This is a direct red flag.
• High-Pressure Tactics & Urgency:** Phrases like "points expire today," "last chance to redeem," or "immediate action required" are designed to make you panic and bypass critical thinking.
• Request for Personal Banking Credentials:** Never share your net banking login, credit card number, CVV, or OTP (One Time Password) with anyone over the phone, even if they claim to be from your bank. Your bank already has most of this information and will never ask for sensitive details like your full card number or OTP.
• Caller Asks You to Perform Actions on Your Phone:** If a caller guides you step-by-step to download an app, click links, or input information on your phone, be extremely suspicious.

• Verify Directly with Your Bank:** If you receive a call about expiring points, disconnect. Then, independently call your bank's official customer service number (found on their website or the back of your credit card) to verify the information. Do NOT call back the number that contacted you.
• Never Download Unsolicited Apps:** Refuse to download any app suggested by an unknown caller, especially screen-sharing or remote access tools.
• Protect Your OTPs:** Treat your OTPs like cash. Never share them with anyone, under any circumstances. An OTP is for *your* authorization of a transaction, not for the bank's verification.
• Be Skeptical of "Too Good To Be True" Offers:** While reward points are great, be wary if the redemption process seems overly complicated or requires unusual steps.
• Educate Yourself:** Be aware of common scam tactics. Regularly check your bank's official channels for fraud alerts and security tips.
• Monitor Your Bank Statements:** Regularly check your credit card and bank statements for any unauthorized transactions.

• Immediately Disconnect the Call:** As soon as you suspect it's a scam, hang up. Do not engage further.
• Change All Relevant Passwords:** If you shared any banking credentials (net banking, credit card login), change them immediately through your bank's official website.
• Notify Your Bank:** Contact your bank's fraud department immediately to report the incident. Provide them with all details, including the caller's number if possible.
• Block Your Card if Compromised:** If you suspect your credit card details were compromised, request your bank to block/hotlist the card and issue a new one.
• Report to Cyber Crime (India):** File a complaint on the National Cybercrime Reporting Portal (cybercrime.gov.in) or call their helpline at 1930. Provide all relevant details about the scam.
• Uninstall Any Suspicious Apps:** If you installed any screen-sharing or unfamiliar apps, uninstall them immediately from your device.