RBI call Iran transactions scam India – account frozen? What to do

This scam operates under the guise of an urgent and severe financial threat – the freezing of your bank account. The attackers leverage a common fear: losing access to one's hard-earned savings. 1. **The Deceptive Call:** You receive an unsolicited phone call. The caller identifies themselves as an official from the Reserve Bank of India (RBI) or sometimes directly from your bank (e.g., SBI, HDFC, ICICI). They often use sophisticated spoofing techniques to display a legitimate-looking RBI or bank helpline number on your caller ID, adding a layer of credibility. 2. **The Fabricated Allegation:** The scammer states, with a grave and authoritative tone, that your bank account has been flagged for suspicious transactions, specifically mentioning links to Iran. This is a deliberate tactic. By invoking a foreign country, they create an air of international compliance and a sense of official investigation, which most ordinary citizens know little about, making it difficult to verify on the spot. They might claim these transactions are related to money laundering, terror financing, or sanctions violations. 3. **The Urgent Ultimatum (Digital Arrest):** The core of this "digital arrest" scam is the immediate deadline. You are told that unless you "verify" your details on a provided link or take immediate action, your account will be permanently frozen within a very short timeframe – often "in 30 minutes" or "within 1 hour." This deadline is designed to induce panic and prevent you from thinking clearly or seeking independent advice. 4. **The Malicious Link/Action:** You are then instructed to visit a phishing website via a link sent to you (usually through SMS or WhatsApp during the call) or to download a remote access app. * **Phishing Link:** The link leads to a professionally designed fake banking portal or a page pretending to be an RBI verification site. Here, you're prompted to enter your sensitive banking credentials, including account numbers, UPI PINs, net banking passwords, debit card details (CVV, expiry date), and crucially, OTPs (One-Time Passwords). * **Remote Access App:** Alternatively, they might pressure you to download an app like 'AnyDesk' or 'TeamViewer' which gives them complete control over your device, allowing them to access your banking apps directly. 5. **The Financial Loss:** Once you enter your details on the fake site or grant remote access, the scammers quickly initiate unauthorized transactions. They might transfer funds via UPI, perform net banking transfers, or even apply for loans in your name. Since you've willingly provided the OTPs (under pressure), these transactions bypass security checks, leading to significant financial loss, often emptying your account within minutes.

• Unsolicited Call from "RBI/Bank" about International Transactions:** The RBI _never_ calls individuals regarding their bank accounts or international transactions. Banks will also typically not call out of the blue about such severe issues, especially with immediate threats of account freezing.
• Threat of Immediate Account Freezing:** Any call threatening to immediately freeze your bank account for vague reasons is a major red flag. Banks and regulatory bodies follow due process and will communicate through official channels (registered mail, secure in-app notifications) with ample time, not a high-pressure phone call.
• Asking for OTPs or Banking Credentials:** The RBI will never ask for your OTP, ATM PIN, CVV, or net banking password. Your bank will also never ask for your full banking credentials over the phone or via unverified links.
• Directing You to a Link for "Verification":** Reputable institutions do not send links for "urgent verification" during a phone call that demand sensitive information. Always be suspicious of links sent via SMS, email, or WhatsApp, especially if they end in unusual domains.
• Pressure to Act Immediately:** Scammers rely on creating panic and urgency to bypass your critical thinking. Any demand for immediate action without time to verify is a classic scam tactic.
• Suggesting Remote Access Apps:** Never download any app like AnyDesk, TeamViewer, or similar remote desktop software at the instruction of an unknown caller claiming to be from a bank or RBI.

• Verify, Don't Panic:** If you receive such a call, remain calm. Do not trust the caller ID, as it can be spoofed. Politely tell the caller you will verify the information independently and hang up.
• Contact Your Bank Directly:** If you are genuinely concerned, contact your bank using the official customer service number listed on their official website or on the back of your debit/credit card. Do NOT call back the number that appeared on your caller ID.
• Never Share OTPs or Bank Details:** Your OTP is like the key to your bank vault. Never share it with anyone, under any circumstances, even if they claim to be from your bank, RBI, or any government agency.
• Be Skeptical of Links:** Never click on suspicious links sent via SMS, email, or WhatsApp, especially if they are unsolicited or come with urgent demands. Always type the official bank website URL directly into your browser.
• Protect Your Devices:** Be cautious about downloading apps onto your phone or computer, especially if prompted by an unknown caller. Enable two-factor authentication (2FA) wherever possible.
• RBI Does Not Handle Individual Accounts:** Remember, the Reserve Bank of India (RBI) is the central bank and regulator; it does not directly manage individual bank accounts or conduct verification calls for bank account transactions of citizens.

• Hang Up Immediately:** If you suspect it's a scam, end the call immediately. Do not engage further or provide any information.
• Contact Your Bank's Fraud Department:** If you have shared any banking details or believe your account has been compromised, immediately call your bank's official fraud helpline. Explain the situation and request them to block your cards/account if necessary.
• Report to National Cybercrime Helpline:** File a complaint immediately on the National Cybercrime Reporting Portal at www.cybercrime.gov.in or call the helpline number 1930. The sooner you report, the higher the chances of recovering funds.
• Inform Your Family and Friends:** Spread awareness about this scam among your loved ones so they don't fall victim.
• Change Passwords:** If you believe you may have inadvertently shared any login credentials, immediately change all related passwords (bank, email, UPI apps).