Tanishq/MMTC-PAMP digital gold expired SMS – what to do?

This sophisticated scam preys on the growing popularity and trust in digital gold investments, a common financial product offered by reputable Indian brands. The fraudsters initiate contact, typically through unsolicited WhatsApp messages or SMS, often using official-looking branding and logos to appear legitimate. The message invariably creates a sense of urgency, claiming your digital gold account – whether from Tanishq, MMTC-PAMP, SafeGold, or another popular platform – is either 'expiring,' 'about to be deactivated,' or requires immediate 'redemption' to avoid forfeiture. Once the victim responds or clicks on a link embedded in the message, they are directed to a meticulously crafted fake website. These websites are often mirror images of the legitimate brand's portal, complete with familiar branding, product imagery, and even plausible-looking terms and conditions. The goal is to trick the user into believing they are on the official platform. On this fake site, victims are prompted to enter their login details, digital gold holdings information, or even personal KYC details, all of which are immediately harvested by the scammers. After 'logging in' or attempting to 'redeem' their gold, the site will display a message indicating that to complete the redemption, a 'mandatory' tax, processing fee, or administrative charge must be paid. These fees typically range from ₹5,000 to ₹25,000, strategically chosen to be significant enough to deter casual abandonment but not so high as to immediately raise extreme suspicion. The scammer then provides a malicious payment link, often masquerading as a legitimate UPI payment gateway or bank transfer interface. When the victim enters their payment details and authorizes the transaction, their money is immediately siphoned off. In many cases, the scammers may also gain access to the victim's actual digital gold account details through the fake login process, potentially allowing them to transfer or liquidate the digital gold itself, leading to a double loss. The scammers often maintain contact throughout the process, providing 'customer support' to guide the victim, further solidifying the illusion of legitimacy until it's too late.

• Unexpected Communication:** Any unsolicited SMS or WhatsApp message claiming your digital gold account is 'expiring' or needs 'redemption' is a major red flag, especially if it creates urgency. Reputable financial institutions or gold platforms rarely communicate critical account status updates solely via unverified links.
• Demanding Upfront 'Fees' or 'Taxes' for Redemption:** Legitimate digital gold platforms do not ask for "taxes," "processing fees," or "administrative charges" to *redeem* your own gold. Any applicable taxes (like GST) are usually deducted at the point of sale or included in the final redemption value, not demanded separately as an upfront fee via a third-party link.
• Suspicious Website URLs:** Always check the website address (URL) in your browser. Fake websites often have subtle misspellings, extra words, or use different domain extensions (.xyz, .info, .site) instead of the official .com or .in for established brands like Tanishq or MMTC-PAMP.
• Pressure Tactics and Urgency:** Scammers rely on creating panic. Messages that threaten immediate forfeiture of your gold or account deactivation if you don't act "now" are designed to bypass your critical thinking.
• Requests for OTP/PIN on Unfamiliar Pages:** Never enter an OTP, UPI PIN, or banking password on a page or link that you did not explicitly initiate through your official app or verified website. Scammers will try to trick you into authorizing fraudulent transactions.
• Grammar and Spelling Errors:** While some sophisticated scams are flawless, many still contain subtle grammatical mistakes, awkward phrasing, or inconsistent branding elements that can be a giveaway.

• Verify Directly with the Source:** If you receive a message about your digital gold, *never* click on links provided in the message. Instead, directly visit the official website of Tanishq, MMTC-PAMP, SafeGold, or your respective digital gold provider by typing their known URL into your browser or by using their official mobile app.
• Be Skeptical of Unsolicited Communication:** Treat all unexpected messages, especially those related to money or investments, with extreme caution. Genuine financial institutions will usually communicate critical updates through secure channels, and often have a direct support line you can call.
• Understand Digital Gold Redemption Process:** Familiarize yourself with the actual redemption process of your digital gold provider. Legitimate redemptions typically involve logging into your verified account on the official platform and following secure steps, not paying upfront fees via external links.
• Use Strong, Unique Passwords and 2FA:** Ensure your digital gold accounts and email associated with them have strong, unique passwords. Enable Two-Factor Authentication (2FA) wherever available for an added layer of security, making it harder for scammers to access your accounts even if they steal your password.
• Educate Yourself and Your Family:** Share awareness about such scams with elderly family members or anyone less tech-savvy. Scammers often target vulnerable individuals who may not be as familiar with online threats.

• Do NOT Pay Anything:** Under no circumstances should you pay any "fee," "tax," or "charge" requested by the scammer. This is their primary objective, and paying will only result in financial loss.
• Block and Report:** Immediately block the sender's number on WhatsApp or SMS. Report the message as spam or a scam to your telecom provider and to WhatsApp, helping prevent others from being targeted.
• Report to Cyber Crime India:** File a complaint immediately on the National Cybercrime Reporting Portal at www.cybercrime.gov.in or call their helpline at 1930. Provide all details, including screenshots of messages, fake website URLs, and transaction details if you mistakenly paid.
• Contact Your Bank/Wallet Provider:** If you have made a payment, contact your bank or UPI service provider (e.g., PhonePe, Google Pay, Paytm) immediately to report the fraudulent transaction. They might be able to initiate a chargeback or freeze the transaction, though speed is critical.
• Change Passwords:** If you entered any login credentials on a fake website, change your passwords for those respective accounts (digital gold platform, email, banking) immediately. Also, check for any unauthorized activity on your actual digital gold account.