Don't Reply 'NO' to Fake Bank Debit Alerts on WhatsApp: A Single Message Can Drain Your Account
Summarized by AI; it may make mistakes. Check important info
Summarized by AI; it may make mistakes. Check important info
A new cyber fraud mechanism is targeting messaging app users across India, turning basic panic into a tool for financial theft. Fraudsters are dispatching fake bank transaction alerts via WhatsApp claiming large sums have been debited from recipients' accounts, accompanied by an urgent prompt to reply "NO" to cancel the transaction. Cyber security agencies and law enforcement authorities have issued urgent warnings, stating that responding to these messages exposes account holders to immediate account compromise.
How the 'Reply NO' Trap Operates
The scam begins with an unexpected WhatsApp message formatted to mirror authentic banking alerts. The message typically notifies the victim that a substantial sum often ranging between ₹ 25,000 and ₹ 90,000—has been debited from their savings account. Below the debit notice, the text explicitly instructs: "If you did not authorise this transaction, reply NO immediately to stop payment."
When a concerned user replies "NO", they unintentionally signal to the perpetrators that the mobile number is active and monitored by a potential target. In some variants of the scam, the response triggers an automated malicious payload embedded within the chat thread. In other instances, it immediately connects the target to a fake bank helpline operator who guides the victim into revealing sensitive credentials.
From Simple Reply to Account Takeover
Once a user responds, fraudsters deploy one of three main tactics to extract money:
• Remote Access Tools: Victims receive a secondary link or file disguised as a "cancellation form" or "security patch". Downloading this file installs remote-control software, allowing fraudsters to record screens, read incoming SMS messages, and intercept One-Time Passwords (OTPs).
• Vishing Escalation: Scammers place an immediate WhatsApp audio call or voice call posing as bank fraud prevention officers. They walk the panicked victim through a fake "refund process", demanding UPI PINs or card details to revert the debited amount.
• Malicious Executables: In advanced executions, responding to the prompt interacts with WhatsApp's media auto-download feature or external scripts, compromising device permissions without requiring complex interactions.
Law enforcement agencies, including state cyber crime divisions, emphasize that financial institutions never conduct transaction verification or cancellation procedures via basic text replies on instant messaging platforms.
Official Advisory: What Account Holders Must Do
The Indian Computer Emergency Response Team (CERT-In) and cyber police departments have outlined clear protocols for consumers receiving suspicious banking communications:
- Do Not Respond: Ignore and delete any message from an unknown number requesting a keyword response like "NO", "STOP", or "CANCEL" to halt a transaction.
- Verify via Official Channels: Open your official banking application or net banking portal directly to verify actual balances and account activity. Never rely on phone numbers provided within the chat message.
- Report to Cyber Crime Helpline: If money has been fraudulently withdrawn, contact the National Cyber Crime Helpline at 1930 immediately during the critical "golden hour" window to freeze illicit transfers, or register a formal complaint on the official portal at cybercrime.gov.in.
