The National Payments Corporation of India (NPCI) has issued a critical warning to UPI users about a new type of financial fraud called the Call Merging Scam. Cybercriminals are using this method to trick victims into revealing one-time passwords (OTPs), allowing them to gain unauthorized access to bank accounts and steal money. NPCI has urged users to remain vigilant and avoid merging calls from unknown numbers.

What is the Call Merging Scam?

Cybercriminals are constantly developing new ways to defraud users, and this scam specifically targets UPI transactions. Here’s how it works:

May be an image of 1 person and text that says "WHAT S IT? The Call Merging Scam is a new fraudulent technique where scammers manipulate people into merging calls, tricking them into unknowingly revealing their One-Time Passwords (OTPs). This enables fraudsters to make unauthorized transactions and steal money. f @OcihiFollceOttizial X @DaThIpolics G @delhi.pollce_ otticial @aCcihiPcllccotfizial 番 @delhipolkoe.gov.in"

@DelhiPolice

Step 1: The scammer calls the victim, posing as a recruiter offering a job interview, a bank executive, or an event organizer.

Step 2: They claim to have received the victim’s number from a mutual friend, making the call seem legitimate.

Step 3: The scammer then requests the victim to merge the call with another incoming number, pretending that their “friend” or another representative needs to join the conversation.

Step 4: The second call is actually an automated OTP call from the victim’s bank.

Step 5: By merging the call, the scammer overhears the OTP and quickly uses it to access the victim’s UPI-linked bank account, authorizing fraudulent transactions.

May be an image of 1 person, money and text that says "HOW THIS SCAM WORKS You receive a call, often from a familiar or official-sounding number, claiming to be from your bank or a service provider. The fraudster tricks you into merging the call with another "automated verification" or "customer service" call. During the merged call, the scammer asks you to share your oTp, which they then use to steal money from your account or complete fraudulent transactions. f @oelhiFallceOfticial @DaThipolics O @@deihl.police_ otticial - @OcthiPalicectticial 番 @@delhipolka.gov.in"

@DelhiPolice

Why is This Scam So Dangerous?

The Call Merging Scam is particularly dangerous because:

Exploits User Trust – Scammers pretend to be from reputable sources, making victims lower their guard.

Bypasses Common Security Measures – OTPs are a primary security layer for UPI transactions. Once scammers obtain them, they can transfer funds immediately.

Goes Undetected Until It’s Too Late – Victims often don’t realize they’ve been scammed until they check their bank balance, by which time the money is already gone.

How to Protect Yourself from the Call Merging Scam

To safeguard your finances and personal information, follow these preventive measures:

May be an image of text that says "How to protect yourself FROM THE SCAM Never share your OTP or any sensitive information over the phone, especially when you haven't initiated the call Be cautious if you're asked to merge calls or press any unusual buttons during a call Enable two- wo-factor authentication n your financial apps and accounts to add an extra layer of security Always verify suspicious calls through official customer service channels Report any suspicious calls to authorities or your bank immediately f @oelhiFollceOfticial % @DehIpolics 1 @delhl.pollce_ ofticial @ocihiPcllceotfizial 畢 @delhipolkce.gov.in"

@DelhiPolice

Never Merge Calls from Unknown Numbers

If someone requests you to merge an incoming call, refuse immediately. Legitimate organizations and recruiters never ask for this.

Do Not Share OTPs Over Calls

OTPs are confidential and should never be shared, even if the caller claims to be from your bank, a friend, or a government agency.

Enable Spam Call Detection

Most smartphones have built-in spam call filters. Activate them to block suspicious numbers automatically.

Verify Unknown Callers Independently

If you receive a call from an alleged recruiter, event organizer, or bank representative, verify their identity separately. Call the official company number to confirm their claims.

Report Fraudulent Calls

If you suspect a scam, report it immediately to:

Your bank’s fraud helpline

The Cybercrime helpline (1930)

The National Cyber Crime Reporting Portal (www.cybercrime.gov.in)

Use Secure Banking Apps

Avoid responding to OTP calls and rely only on official banking apps for transactions.

Stay Updated on Fraud Trends

Follow official NPCI and bank notifications to stay aware of new scam techniques and cybersecurity best practices.

Conclusion

As scammers develop new and sophisticated fraud techniques, staying informed and cautious is the best defense. If you receive any suspicious call asking you to merge lines, hang up immediately and report the number. By taking proactive steps, you can safeguard your hard-earned money and prevent financial fraud.