Cases of online fraud involving OTP based transactions are increasing across India, and a recent incident from Delhi has once again highlighted how quickly cybercriminals can exploit digital payment systems. In this case, a family reportedly lost Rs 42,000 overnight after the smartphone of a senior citizen was compromised, leading to unauthorised credit card transactions.
The incident was shared by a user on social media platform X, formerly known as Twitter. According to the post, her father’s phone appeared to be compromised late at night. During this period, multiple OTP messages were received for card transactions. Despite noticing the alerts, the family was unable to stop the fraud in time, and by the next morning, Rs 42,000 had been deducted from the credit card account.
OTP based authentication is widely used by banks in India as a security measure for digital transactions. However, cybercriminals have increasingly found ways to bypass or misuse this system. In many cases, fraudsters gain access to a victim’s phone through malicious apps, phishing links, fake customer care calls or remote access tools. Once control is obtained, OTP messages can be intercepted, deleted or used to authorise transactions without the user’s knowledge.
This case has raised serious concerns about the effectiveness of existing safeguards. Users have questioned why banks allow multiple transactions to go through in a short span of time without triggering automatic blocks or alerts. It has also brought attention to delays in customer support responses, especially during late night hours when fraud often occurs.
Cybersecurity experts warn that even cautious users can fall victim if their device security is compromised. Installing apps only from official stores, avoiding unknown links, not sharing OTPs under any circumstances and enabling transaction limits are among the recommended safety steps. Experts also advise users to regularly review app permissions and keep operating systems updated.
Banks, on their part, are expected to improve real time fraud detection systems. This includes monitoring unusual transaction patterns, limiting repeated OTP based transactions and offering faster emergency response mechanisms. Regulatory authorities have also been urged to tighten guidelines related to digital payment security.
Victims of such frauds are advised to immediately inform their bank, block affected cards, lodge a complaint with the cyber crime helpline and file a report on the national cyber crime portal. While recovery is not guaranteed, prompt reporting can help prevent further losses.
As digital payments continue to grow in India, incidents like this underline the urgent need for stronger security awareness among users and more proactive safeguards from banks and financial institutions. Without improvements on both fronts, OTP based frauds are likely to remain a serious concern.
