Here is a scam that costs Indians crores every year, and it starts with the most innocent action imaginable: searching Google for a customer care number. You search, you call the first number, a polite “agent” answers, asks you to install an app or share a code “to verify your complaint” — and the money is gone before the call feels wrong. The number was never the company’s. It was placed there, deliberately, by the people who answered it.
How fake numbers reach the top of search results
Fraudsters publish phone numbers on exactly the surfaces search engines trust: hastily-made websites stuffed with brand names, map listings for businesses that never existed, social-media posts, forum answers, and comment sections under real companies’ posts. Search engines cannot telephone a number to check who answers, so a well-placed fake can outrank the truth — especially for brands whose real support is app-only and has no official number at all. The scam then runs on urgency: you found the number while something was already broken, so you are primed to cooperate.
What happens on the call
The script is consistent. The “agent” sounds professional, knows the company’s product names, and creates a small crisis: your account will be blocked, your refund will expire, your KYC is incomplete. The cure always involves one of three moves — installing a screen-sharing or remote-access app, reading out an OTP or PIN “for verification”, or making a small “refundable” payment to a UPI ID. Each move hands them the account. Real refunds, real KYC and real support never work this way, which is why the next section is worth memorising.
Three things real support will never ask you to do
1. Share a secret. No genuine bank, UPI app, exchange or government helpline will ever ask for your PIN, password, OTP, CVV or full card number — on a call, in a chat, anywhere. Anyone who asks is not support, whatever their screen says.
2. Install an app. Remote-access and screen-sharing apps are the scammer’s master key. No legitimate support process needs to see or control your screen, and companies state this in their own warnings.
3. Pay to receive. Refunds, cashback, prize money and compensation never require you to send money first, scan a QR code, or enter a UPI PIN. A QR code plus your PIN always sends money out. There are no exceptions to this.
The one-minute verification routine
Before calling any number you found online, spend sixty seconds: (1) Open the company’s official website yourself (type the address, or use the official app) and find the contact page there — a number on that page is real. (2) Compare the number you found against the one on the official site or on the back of your bank card or official documents. (3) Be extra suspicious for services that are known to be app-only — if the company offers no phone support, every “helpline number” for it is fake by definition. (4) Cross-check on a directory like this one, but treat even us as a lead, not proof: we date every number set we publish and tell you when it was last verified, and the official website remains the final word.
Where else fake numbers hide
Search results are only the front door. The same numbers are seeded into YouTube video descriptions promising “official support”, into WhatsApp forwards dressed as bank notices, into the comment sections of genuine company posts (where one fast reply can farm dozens of victims before moderators wake up), and into QR-code posters stuck near ATMs and recharge shops. A particularly effective variant targets people mid-crisis: post a fake “refund helpline” under news of a real outage, when thousands are searching at once and patience is thin. The defence is boring and total: a number is trustworthy only when it comes from a surface the company controls — its own website’s contact page, its verified app, the back of your card, or official documents — and even listings here should be cross-checked there for anything involving money. Treat every other surface as advertising space that anyone can rent, because that is literally what it is.
If you have already called one
Act in minutes, not days. Hang up and uninstall any app they had you install. Call your bank’s official number — from your card or its website — and report the fraud and ask for the account to be protected. Change your banking and e-mail passwords from a different, clean device. Report the incident on the national cyber-crime helpline (1930 in India) and the cyber-crime reporting portal; fast reports genuinely improve the chance of funds being frozen mid-route. Shame keeps people quiet about this scam, and silence is what it feeds on — tell the people in your family group chat exactly how it worked.
Why we put a date on every number
Helpline numbers change: companies renumber desks, close lines and consolidate support. A number that was genuine in a directory two years ago can be dead — or worse, reassigned — today. That is why every helpline page here shows when its numbers were last verified, and why the verification routine above matters even for numbers you have used before. Sixty seconds of checking is the cheapest insurance in Indian banking.
One last habit worth building: save the real numbers now, while nothing is wrong. Put your bank’s number from the back of your card into your phone contacts today, and do the same for the two or three services your family depends on most. On the bad day — money stuck, account locked, results pending — nobody verifies anything calmly. The number already sitting in your contacts, saved in a calm moment from a trusted source, is the one you will actually call. That is the whole trick, and it takes ninety seconds.