• Hey there! Welcome to TFC! View fewer ads on the website just by signing up on TF Community.

Marginally saved from a Scam, please take note

Yes, I disputed the transaction, and bank set up an inquiry against my claim. They concluded that Bank was not at fault as proper security protocols were followed for the transaction to take place.
As most important security layer of a transaction is OTP which I entered on the fake website by myself.
So, there was nothing much they could do
You just want to use the fraud protection benefit of your debit/credit card... but I just took at look about the "Comprehensive" Fraud Protection page in Axis which mentions fraud protection in the benefits of Axis cards with a very simplified description, and in the TnC you don't even see the word "fraud" covered at all.
HDFC has one too but it is only limited to physical Points of Sale machine and not applicable for net banking/online transactions.

You might have to check the TnC for your the payment method, you might have a recourse but seems like most banks and third party providers are utter garbage and just added that benefit to help sales.

Also if the charge was done as payment with a Visa card (as opposed to netbanking) which seems to be the case you will be able to file a chargeback, and do it ASAP. Whatever the bank tells you, ditch it. Refer to official Visa Chargeback Guide which the bank has to abide to regardless of whatever policies they want to make up.
 
Last edited:
otp page can be masked, gateways like razorpay does that. amount mentioned in sms is very important. banks like bob doesnt mention amount in sms
I just checked my Bob cc otps and there is no amount mentioned just like you said. Shocking
 
also this is why the otp page should have the amount written on it, and banks should specify the amount in otp sms. in most of the rupay card otp page, there is no amount mentioned, and some banks like bob doesn even mention the amount in otp sms
Yes, you are right. Even ICICI SMS for otp does not carry transaction amount sometimes. I raised a query but they passed the blame on the merchant saying that it is merchant-specific and the bank could not do anything about this.

Also, this automatic otp copy-paste by apps should also be stopped. These days even google reads otp on phone and triggers a notification on phone to paste it directly on webpage of chrome in PC.
 
You just want to use the fraud protection benefit of your debit/credit card... but I just took at look about the "Comprehensive" Fraud Protection page in Axis which mentions fraud protection in the benefits of Axis cards with a very simplied description, and in the TnC you don't even see the word "fraud" covered at all.
HDFC has one too but it is only limited to physical Points of Sale machine and not applicable for net banking/online transactions.

You might have to check the TnC for your the payment method, you might have a recourse but seems like most banks and third party providers are utter garbage and just added that benefit to help sales.

Also if the charge was done as payment with a Visa card (as opposed to netbanking) which seems to be the case you will be able to file a chargeback, and do it ASAP. Whatever the bank tells you, ditch it. Refer to official Visa Chargeback Guide which the bank has to abide to regardless of whatever policies they want to make up.
Whenever a user shares OTP by any means, it is no longer a case of fraud. You have given the consent and the transaction becomes valid.

The best one can do is to take the help of police and trace those scammers and recover money from them.

In my case, I raised the chargeback and the transaction remained disputed for two months. They provisionally credited the disputed amount in my account. But, after the investigation was over, I had to pay the full amount to bank
 
I think you make a very good point here. I tried with my pnb rupay platinum credit card and no amount is mentioned.
View attachment 7066
All rupay cards (both debit +credit) don't display txn amount. Neither in page nor in otp. This is known problem. @abhishek has complained npci/rupay regarding this. We all should tweet to npci/rupay +tag respective banks. If everyone complains they've to take action.. This is a major loophole for scamsters & it should be corrected ASAP!
 
Whenever a user shares OTP by any means, it is no longer a case of fraud. You have given the consent and the transaction becomes valid.

The best one can do is to take the help of police and trace those scammers and recover money from them.

In my case, I raised the chargeback and the transaction remained disputed for two months. They provisionally credited the disputed amount in my account. But, after the investigation was over, I had to pay the full amount to bank
I've heard some instances where these scammers even stealing otps.. They send apply link. On clicking the link a app is installed in the background which steals otp. Even more misleading is on clicking link, a genuine looking page opens with a popup ad with ok button & x icon in top right to close the ad. In reality clicking any of these will lead to downloading a malacious file or giving sms read permission to the website through browser!! This is another level sh*t. But things like these hv been happening.!
Better be aware & avoid.
 
I've heard some instances where these scammers even stealing otps.. They send apply link. On clicking the link a app is installed in the background which steals otp. Even more misleading is on clicking link, a genuine looking page opens with a popup ad with ok button & x icon in top right to close the ad. In reality clicking any of these will lead to downloading a malacious file or giving sms read permission to the website through browser!! This is another level sh*t. But things like these hv been happening.!
Better be aware & avoid.
 
My god! 😡
These scammers have no limit. I hope you've locked your adhar card. & report this to cyber security..
Redflags in that email (on careful check ofcourse one tend to overlook these in excitement)
1) grammer errors
2) joining fees for any cc is not paid upfront. Its charged in 1st statement (experts correct me if am wrong.
3) Rs.49 joining fee doesn't make any sense as either will have 0 or axis specified fees.
4) is there's any joining fee, then how come they activated card & displayed cc number? This doesn't make sense.
5) domain in email was .online which doesn't belong to axis
+ female agent can also be scamsters guys human mind subconsciously thinks otherwise! It can also be a male using voice changing software
Correct spelling is grammar btw 🙂
 
I lost around 40k after falling for such similar trick. I filed a complaint against it online, but they can't do much as in such cases transaction is genuine as OTP is shared. It's better to set a low limit on cards and open it only for the duration you are going to make a big transaction. This makes you safe from such scammers.
But, I know the name, city, account number, IP address, and bank branch address of the guy who scammed me. One day I will surely chase him and make him regret it.
Which was this?
Chargeback can also be made against service or product not delivered as per promise. You didn't just transferred the amount. Escalate this to Rbi. Still chances are this can be reversed.
 
SBI bank, SBI Card, Indian bank, CUB and few others already added transaction amount and merchant name on RuPay card OTP page.

others banks like bob, hdfc, axis, icici is not added yet transaction amount and merchant name on card Rupay OTP page.

@blacktiger
good thing but still no amount mention in OTP SMS. ive seen razorpay having their own OTP page thats masking the bank's page. means, if they can do then scammers can do that as well just as in OP's case
 
good thing but still no amount mention in OTP SMS. ive seen razorpay having their own OTP page thats masking the bank's page. means, if they can do then scammers can do that as well just as in OP's case
That's ON-US transaction.

Razorpay call it Native OTP and here RuPay card Transaction amount and Merchant name showing -

here -

Superior Rupay Card Payment Experience - Native OTP - https://razorpay.com/rupay-otp/

Enhance your RuPay Card payment experience with Native OTP​

Say goodbye to browser redirects with the latest innovation from NPCI and Razorpay

How it works​

Step 1
The customer chooses to pay via a supported RuPay card on checkout.

Step 2
Customer enters their card details and initiates the payment. Only CVV needs to be entered in case of a ‘saved card’.

Step 3
A form appears on the merchant site where the customer needs to enter the OTP sent to their registered mobile number.

Step 4
Customer enters the OTP and clicks Submit. Payment completed successfully.

illustration.gif
 
Last edited:
That's is ON-US transaction.

Razorpay call it Native OTP and here RuPay card transaction amount and Merchant name showing -

here -

Superior Rupay Card Payment Experience - Native OTP - https://razorpay.com/rupay-otp/

Enhance your RuPay Card payment experience with Native OTP​

Say goodbye to browser redirects with the latest innovation from NPCI and Razorpay

How it works​

Step 1
The customer chooses to pay via a supported RuPay card on checkout.

Step 2
Customer enters their card details and initiates the payment. Only CVV needs to be entered in case of a ‘saved card’.

Step 3
A form appears on the merchant site where the customer needs to enter the OTP sent to their registered mobile number.

Step 4
Customer enters the OTP and clicks Submit. Payment completed successfully.

View attachment 7175
Which banks currently support Native OTP on RuPay cards?
Native OTP on RuPay cards is currently supported by Indian Bank, Allahabad Bank, Bank of Baroda and Punjab National Bank. NPCI will cover all issuing banks by March 31, 2022.

seems like this will be the solution instead of rupay implementing a proper otp page/sms mechanism
 
Which banks currently support Native OTP on RuPay cards?
Native OTP on RuPay cards is currently supported by Indian Bank, Allahabad Bank, Bank of Baroda and Punjab National Bank. NPCI will cover all issuing banks by March 31, 2022.

seems like this will be the solution instead of rupay implementing a proper otp page/sms mechanism
Almost all banks are supported RuPay card native otp except few banks.
 
Back
Top