Protect Yourself from Vishing Scams and Fake Credit Card Limit Websites

We have observed cyber-crime incidents where customers at the behest of vishing calls from fraudsters (claiming to represent Axis Bank) are being directed to malicious websites for 'credit card limit enhancement'.

How the scam works:

Customers receive a call / message instructing them to visit a specific website to enhance their card limit.
In order to gain the customer's trust, the caller advises them not to share any confidential information with them, over the phone.
On accessing the fraudulent site, the customer is prompted to enter their card details and enter an OTP (One-Time Password) which would be sent to their registered mobile number, from Axis Bank.
The fraudster, using the card credentials, simultaneously initiates an online transaction for which the OTP (to complete the authentication) is sent to the customer.
The customer is convinced to enter this OTP on the website for enhancing his/her credit limit.
The fraudster uses the OTP shared, to complete the 2FA (2 Factor Authentication) process resulting in unauthorised transactions in the customer's account.

Red flags to watch out for:

Unsolicited calls / messages / emails asking you to visit any unverified website.
Request for card, personal or financial information online on the website.
Instructions to enter OTPs or verification codes on an unfamiliar website.

Stay safe with these tips:

1. Check URLs - Examine the URL of the website before clicking. Make sure it matches the official website's domain without any variation or misspelling.

2. Verify sources: Cross-reference any information across multiple reputable sources to confirm its accuracy.

3. Use official websites: If you receive any request in name of Axis Bank, contact us directly using the official phone banking number or access websites directly by typing the URL into your browser.

4. Look for HTTPS: Check if the website uses “https://” in its URL, indicating a secure connection. However, note that some scam sites also use HTTPS.

5. Review the SMS: Be diligent in reading the SMS content, especially OTP messages, to ascertain the reason they were sent by your Bank.

6. Read content carefully: Scrutinise the content of the website for grammatical errors, poor design, or suspicious claims.

7. Avoid unnecessary downloads: Be cautious about downloading files or software from unfamiliar websites, as they may contain malware.

8. Use antivirus software: Keep your antivirus and anti-malware software up to date to help detect and block potentially harmful websites.

9. Use Ad blockers: Ad blockers can help reduce exposure to potentially misleading or harmful advertisements.

10. Enable safe browsing: Most browsers offer safe browsing options that can warn you about potentially dangerous websites.

11. Don't share confidential details: Never enter OTPs or sensitive details on any unsolicited / unverified websites on the behest of any unknown callers / sender.

12. Monitor your statements: Monitor your account for any unauthorised transactions and register for transaction alerts.