Call Forwarding Scam [Detailed Explanation and Preventions]

Call forwarding scams trick victims into secretly diverting their incoming calls to the fraudster’s phone number. By gaining call forwarding access, attackers can intercept OTPs sent via phone call, bypass two-factor authentication, and gain access to bank accounts, wallets, and sensitive online accounts within minutes.

What Is a Call Forwarding Scam?

A call forwarding scam exploits the phone’s built-in call divert feature. Fraudsters manipulate victims into dialling a code such as **21*[attacker’s number]# or similar USSD sequences, which activates unconditional call forwarding on the victim’s SIM. Once forwarding is active, any call received by the victim — including bank OTP calls — is silently routed to the attacker’s phone instead.

How Does the Call Forwarding Scam Work?

Step 1: The Impersonation Call

The attacker calls the victim posing as a bank representative, telecom support agent, or government official and claims there is an urgent issue with the victim’s account, SIM, or KYC status.

Step 2: The Code Activation

The attacker asks the victim to dial a specific number sequence, claiming it is required to “verify” or “resolve” the issue. The victim unknowingly activates call forwarding to the attacker’s number. Alternatively, if the attacker borrows the victim’s phone, they dial the code themselves.

Step 3: OTP Interception

With call forwarding active, the attacker goes to the victim’s bank or payment app login page, clicks “Forgot Password”, and selects the phone call OTP option. The OTP call is redirected to the attacker’s phone. The attacker enters the OTP, resets the password, and takes full control of the account.

Step 4: Funds Transfer

Once inside the account, the attacker immediately transfers available funds. By the time the victim realises what has happened, the money is gone.

What Are the Warning Signs of a Call Forwarding Scam?

• An unexpected call from someone claiming to be from your bank, telecom provider, or a government agency
• Any instruction to dial a number sequence starting with ** or * followed by a phone number
• Someone asking to borrow your phone to make a call
• A request to share OTPs, call diversion codes, or to approve anything on your phone
• Calls that do not ring on your phone while others report they tried to call you

How to Protect Yourself from Call Forwarding Scams?

• Never dial a number sequence instructed by an unknown caller — No legitimate bank or telecom company will ever ask you to activate call forwarding.
• Never lend your phone to strangers — If someone insists on using your phone, dial the number yourself and watch what they do.
• Check your call forwarding status — Dial ##002# on most Android and iOS phones to deactivate all call forwarding settings.
• Use SMS-based OTPs where possible — Call-based OTPs are vulnerable to call forwarding. Prefer authenticator apps or SMS OTPs.
• Register your phone number for DND — Reduces unsolicited calls that may be used for social engineering.
• Enable strong passwords for banking apps — Combine with biometric login to reduce OTP dependency. See the guide on OTP fraud in India for related risks.

How to Disable Accidental Call Forwarding?

If you suspect your calls have been forwarded, you can deactivate it immediately. On most phones, dial ##002# and press Call. This deactivates all forwarding types (unconditional, busy, unanswered). You can verify no forwarding is active by dialling *#21# (unconditional) or *#62# (no-answer forwarding).

How to Report a Call Forwarding Scam in India?

• Call the National Cyber Crime Helpline 1930 immediately.
• File a complaint at cybercrime.gov.in with details of the call, the number instructed to dial, and any financial loss.
• Notify your bank immediately to freeze the account and initiate a fraud recovery process.

For professional cybercrime investigation and reporting assistance, contact cyber expert Anuraag Singh.