Scam guide
OTP / Code Theft in Pakistan
Asked for OTP, PIN or bank verification code. Below are community-submitted reports about phone numbers, websites and accounts linked to this type of scam. Community reports are one signal, not a verdict — always verify independently.
OTP and code theft scams depend on one thing: getting your one-time password, PIN or bank verification code. No real bank, wallet or government office ever asks for these.
How this scam typically works
- The caller pretends to be from your bank, Easypaisa/JazzCash support, or a government office.
- They create urgency: "your account will be blocked", "a transaction is pending", or "verify your identity to receive funds".
- They ask you to read out the OTP that just arrived on your phone, or to approve a pop-up.
- Once they have the code, they move money or take over the account within seconds.
Red flags
- Anyone asking for an OTP, PIN, CVV or password — banks never ask.
- Pressure to act immediately, or a request to keep the call secret.
- A caller ID that looks like a bank number (numbers can be spoofed).
- Requests to install a screen-sharing or "support" app.
- A payment approval pop-up that you did not start yourself.
Official advisories
Banks never ask for your OTP, PIN or password
Banks and the SBP repeatedly advise that no bank employee will ever ask for your OTP, PIN, CVV or password over a phone call, SMS or WhatsApp. If someone asks, it is a fraud attempt. Hang up and call your bank on its official number.
Official advisories are awareness guidance published by authorities. They are not a verdict about any specific person and are kept separate from community reports.
Latest community reports
What to do if targeted
- Never share the code. Hang up and call the number printed on your card or inside your bank app.
- If you already shared a code, call your bank immediately and ask them to freeze the account or card.
- Change your banking app password and PIN from a device you trust.
- Keep screenshots, call records and transaction IDs — they help with a dispute.
Where to report
- Your bank or wallet fraud desk (call the number on your card/app).
- FIA NR3C cybercrime complaint portal for the fraudulent call and number.
- PTA complaint portal if the number is being used for bulk scam calls or SMS.
Frequently asked questions
Can my bank ever ask for an OTP?
No. Banks, wallets and government offices never ask for an OTP, PIN, CVV or password over a call or message.
I already shared the code. What should I do first?
Call your bank immediately to freeze the account or card and try to stop the transaction. Then report the number to FIA NR3C.