On this page
BioCatch flags 146% surge in text-message scams targeting Indian digital payments
Our read
India's digital-payment fraud battle shifts from blocking more attacks to identifying fewer, socially engineered high-value transfers before funds reach mule accounts.
For operators
Indian payments operators should strengthen real-time behavioural, device and SMS-origin risk controls as text-message scams surged 146% and fraudsters shifted toward higher-value UPI, mobile-banking and e-commerce attacks.
Watch
RBI, NPCI or major UPI-app mandates on fraud-risk scoring, payee verification, cooling-off periods or liability treatment for scam-induced transfers.
The report,
BioCatch reports a 146% jump in India text-message scams as UPI, mobile banking and e-commerce fraud shifts toward high-value, scam-led attacks. The report urges banks and payment providers to deploy behavioural, device and real-time monitoring.
Channel facts
From the report. Source details below
| Attempted fraud sessions declined | 12% |
|---|---|
| Value of attempted fraudulent payments increased | 35% |
| Median value per fraud session increased | 1.7 times |
| Average phone-call duration declined | 31% |
| Median session length fell | 32% |
Also in the report
- Risky payment sessions doubled
What it means for online and offline
Banks, payment firms and commerce platforms should evaluate partnerships or acquisitions in behavioural biometrics, device intelligence and scam-detection capabilities to address increasingly sophisticated, high-value social-engineering fraud.
Signals to track
- Continued divergence between falling attempted-fraud session counts and rising average attempted payment value.
- Growth in complaints involving SMS sender spoofing, fake delivery or KYC alerts, remote-access apps and first-time UPI beneficiaries.
- Increases in merchant false positives, payment abandonment or declines for high-ticket mobile transactions.
- Evidence that fraud migrates from UPI toward cards, BNPL, wallet top-ups, gift cards or cash-out through mule merchants.
- Telecom action on sender-ID registration, SIM-swap controls, URL filtering and scam-message blocking.
Likely next moves
Our read of what comes next — analysis, not reported by the source.
- Deploy SMS-scam detection signals alongside behavioral biometrics, device intelligence, SIM-change indicators and beneficiary-risk scoring.
- Add contextual in-app warnings before first-time or high-value UPI transfers, explicitly flagging requests initiated through SMS, screen-sharing or remote-access apps.
- Create graduated transaction controls: temporary caps, cooling-off windows and out-of-band confirmation for anomalous high-value payments rather than blanket declines.
- Share confirmed mule accounts, scam URLs, sender IDs and device fingerprints across banks, PSPs, telecom operators and cybercrime reporting channels.
- Review fraud rules by payment value, payee age, device novelty and customer segment; optimize against authorized-push-payment loss, not only unauthorized transaction rates.
Show 1 more
- Prepare customer-support and dispute workflows for more scam-led claims, including rapid account freezes and beneficiary recall procedures.
The counter-case
The case against this reading — not reported by the source.
The figures may signal better detection rather than a true deterioration in fraud: a decline in flagged sessions alongside higher attempted value could reflect changes in BioCatch client mix, detection thresholds, or scammers concentrating on accounts already under enhanced monitoring. A 146% rise in text-message scams is also a percentage change that may come from a low base and does not establish that SMS is the dominant fraud vector or that successful losses rose at the same rate.
The source
Published
First seen