No OTP, no link: How a Lucknow CA lost ₹1.70 lakh in cyber fraud by replying 'no'

The victim allegedly received a WhatsApp message claiming that ₹90,000 had been debited from their bank account.

A simple “No” reply to a WhatsApp message allegedly cost a chartered accountant in Lucknow ₹1.70 lakh in a new cyber-fraud tactic in which the victim reportedly did not click any link, share an OTP (one-time password) or install a remote-access application.

The incident points to a social-engineering tactic in which fraudsters allegedly use a fake transaction alert to prompt victims into responding. (ANI/ Representational)

The victim allegedly received a WhatsApp message claiming that ₹90,000 had been debited from their bank account. A follow-up message asked the victim to reply “No” if they had not authorised the transaction, according to a cyber-safety alert issued by Lucknow police.

“The victim responded to the message, following which money was allegedly siphoned from their two bank accounts. The total loss was ₹1.70 lakh,” said ADCP (Crime) Kiran Yadav. The incident points to a social-engineering tactic in which fraudsters allegedly use a fake transaction alert to prompt victims into responding, rather than relying on links, OTPs or remote-access applications.

What cyber cops suggest

• Do not respond to unsolicited bank debit alerts.
• Check transactions through the bank’s official app or website.
• Avoid unknown WhatsApp numbers that claim to represent banks.
• Use verified banking channels and customer-care numbers.
• Banks do not generally seek transaction confirmation through unsolicited WhatsApp replies.
• Report suspected fraud immediately through the bank or 1930 cyber-fraud helpline.