Courier Call Scam: How a Simple Code Can Let Fraudsters Steal Your OTPs

A new kind of scam is spreading across India — and this one doesn’t need you to click any suspicious link or download any app. All it takes is a single code you unknowingly dial.

The scam usually begins with a phone call from someone pretending to be a representative of a courier company like Blue Dart or DTDC. The caller claims that a delivery person is trying to reach you but can’t get through. To “help coordinate,” they send you a number or ask you to dial a short code such as 21[phone number]#.

At first glance, the code looks harmless — but it’s actually dangerous. By dialling it, you unknowingly activate call forwarding, which diverts all your incoming calls and SMS messages to another number controlled by the scammer.

Once the call forwarding is active, the scammer can intercept one-time passwords (OTPs) sent to your phone — including those for banking, UPI, and WhatsApp accounts. Within minutes, they can reset your WhatsApp, access your bank details, or even transfer money, all without you clicking a single link.

In one recent case, a woman told The Tribune that she received a call from someone claiming to be from a courier service. “He asked me to dial 217667932517# to connect with the delivery person. I pressed call but hung up almost immediately, sensing something was wrong,” she said. “Within minutes, my WhatsApp started acting strange, and I noticed my calls and messages were being diverted. I had to rush to my bank to freeze my account.”

How this scam works

Call forwarding is a legitimate telecom feature meant for situations when your phone is switched off or out of coverage. It allows users to redirect calls and messages to another number. But scammers are misusing this feature to hijack communications.

By tricking victims into activating call forwarding, they can receive every OTP or verification message sent to that number — giving them total control.

How to stay safe

• Never dial any code sent by an unknown caller.

• If you’ve already done it, immediately disable call forwarding by dialling ##21#.

• Check your phone settings to ensure your calls and SMS are not being diverted.

• Contact your telecom provider if you suspect your number has been compromised.

• Enable two-step verification on WhatsApp and banking apps.

Cyber experts warn that this scam is especially dangerous because it doesn’t rely on links or apps — just social engineering. Staying alert and avoiding unknown codes can keep your accounts safe.