LPG KYC Scam
🔹Short Note
LPG KYC Scam: Union Government has warned LPG consumers about a new cyber fraud in which criminals send duplicate LPG KYC update messages through SMS, WhatsApp, emails or call-up. The scammers wrongfully state that if KYC isn’t done, a customer’s gas connection or LPG subsidy will be suspended right away. It has a goal of extracting payment detail and Aadhaar credentials, OTP or install the malicious application on victims phone.
🔹Detailed Explanation
Update to October 2023, and cybercriminals have come up with all sorts of scams that now include LPG connections, a vital public service. Recently, the authorities had issued alerts about fraud in LPG KYC scam related to major LPG providers in country including Indane, Bharat Gas and HP Gas.
Typically, the scam starts with an urgent SMS, WhatsApp message or phone call stating that the customer LPG connection has been locked or the LPG subsidy has been suspended due to incomplete KYC.
That message usually generates panic, saying:
- “We are hereby discontinuing your LPG connection today.”
- Subsidy continues, complete your e-KYC now.
- “Verify Aadhaar to avoid cancellation.”
- Pending charges need to be paid to turn on the gas connection
- The message usually has a malicious link or a fake customer care number. After clicking the link, victims are taken to a phishing site mimicking an LPG company portal.
The counterfeit site prompts users to provide sensitive input, such as:
- Aadhaar number
- Mobile number
- LPG Consumer ID
- Bank account details
- Debit or credit card information
- Internet banking credentials
- One-Time Passwords (OTPs)
Sometimes, the scammers tell their victims that KYC verification cannot be completed unless they download a certain APK file or remote-access application. When installed, the app is able to access SMS messages, apps from banking institutions, contacts, passwords and any other confidential information stored on a smartphone.
This is to be done in two ways—one where crooks pretend to work for LPG customer care. They make calls to consumers stating that they need KYC verification because it is on the go. Then they ask for OTP or UPI collect approval from the victim age wise and financially scam.
Government agencies and oil marketing companies have also clarified that consumers are advised to do KYC only through legitimate channels with authorized LPG distributors, official mobile applications or reputed company websites. It has also stated that in a genuine call, the representatives never ask callers to share OTPs, banking passwords by way of making calls or through Whatsapp.
Cybersecurity experts say these types of scams arise during times when there are updates to subsidies or the policy, including festival seasons where consumers become impervious to quasi threats without verification.
Fraudsters may: THIS POST IS CREATED FROM THE ONE AND ONLY: IF VICTIMS PROVIDE CONFIDENTIAL INFORMATION WITOUT DISCLOSING
- Empty bank accounts
- Take control of digital wallets
- Commit identity theft
- And Apply for Financial Services with Stolen Identity
- Misuse Aadhaar and personal documents
- Means hijacking mobile devices sometimes by means of malicious process
While tracing the offenders, investigating agencies depend on electronic evidence like bank transaction records, IP addresses, mobile numbers, phishing websites —where fake money was taken— payment gateways, device logs and electronic communications.
This is causing the efficiency of such phishing attacks to rise especially with the increase in usage of digital services. Fake portals have matched the sophistication of official portals, making it harder for users to identify these fake services with real ones.
🔹How the Scam Works
The scam typically happens as follows:
- Fraudsters send fake LPG KYC or subsidy suspension messages
- The malware might prompt victims to click on a phishing link or ring a bogus helpline number.
- BOGUS WEBSITE: Aadhaar, Consumer IDOr bank detailsOr OTP
- Victims are sometimes told to install a fraudulent app.
- Sensitive information is stolen.
- Bank accounts or digital wallets get accessed fraudulently.
- Financial losses and identity theft to the victims.
🔹Example
Imagine a customer gets a WhatsApp message telling that their LPG subsidy is “on hold” due to pending e-KYC. There is a link in the message to verify and need to do so within two hours.
The customer who goes a step further then clicks the link, enters Aadhaar details followed by bank particulars and OTP that lands on their phone. At the moment, transactions are drawn out of the customers own account.
In a separate instance, a fraudster who posed as an LPG customer care executive suggests that the victim download ‘KYC Verification App’. It is essentially the same as giving an attacker a remote access to your victims smartphone, making them able to steal passwords and banking credentials.
🔹Key Legal Points
- The respective legal provisions will apply depending upon the facts of the case –
- IPC Section 420 – Cheating and dishonestly inducing delivery of a property (or corresponding section under Bharatiya Nyaya Sanhita for the offences committed after 01 July 2024)p
- IPC Sections 463–471 – Forgery and Forged Electronic Records
- IPC 120B – Criminal Conspiracy
- The relevant provisions of the Information Technology Act, 2000 pertaining to identity theft, phishing, hacking and cyber fraud
- In case you are a victim of cyber fraud, please reach out to the National Cyber Crime Helpline (1930) or go to National Cyber Crime Reporting Portal.
🔹Nyay Neeti Advice
Never fill LPG KYC from links taken on WhatsApp, SMS or social websites unless you have confirmed the flow by yourself. Update your KYC with your official website, mobile application and/or authorized LPG distributor only
Do not share details of Aadhaar, OTPs, UPI PIN, debit card number, Internet banking passwords and other sensitive information to anybody who is claiming on behalf of an LPG company. Respectable customer care executive never ask such information.
In case you get a dubious LPG KYC message, confirm by calling your LPG distributor with the official customer care number. In the event that you feel that you have been focused, at that point reach your bank quickly, obstruct all ruined installment systems, screen captures and messages of what has occurred and report the issue to Cyber Crime Helpline 1930 immediately. Reporting right away can increase the chances of recovering your money and help law enforcement catch the crooks.
