The Indian government has issued a critical public warning about a sophisticated new cyber fraud scheme that exploits basic phone codes to hijack calls and drain bank accounts. The advisory comes from the National Cybercrime Threat Analytics Unit of the Indian Cyber Crime Coordination Centre (I4C), which operates under the Ministry of Home Affairs (MHA).
How the USSD Call Forwarding Scam Operates
Cybercriminals are reportedly impersonating delivery or courier service agents to carry out this scam. They contact potential victims under the guise of confirming or rescheduling a parcel delivery. Once they establish contact, the fraudsters send an SMS containing a specific code and instruct the target to dial it.
The code typically begins with *21* and is followed by a mobile number controlled by the scammer. This sequence is a USSD (Unstructured Supplementary Service Data) code, a tool meant for interacting with telecom networks without an internet connection. Unknowingly dialing this code instantly activates unconditional call forwarding on the victim's smartphone.
The consequences are severe: Once call forwarding is active, all incoming calls—including crucial one-time passwords (OTPs) from banks, payment authentication calls, and even verification calls for apps like WhatsApp and Telegram—are silently redirected to the fraudster's phone. This gives them complete control to authorize unauthorized financial transactions and even hijack social media and messaging accounts.
Essential Steps to Stay Safe from This Fraud
The I4C advisory outlines clear and immediate actions citizens must take to protect themselves:
First and foremost, never dial any USSD code shared by an unknown caller, especially those starting with *21*, *61*, or *67*. These are common prefixes for activating various call forwarding features.
If you suspect call forwarding has been activated on your number, you can instantly deactivate all forwarding services by dialing ##002#. This is a universal deactivation code that works across most Indian telecom networks.
Remain vigilant against unsolicited messages. Do not click on any suspicious links related to courier deliveries received via SMS, WhatsApp, or email. Always verify delivery details directly by visiting the official website of the courier company or calling their verified customer care helpline.
Reporting Cybercrime is Crucial
The government urges all citizens to report any incident of cyber fraud immediately. If you encounter a fraudulent application or become a victim of this or any other scam, you should file a report without delay. The official channels for reporting are the national helpline number 1930 and the website www.cybercrime.gov.in.
This advisory highlights the evolving tactics of cybercriminals who exploit simple telecom features. Public awareness and caution are the first and most effective lines of defense against such financially damaging schemes.
