Skip to content
Bank KYC · BOI

Is your Bank of India KYC SMS real or fake?

An unsolicited Bank of India KYC link in a message is a warning sign. Check your status inside the BOI Mobile app or by typing bankofindia.bank.in yourself.

Run the 10-second check Read scam playbooks
An unsolicited KYC link is a strong warning sign, not a reason to click.

Three things that give it away.

  1. Look at who sent it

    A message from a personal number or WhatsApp account claiming to be your bank is a warning sign. Sender IDs can be copied, so verify through the official app or site rather than relying on the message.

  2. Check the web address, letter by letter

    Start at bankofindia.bank.in by typing it yourself. A lookalike such as bankofindia-kyc-verify.com is a warning sign, but the message link is not your source of truth.

  3. Notice the deadline

    "Today", "within 24 hours", and "account will be blocked" are pressure cues. Take a breath and check inside the app or official site before acting.

What BOI actually does, and what you got.

A real BOI KYC update

Bank of India provides KYC through the BOI Mobile app, its official site at bankofindia.bank.in (type it yourself), or a branch. Do not share an OTP, PIN, or password from a message link.

The message you got

Bank of India: KYC incomplete. Account will be deactivated within 24 hours. Update at [link] and confirm OTP.

Real name, real logo, borrowed panic. The link is the trap.

Clicked the link or shared an OTP?

It is fixable, and speed matters. Do these things now.

Questions people ask

Does Bank of India send KYC links by SMS or WhatsApp?

Do not trust an unsolicited KYC link in a message. Verify your status inside the BOI Mobile app, on bankofindia.bank.in (type it yourself), or at a branch. Do not share an OTP, PIN, or password from the message.

I already clicked the link or shared an OTP. What now?

Take a breath, it is fixable. From a phone you trust, change your net banking and UPI passwords, and call the bank using the number on the back of your card. If any money moved, call 1930 and file a report at cybercrime.gov.in the same day. The faster you report, the better the chance of a freeze or reversal.

How do I tell a real BOI message from a fake one?

A personal-number sender, an urgent deadline, or a link asking you to update KYC is a warning sign, not proof on its own. When in doubt, ignore the message and open the BOI Mobile app yourself.

Why is the real BOI website bankofindia.bank.in and not a .com?

The .bank.in initiative is intended to make official banking domains easier to recognise, but a domain ending in .bank.in is not proof that a message is genuine. Bank of India's listed address is bankofindia.bank.in; type it yourself or use the bank's app instead of following a message link.

Got a message from a different bank?

Last reviewed July 20, 2026.