Bank of India only updates KYC inside the BOI Mobile app, on its own site at bankofindia.bank.in (type it yourself), or at a branch. It shows up as a notice in the app, never as a link with a same-day threat, and it never asks for your OTP, PIN, or full card number.
Is your Bank of India KYC SMS real or fake?
Bank of India never asks you to finish KYC through a link. Check your status inside the BOI Mobile app or by typing bankofindia.bank.in yourself.
Almost certainly a scam
If it came as a text or WhatsApp with a link and a deadline, that is not Bank of India. You have not lost anything just by reading it. Here is how to be sure, and what to do next.
No bank in India will ever make you finish KYC by clicking a link. Link plus deadline equals scam.
Three things that give it away
-
Look at who sent it
Real bank texts come from a short alphanumeric sender ID, not an ordinary 10-digit mobile number and never a plain WhatsApp chat. A personal number is the first giveaway.
-
Check the web address, letter by letter
The real BOI website is bankofindia.bank.in. India's banks now use verified .bank.in addresses, so a genuine link ends in .bank.in, not a lookalike like bankofindia-kyc-verify.com. If it is not exactly bankofindia.bank.in, close it.
-
Notice the deadline
"Today", "within 24 hours", "account will be blocked". Real banks give you weeks and proper notice inside the app. Panic is the whole trick.
What BOI actually does, and what you got
Bank of India: KYC incomplete. Account will be deactivated within 24 hours. Update at [link] and confirm OTP.
Real name, real logo, borrowed panic. The link is the trap.
Clicked the link or shared an OTP? Do this now.
It is fixable, and speed matters more than anything else.
- Do not enter anything more, and close the page.
- From a phone you trust, change your net banking and UPI passwords.
- Call BOI using the number on the back of your card, not any number from the message.
- If money moved, call 1930 and report at cybercrime.gov.in the same day.
Common questions
Does Bank of India send KYC links by SMS or WhatsApp?
No. Bank of India only handles KYC inside the BOI Mobile app, on bankofindia.bank.in, or at a branch. It never sends a link to do it, even if the message uses the BOI name and logo. Treat any KYC link as a scam.
I already clicked the link or shared an OTP. What now?
Take a breath, it is fixable. From a phone you trust, change your net banking and UPI passwords, and call the bank using the number on the back of your card. If any money moved, call 1930 and file a report at cybercrime.gov.in the same day. The faster you report, the better the chance of a freeze or reversal.
How do I tell a real BOI message from a fake one?
A real BOI text comes from a short alphanumeric sender ID, not a normal 10-digit mobile number or a WhatsApp chat, and it will not push you to a link with a same-day deadline. When in doubt, ignore the message and open the BOI Mobile app yourself. Nothing urgent is ever lost by taking that extra minute.
Why is the real BOI website bankofindia.bank.in and not a .com?
In 2025 the Reserve Bank of India moved all Indian banks to exclusive .bank.in web addresses so that genuine bank sites are easy to recognise, and only verified banks can hold one. Bank of India's official address is now bankofindia.bank.in. Older addresses still redirect to it, but a real message will point to the .bank.in site.
Got a message from a different bank?
ICICIAxisPNBKotakBoBCanaraUnion BankIDBIYES BankIndusIndFederal Bank
Last reviewed July 20, 2026.