Kotak Mahindra Bank only updates KYC inside the Kotak Mobile Banking app, on its own site at kotak.bank.in (type it yourself), or at a branch. It shows up as a notice in the app, never as a link with a same-day threat, and it never asks for your OTP, PIN, or full card number.
Is your Kotak Mahindra Bank KYC SMS real or fake?
Kotak never asks you to finish KYC through a link. Check your status inside the Kotak Mobile Banking app or by typing kotak.bank.in yourself.
If it came as a text or WhatsApp with a link and a deadline, that is not Kotak Mahindra Bank. You have not lost anything just by reading it. Here is how to be sure, and what to do next.
No bank in India will ever make you finish KYC by clicking a link. Link plus deadline equals scam.
Three things that give it away
-
Look at who sent it
Real bank texts come from a short alphanumeric sender ID, not an ordinary 10-digit mobile number and never a plain WhatsApp chat. A personal number is the first giveaway.
-
Check the web address, letter by letter
The real Kotak website is kotak.bank.in. India's banks now use verified .bank.in addresses, so a genuine link ends in .bank.in, not a lookalike like kotak-kyc-verify.com. If it is not exactly kotak.bank.in, close it.
-
Notice the deadline
"Today", "within 24 hours", "account will be blocked". Real banks give you weeks and proper notice inside the app. Panic is the whole trick.
What Kotak actually does, and what you got
Kotak Bank: KYC pending. Your account 811 will be deactivated today. Verify now: [link]. Share OTP to confirm identity.
Real name, real logo, borrowed panic. The link is the trap.
Clicked the link or shared an OTP? Do this now.
It is fixable, and speed matters more than anything else.
- Do not enter anything more, and close the page.
- From a phone you trust, change your net banking and UPI passwords.
- Call Kotak using the number on the back of your card, not any number from the message.
- If money moved, call 1930 and report at cybercrime.gov.in the same day.
Common questions
Does Kotak Mahindra Bank send KYC links by SMS or WhatsApp?
No. Kotak Mahindra Bank only handles KYC inside the Kotak Mobile Banking app, on kotak.bank.in, or at a branch. It never sends a link to do it, even if the message uses the Kotak name and logo. Treat any KYC link as a scam.
I already clicked the link or shared an OTP. What now?
Take a breath, it is fixable. From a phone you trust, change your net banking and UPI passwords, and call the bank using the number on the back of your card. If any money moved, call 1930 and file a report at cybercrime.gov.in the same day. The faster you report, the better the chance of a freeze or reversal.
How do I tell a real Kotak message from a fake one?
A real Kotak text comes from a short alphanumeric sender ID, not a normal 10-digit mobile number or a WhatsApp chat, and it will not push you to a link with a same-day deadline. When in doubt, ignore the message and open the Kotak Mobile Banking app yourself. Nothing urgent is ever lost by taking that extra minute.
Why is the real Kotak website kotak.bank.in and not a .com?
In 2025 the Reserve Bank of India moved all Indian banks to exclusive .bank.in web addresses so that genuine bank sites are easy to recognise, and only verified banks can hold one. Kotak Mahindra Bank's official address is now kotak.bank.in. Older addresses still redirect to it, but a real message will point to the .bank.in site.
Got a message from a different bank?
ICICIAxisPNBBoBCanaraUnion BankBOIIDBIYES BankIndusIndFederal Bank
Last reviewed July 20, 2026.