Skip to content
Bank KYC · Kotak

Is your Kotak Mahindra Bank KYC SMS real or fake?

An unsolicited Kotak KYC link in a message is a warning sign. Check your status inside the Kotak Mobile Banking app or by typing kotak.bank.in yourself.

An unsolicited KYC link is a strong warning sign, not a reason to click.

Three things that give it away.

  1. Look at who sent it

    A message from a personal number or WhatsApp account claiming to be your bank is a warning sign. Sender IDs can be copied, so verify through the official app or site rather than relying on the message.

  2. Check the web address, letter by letter

    Start at kotak.bank.in by typing it yourself. A lookalike such as kotak-kyc-verify.com is a warning sign, but the message link is not your source of truth.

  3. Notice the deadline

    "Today", "within 24 hours", and "account will be blocked" are pressure cues. Take a breath and check inside the app or official site before acting.

What Kotak actually does, and what you got.

A real Kotak KYC update

Kotak Mahindra Bank provides KYC through the Kotak Mobile Banking app, its official site at kotak.bank.in (type it yourself), or a branch. Do not share an OTP, PIN, or password from a message link.

The message you got

Kotak Bank: KYC pending. Your account 811 will be deactivated today. Verify now: [link]. Share OTP to confirm identity.

Real name, real logo, borrowed panic. The link is the trap.

Clicked the link or shared an OTP?

It is fixable, and speed matters. Do these things now.

Questions people ask

Does Kotak Mahindra Bank send KYC links by SMS or WhatsApp?

Do not trust an unsolicited KYC link in a message. Verify your status inside the Kotak Mobile Banking app, on kotak.bank.in (type it yourself), or at a branch. Do not share an OTP, PIN, or password from the message.

I already clicked the link or shared an OTP. What now?

Take a breath, it is fixable. From a phone you trust, change your net banking and UPI passwords, and call the bank using the number on the back of your card. If any money moved, call 1930 and file a report at cybercrime.gov.in the same day. The faster you report, the better the chance of a freeze or reversal.

How do I tell a real Kotak message from a fake one?

A personal-number sender, an urgent deadline, or a link asking you to update KYC is a warning sign, not proof on its own. When in doubt, ignore the message and open the Kotak Mobile Banking app yourself.

Why is the real Kotak website kotak.bank.in and not a .com?

The .bank.in initiative is intended to make official banking domains easier to recognise, but a domain ending in .bank.in is not proof that a message is genuine. Kotak Mahindra Bank's listed address is kotak.bank.in; type it yourself or use the bank's app instead of following a message link.

Got a message from a different bank?

Last reviewed July 20, 2026.