SR-24: "Wrong SIM delivered" social engineering for SIM swap π΄ High Risk
π SIM-swap / OTP / bank callπ± CallβοΈ Caller posing as franchise staffπ° Rs. 75,000π 09 Sep 2026
Caller: "Sir, a new SIM was issued on your CNIC by mistake in our system, it will block your banking. Confirm your CNIC number and the code you receive so we can cancel it." I gave the code and my JazzCash account and WhatsApp were drained within 10 minutes. The code was actually a SIM change authorization.
Caller (speaks polished Urdu/English): "Assalam o Alaikum, I am calling from your bank head office Karachi. Your account will be blocked in 30 minutes due to a suspicious login. We have sent a verification code to your number β please read the 6-digit OTP so we can stop the block." He knew my name and last 4 digits of my card. The OTP was actually my internet banking login code.