Fake bank calls and OTP fraud: cloned voices explained

Fake bank calls follow a familiar script. Someone says your card is blocked, your KYC has expired, or a suspicious payment needs to be "reversed". Then they ask for a one-time password. The OTP is what they're after. With it, they can approve a payment, add a new device or reset your banking password.

The new twist is the voice. Cheap AI tools can now copy how a real person sounds, so the caller may sound like your branch manager, a colleague or a family member who "works at the bank". This guide covers how these calls work, what a cloned voice can and can't fake, and where to report a fake bank call in India.

How an OTP fraud call usually unfolds

Details vary, but most OTP fraud scams share the same steps:

A believable pretext. A blocked card, a KYC update, a reward-points expiry, a refund, or a "fraudulent transaction we stopped for you".
Borrowed trust. The caller knows your name, maybe the last digits of your card, and uses bank jargon. Sometimes a second "senior officer" comes on the line.
Urgency. "Your account will be frozen in 10 minutes." Pressure stops you from thinking or checking.
The ask. Read out an OTP, share your screen, install a "support" app, or approve a UPI collect request.

Each step is designed to keep you on the line and stop you from checking. Your best defence is to break the flow by hanging up and calling back yourself.

Where cloned voices fit in

Voice cloning needs surprisingly little material. The US Federal Trade Commission warns that a scammer only needs a short audio clip of someone's voice, which might come from content posted online, plus a voice-cloning program. Its advice applies just as well to bank calls: don't trust the voice, and verify on a number you already know.

In bank fraud, a cloned voice usually shows up in one of these ways:

A voice note on WhatsApp that sounds like a relative or friend who works at a bank, telling you to "just share the OTP, it's for the verification".
A call that sounds like your relationship manager, often from a new number "because my phone is being repaired".
A pre-recorded "bank IVR" that sounds official before passing you to a live scammer.

Notice what saved her. She didn't need to work out whether the voice was fake. She checked the story through a channel the scammer didn't control.

Red flags checklist for fake bank calls

Anyone asks for an OTP, card PIN, UPI PIN, CVV or net-banking password. Banks never ask for these.
You are asked to install a screen-sharing or "remote support" app.
You are asked to approve a UPI request to "receive" money. Entering your UPI PIN always sends money; it never receives it.
The caller rushes you or threatens to block your account within minutes.
A familiar voice calls from an unknown number with an excuse for the new number.
You are told to keep the call secret from family or from your branch.

Got a suspicious voice note? Check it free: 3 checks a day, no signup.

Check a voice note

What a voice check can and cannot tell you

If you have a recording or voice note, you can run it through SpotAClone. It looks for signs that the audio was generated by AI and gives one of three outcomes: Likely AI, Likely real, or Unsure. Phone audio is compressed and noisy, so Unsure is an honest and fairly common answer. It means the audio doesn't support a confident call either way.

Keep three limits in mind:

A "Likely real" voice can still be a scammer. Most fake bank calls use real humans reading a script. A real voice does not prove the caller works for your bank.
A check is decision support, not proof. Use it alongside a call-back, never instead of one.
The rule never changes. Whatever the result, never share an OTP or PIN.

To learn why detection is harder on phone audio, read how voice deepfake detection works (and its limits).

How to verify a "bank" call in under two minutes

Say "I'll call the bank back" and hang up. A genuine bank employee will accept this.
Find the number yourself: the back of your card, your passbook, or the bank's official app or website. Don't use a number the caller gives you, and be careful with numbers from search results.
Ask the bank whether there is any problem with your account.
If a relative or friend was involved, call them on their saved number, or ask a family code word only they would know.

Fake bank call report: where to complain in India

Where you report depends on what happened.

If you lost money or shared an OTP

Call your bank right away on its official number to block your card, UPI and net banking.
Call the National Cyber Crime Helpline 1930. The National Cyber Crime Reporting Portal says any victim of financial cyber fraud can dial 1930.
File a complaint at cybercrime.gov.in and keep the acknowledgement number.

Speed matters for your liability too. RBI's 2026 directions on fraudulent electronic banking transactions say banks must advise customers to report fraud to the bank and also through the portal or 1930 at the earliest. They list giving your OTP or PIN to someone else as customer negligence. In those cases you may bear the loss until you report it, and losses after you report fall on the bank. These directions apply to transactions at commercial banks from 1 January 2027, so ask your bank about the rules that apply to you. Our step-by-step guide covers what to do if you already sent money to a scammer.

If you got a suspicious call but lost nothing

Report the number on Chakshu on the Department of Telecommunications' Sanchar Saathi portal. Chakshu accepts reports of suspected fraud calls, SMS and WhatsApp messages, including fake bank, KYC and impersonation attempts, and asks for reports within 30 days. If you have already lost money, Chakshu itself points you to 1930 or cybercrime.gov.in instead.

Protect your family

Agree a family code word for any money-related request made by phone or voice note.
Tell older relatives plainly: "The bank will never ask for an OTP. Not even if it sounds like me."
Think about how much of your voice is public. Long public videos give cloning tools more material.
Bookmark this page and our guide on AI voice cloning family emergency scams.

Sources

Frequently asked questions

Will my bank ever ask for my OTP on a call?

No. A genuine bank does not need your OTP, card PIN, UPI PIN, CVV or password to help you. An OTP is how you approve a transaction, so anyone asking for it is asking you to approve something. Hang up and call the number printed on your card or shown in your bank's official app.

What is the complaint number for fake bank calls in India?

If money has left your account, call the National Cyber Crime Helpline 1930 and also file at cybercrime.gov.in, then call your bank on its official number. If you received a suspicious call but lost nothing, you can report it on Chakshu in the Sanchar Saathi portal, which asks for reports within 30 days.

Can scammers really copy my bank manager's or relative's voice?

Yes. The US Federal Trade Commission warns that scammers can clone a voice using a short audio clip and a voice-cloning program. That is why a familiar voice should never be treated as proof of identity on its own.

Can SpotAClone tell me if a bank call was fake?

It can check a recording or voice note for signs of AI generation and will say Likely AI, Likely real or Unsure. It cannot tell you whether a caller works for a bank. A Likely real result only means the voice shows no strong signs of synthesis; the request itself can still be a scam.

I shared my OTP. What should I do right now?

Call your bank on its official number to block the card, UPI or net banking, then call 1930 and file at cybercrime.gov.in. Speed matters. Our guide on what to do if you sent money to a scammer walks through each step.

Fake bank calls, OTP fraud scams and cloned voices