India mobile safety: SIM changes, UPI recovery and fraud reports

Map the accounts that depend on the phone

List the mobile operator, bank, payment applications and email account used for recovery. Note which ones depend on text messages and which have another recovery method. Keep this inventory somewhere protected outside the phone, without writing the payment PIN beside the account details. If a number changes, update essential services deliberately rather than assuming the mobile operator will notify every bank. A number retained for recovery should remain under your control; a forgotten secondary SIM can become an overlooked weak point.

Use official telecom reporting functions

The Department of Telecommunications Sanchar Saathi portal provides services for suspected fraudulent communications and telecom-account concerns. Chakshu is a route for reporting suspicious communications; it should not be mistaken for the bank’s procedure for blocking a payment account. Reach the portal by typing its known address or using an independently verified government link. A caller who mentions the service name is not thereby a government official. Keep the suspicious message, sender details and time, but do not follow embedded instructions to install remote-control software.

Concrete security controls and their scope

These controls solve different problems. A telecom report does not itself reverse a bank debit, a cooling period does not prove the device is malware-free, and a payment-status check does not identify the person behind a fraudulent message. Combine the relevant actions according to what has actually happened.

Plan a SIM or eSIM change before starting

For a legitimate replacement, use the operator’s authenticated process and confirm device compatibility and identity requirements. A QR code used to activate an eSIM should be treated as a sensitive credential, not a travel document to share publicly. Keep access to your recovery email and understand when the old SIM will stop working. Unexpected loss of service deserves investigation, particularly if accompanied by account-reset notices. Contact the operator from another trusted device and inform affected financial providers if account access may be at risk.

Protect the payment authorisation itself

SBI’s security guidance advises keeping the UPI PIN private and verifying the recipient. Read the final screen rather than relying on a caller’s explanation of what it means. A request presented as a refund may still ask you to authorise an outgoing payment. Do not grant screen-sharing or accessibility permissions merely because someone claims to be support. Update applications through their official distribution channels. An impressive logo, a familiar caller name or a promise to remove a cooling restriction does not authenticate the request.

Respond in an order that preserves control

If the phone is lost, use a trusted alternative device to contact the operator and relevant banks or payment providers. Ask about blocking service and account access, then follow their identity-verification procedures. If money has moved, preserve the transaction references and report the facts promptly. The official MyUPI service can support payment-status and mandate checks, while the RBI dispute framework explains formal payment-resolution arrangements. Do not wipe the only copy of evidence without first considering what the provider needs to investigate.

A phone-security checklist

• Keep recovery details outside the only active phone.
• Use the operator’s verified route for SIM or eSIM replacement.
• Treat activation QR codes, PINs and OTPs as secrets.
• Investigate unexplained loss of mobile service.
• Review payment mandates after recovering access.
• Keep dated records of reports and disputed transactions.

After recovery, check email forwarding rules, active sessions and account-recovery details as well as the payment application. Restoring mobile reception is only one part of regaining control. Explain any continuing uncertainty to the bank instead of assuming that a working SIM proves every account is safe.

Sources and verification

• Sanchar Saathi — Department of Telecommunications — 2026-10-23
• SBI UPI limits and cooling periods — State Bank of India — 2026-10-23
• MyUPI official support — NPCI — 2026-10-23
• Online dispute resolution for digital payments — Reserve Bank of India — 2026-10-23