Pillar Guide

Online Safety Guide for Senior Citizens

Senior citizens are disproportionately targeted by phone and online scams because fraudsters assume they may be less familiar with how digital systems work. This guide is written for elders and for the family members who support them — covering the most common attacks, plain safety rules, and a printable checklist.

Last updated June 12, 2026

Why senior citizens are often targeted

Fraudsters study their targets. Callers who run scams know that many senior citizens in India receive regular pension or fixed-deposit income, may live alone or have family far away, are unfamiliar with the exact rules of UPI or OTP, and respond seriously to calls claiming to be from government departments or banks. None of this reflects a lack of intelligence. It reflects a gap in exposure to these very specific manipulation techniques.

Understanding the tactics — not blaming the victim — is what prevents future loss. This guide is direct and simple, and the key rules can be memorised in a few minutes.

The five rules every senior citizen must know

Warning

Please read these five rules carefully and share them with every elder in your family. These rules alone will block the majority of financial fraud attempts.

Rule 1: Never share an OTP with anyone on phone. An OTP (the 4 or 6-digit code that comes to your phone by SMS) is like the key to your bank. No bank officer, government officer, or company helpline will ever ask you to read this number out loud. If someone asks for it, hang up immediately.
Rule 2: Never share your UPI PIN with anyone. Your UPI PIN is the password you type to send money. You only ever type it yourself, on your own phone, when you are sending a payment. If someone says to ‘type your PIN to receive money’, that is a lie designed to steal from you.
Rule 3: You cannot be ‘arrested online’. If you receive a call from someone claiming to be a police officer, CBI, or court, saying you are in legal trouble and must pay money to avoid arrest, it is fraud. Real police do not arrest people over the phone or video call. Hang up and call a family member.
Rule 4: KYC calls are fake. If someone calls claiming your bank account, Aadhaar, or Paytm wallet will be blocked unless you share information immediately, do not panic. Your account will not be blocked by a phone call. Visit your bank branch in person if you have a KYC concern.
Rule 5: Call a family member before acting on any urgent request. Scammers rely on you acting quickly and alone. Saying ‘I will call you back after speaking with my son/daughter’ usually causes the fraudster to hang up. Any legitimate caller will wait.

Recognising scam calls

Most scam calls share the same features. Learning to recognise these patterns allows you to identify fraud within the first thirty seconds of a call:

The caller creates an emergency or urgent problem (‘your account is blocked’, ‘a parcel in your name has drugs’, ‘your Aadhaar has been misused’).
The caller asks you to keep the conversation secret.
The caller asks for a code, password, or bank details.
The caller asks you to transfer money to an account to ‘secure’ it.
The caller’s number is from an unknown city or shows as a mobile number rather than an official bank landline.

If any one of these things happens, the correct response is to politely say ‘I will call back’ and hang up. Then call your bank’s official number (printed on your card) or a trusted family member.

Safe WhatsApp use for senior citizens

Do not share OTPs, PINs, or bank details in any WhatsApp message, even if the request comes from a contact who appears to be a family member. Fraudsters hijack WhatsApp accounts and impersonate relatives.
Forwarded messages with red arrows are unverified. A message forwarded many times (marked with a double-arrow) has not been verified by anyone — it is just a message someone else passed along. Do not assume it is true, especially if it asks you to click a link, pay money, or call a number.
If an unknown number messages you claiming to be your grandchild or relative in trouble, call that relative’s real number immediately before doing anything.
Never tap links in WhatsApp messages promising prizes, government scheme benefits, or job offers unless you have verified the offer through an official website or family member.
Ask a family member to help you turn on two-step verification: WhatsApp Settings → Account → Two-step verification. This protects your account from takeover.

Safe online banking for senior citizens

Use your bank’s official mobile app downloaded from the Play Store or App Store. Check that the developer name matches your bank before installing.
Always type your bank’s website address directly into your browser rather than clicking links from messages or search-engine advertisements. Advertisements in search results have sometimes been used to show fake bank websites.
Keep a physical note of your bank’s official 24-hour customer-care number (available on the back of your debit card) and the national fraud helpline 1930. Store these in a safe place at home.
Set transaction alerts: ask your bank to send an SMS for every transaction above ₹100. This way you will know immediately if any unauthorised payment is made.
If you receive an SMS showing a transaction you did not authorise, call your bank’s fraud helpline immediately and then dial 1930.

Safe Aadhaar use

Your Aadhaar number is used for identity verification, but it alone is not enough to access your bank account. Still, protect it:

Never photograph your full Aadhaar card and share it on WhatsApp except to a verified government or bank office that has specifically requested it.
Use a masked Aadhaar (which shows only the last four digits) for most routine purposes. You can download a masked Aadhaar from myaadhaar.uidai.gov.in.
You can lock your Aadhaar biometrics to prevent misuse. Visit myaadhaar.uidai.gov.in or use the mAadhaar app. Biometrics can be unlocked temporarily when needed for authentication.
If you suspect Aadhaar misuse, call UIDAI’s helpline: 1947.

For family members: how to help an elder stay safe

Have one dedicated conversation about the five rules

Sit with your elder family member and go through the five rules in this guide together. Ask them to repeat the rules back to you. A ten-minute conversation is more valuable than any technology setting.

Save 1930 and the bank’s fraud number on their phone

Add ‘Cyber Fraud Helpline 1930’ and your bank’s fraud number to their contacts list with a label that is obvious even in a stressful moment. Print a small card with these numbers and stick it near their landline or on the fridge.

Enable two-step verification on WhatsApp

Help them set a six-digit PIN for WhatsApp (Settings → Account → Two-step verification). Write the PIN down and keep it somewhere safe at home. This single step will prevent most WhatsApp account hijacks.

Set a low UPI transaction limit

Log in to the elder’s bank’s net banking or mobile banking app and set a lower daily UPI limit — for example ₹5,000 per day if they only make small household payments. Even if a fraudster gains access, the damage is capped.

Create a ‘call before acting’ agreement

Ask them to commit to calling you before acting on any phone or WhatsApp request that involves money, sharing an OTP, or installing an app. Make it easy for them to reach you at any time. This does not disrespect their independence — it is a practical safety net that fraudsters actively try to prevent by demanding secrecy.

Pro tip

Karnataka Police and several district administrations conduct free cyber safety awareness workshops for senior citizens. Contact your local police station or the Karnataka Cyber Crime Cell for details on upcoming programmes in your area.

Your action plan

✓ Memorise or print the Five Rules and keep them at home.
✓ Save 1930 (Cyber Fraud Helpline) and your bank’s fraud number in your phone.
✓ Enable WhatsApp two-step verification.
✓ Ask family to set a lower daily UPI limit on your bank account.
✓ Never share an OTP, UPI PIN, or bank details on any call or message — not even to someone claiming to be your bank.
✓ If you receive a suspicious call or are scammed: hang up, call a family member, then call 1930 and your bank.
✓ Report fraud at cybercrime.gov.in or ask a family member to do it on your behalf.
✓ Lock your Aadhaar biometrics at myaadhaar.uidai.gov.in if you are not using them regularly.

Frequently Asked Questions

This is almost certainly the 'digital arrest' scam. Tell her to hang up immediately and not call back. Reassure her that no legal matter of this kind is handled by phone. File a complaint at cybercrime.gov.in. If any money was paid, call 1930 immediately. Real investigative agencies conduct inquiries through written notices and official visits, never via phone or video call demanding money.

Use only the bank's official app or BHIM. Enable biometric authentication within the app. Set a daily transaction limit of ₹5,000–10,000 if you only make small routine payments. Never enter your PIN when someone is watching over your shoulder or speaking to you on the phone. If confused, ask a family member to sit with you for the first few transactions.

Call your granddaughter on her regular phone number that you already have saved. Do not use any number provided in the suspicious message. If she confirms everything is fine, the WhatsApp account sending those messages has been hijacked. Tell her so she can recover it. Real family emergencies can be confirmed in thirty seconds with a direct call.

Yes, with appropriate precautions. Use your bank's official app from the Play Store, enable biometric login, keep transaction SMS alerts active, and never log in on a shared computer. Avoid clicking links in emails or messages that appear to be from your bank. When in doubt, visit the bank branch in person — branch staff are there to help.

Government scheme benefits are distributed through existing Aadhaar-linked databases, not by clicking registration links on WhatsApp. These messages are almost always phishing links that harvest your Aadhaar number and bank details. Check official schemes at india.gov.in or through your bank branch. Report the message to WhatsApp using the in-app report feature.

Call 1930 immediately with the transaction ID, the fraudster's account details, and the time of transfer. File a complaint on cybercrime.gov.in for an official reference number. File an FIR at the nearest police station — ask for the Cyber Crime Cell. Contact the bank's fraud helpline. While recovery is not guaranteed, prompt reporting has led to successful fund-holds in many such cases across Karnataka.

Stay safe online with Cyber Kannadigas

Get cyber-safety alerts, scam warnings, and digital-literacy tips for Karnataka — free, weekly.