Noida woman tries getting her sim card converted into e-sim, ends up losing Rs 27 lakh

Online scams in India have been on the rise for the last few months and every now and then, a new case surfaces where a victim loses their hard-earned money. Usually, scammers in many cases pose as company officials to steal your sensitive information and misuse it.

In one such recent incident, a 44-year-old woman from Noida recently fell victim to an eSIM scam, losing ₹27 lakh and becoming the target of fraudulent loan activity. The scam involved the manipulation of her SIM card and banking details, which allowed the fraudster to siphon off her funds and take out a loan in her name.

What exactly happened

According to an HT report, Jyotsana Bhatia, a resident of Sector 82 in Noida, works at a private company and filed a complaint with the cybercrime police station in Sector 36.

On August 31, Bhatia received a WhatsApp call from a person posing as a customer care executive from her telecom provider. The caller explained that her SIM card could be converted to an embedded SIM (eSIM), which is a digital version of a physical SIM card and can be helpful in case of phone loss.

The suspect offered to help Bhatia activate the eSIM feature, instructing her to select the option in her mobile carrier’s application and enter a verification code that was sent to her phone. Bhatia, unaware of the fraud, followed the steps as instructed. Unfortunately, as soon as she entered the code, her physical SIM card was deactivated.

The suspect assured her that a new SIM card would be delivered by September 1, leaving her temporarily without access to her mobile number. When the promised SIM card failed to arrive, Bhatia contacted the telecom provider’s customer care service and was advised to visit the service centre to get a replacement. After three days, on September 3, she was issued a new SIM card.

However, by then, the damage had already been done. Bhatia started receiving messages from her bank, revealing that the fraudster had accessed her mobile banking account using her deactivated phone number. By changing the associated email ID, the suspect was able to bypass security checks and transfer large sums of money from her accounts. The fraudster also broke her fixed deposit, siphoned money from two bank accounts, and even took out a loan of ₹7.40 lakh in her name.

Bhatia reported that the total amount stolen in multiple transactions amounted to ₹27 lakh. Shocked by the breach, she immediately filed an FIR with the cybercrime unit. The police registered the case under sections 318(4) (cheating) and 319(2) (cheating by personation) of the Bharatiya Nyaya Sanhita, as well as under relevant sections of the IT Act. Efforts to track down the suspect are currently underway.

Understanding eSIM and its risks

An eSIM (embedded SIM) is a digital version of a SIM card that is built into a device and does not require a physical card. While this technology is convenient and allows users to switch networks or plans without handling a physical card, it also opens the door to new forms of fraud. Scammers can manipulate eSIM features to deactivate a user’s existing SIM card and take control of their phone number, which is linked to various accounts and services.

In this case, the fraudster exploited the victim’s trust by posing as a telecom customer care executive, taking advantage of her lack of knowledge about the risks associated with eSIM activation. Once the fraudster gained control of her phone number, they accessed her bank accounts through mobile banking applications that rely on the phone number for authentication.

By changing the email ID linked to her account, they prevented the victim from receiving security alerts and were able to make unauthorised transactions without her knowledge.