New Call Forwarding Scam Alert: How Fraudsters Hijack Your Phone Using Simple USSD Codes

Indian cyber authorities have flagged a growing phone-based scam that allows criminals to secretly divert your calls—without installing any app, clicking a link, or using the internet. The trick relies entirely on USSD call forwarding codes, a legitimate telecom function that most users rarely think about.

What’s Really Happening Behind the Scam

Fraudsters are exploiting human trust rather than technology loopholes. The attack starts with a convincing phone call and ends with complete control over a victim’s financial alerts and verification calls.

Step 1: Fake Identity

Scammers typically pose as delivery executives or courier partners, claiming an urgent issue with a parcel that needs “quick confirmation.”

Step 2: Psychological Pressure

The caller insists the problem must be resolved immediately and guides the victim to dial a “verification” code—often framed as a routine delivery check.

Step 3: Silent Call Diversion

The victim is asked to dial a USSD sequence such as *21*, *61*, or *67* followed by the scammer’s number. This instantly activates call forwarding.

Step 4: Complete Takeover

Once enabled, all incoming calls—including bank verification calls, OTP confirmations, and security alerts—are redirected to the fraudster. With this access, criminals can:

Approve banking transactions

Reset account passwords

Hijack WhatsApp, Telegram, and email accounts

Why This Scam Is Especially Dangerous

According to India’s cybercrime authorities, this fraud is difficult to detect because:

USSD commands work offline and execute instantly

Phones often do not show alerts when call forwarding is enabled

No malware or suspicious app is involved

Antivirus and spam filters are largely ineffective

Most victims realise something is wrong only after money is withdrawn or accounts are locked.

Official Safety Advisory: What You Must Do

The National Cybercrime Threat Analytics Unit (TAU), under I4C and the Ministry of Home Affairs, recommends the following precautions:

Never dial USSD codes shared by unknown callers—especially those starting with *21, *61, or *67

If you suspect call diversion, immediately dial ##002# to cancel all call forwarding

Always verify delivery-related issues directly through official courier websites or customer care numbers

Keep a close watch on bank statements and account alerts

Report incidents immediately via:

Cybercrime helpline: 1930

National Cyber Crime Reporting Portal

Key Takeaway

This scam proves that not all cyber frauds rely on apps, links, or hacking tools. Sometimes, a single phone call and a simple code are enough to compromise your financial security.

Staying safe now depends less on software—and more on awareness.

By - Aaradhay Sharma