
Cybercriminals Exploit RBI’s UDGAM Portal Name to Target Bank Customers
Cybercriminals have been reported to exploit the Reserve Bank of India’s (RBI) UDGAM portal for fraudulent activities. Account holders are being targeted with emails, messages, and WhatsApp notifications claiming that unclaimed deposits in their bank accounts can be claimed by clicking provided links.
The UDGAM (Unclaimed Deposits Government and Management) portal is an official RBI platform designed to help individuals check and claim unclaimed or dormant deposits in banks. Fraudsters, however, are creating fake websites and phishing messages using its name, misleading users to reveal personal and banking details. Victims who click these links risk having their phones compromised and accounts emptied.
Officials have clarified that RBI never asks for OTPs, passwords, or sensitive banking information through calls, messages, or emails. Only the official UDGAM website, https://udgam.rbi.org.in, should be used to verify unclaimed deposits.
Cyber experts noted that fraudsters often obtain partial customer information from data leaks, insider sources, compromised mobile applications, and publicly available information on social media and online platforms. These details are used to create highly targeted phishing attempts. It was stressed that scammers do not have access to actual account balances.
To safeguard against such fraud, individuals are advised not to click on links received via WhatsApp, SMS, or emails. One should never share OTPs, PINs, CVV numbers, or passwords with anyone. Unclaimed deposits should be verified and claimed only through the official UDGAM portal or directly at bank branches. Any suspicious activity should be immediately reported to the RBI helpline at 1930 or through the Cybercrime portal at http://cybercrime.gov.in.
Customers claiming unclaimed deposits at banks are required to submit identity proof (Aadhaar, PAN, passport, voter ID), address proof (if not included in identity proof), and complete a claim form. Legal heirs claiming deposits on behalf of deceased account holders must provide death certificates and legal heir or succession certificates.
