Top News

Distinguishing between a genuine bank SMS and a fake one has become challenging. Recently, two nearly identical SMS messages purportedly from SBI surfaced; one was legitimate while the other was a scam, yet both contained alerts regarding failed transactions.

We often view bank SMS messages as routine and read them without paying much attention. However, cyber fraudsters are now sending fake messages that are difficult to distinguish from genuine bank alerts at first glance. A similar case involved two SMS messages claiming to be from SBI—sharing nearly identical text, style, and sender names. One was authentic, while the other was fraudulent, with only subtle differences between them.

Recently, Vinni Arora—a Finance Professor at Delhi University and a SEBI-registered Investment Adviser—raised awareness about this issue by sharing a video on her Instagram profile, @moneyvsme. Here is how you can determine whether a link in an SMS claiming to be from a bank is genuine or fake.

How to verify if a bank SMS is genuine or fake?

1. Check the SMS Header via 1909 – First, copy the sender header from the SMS and verify its details using the 1909 service. You can use the format "DETAILS OF [header]" to check if the header is registered. However, since the 1909 service is primarily intended for reporting unsolicited commercial communications, relying solely on this information to deem an SMS completely authentic is not advisable.

2. Check via the TRAI Header Portal – Another method is using TRAI’s SMS Header Information Portal. You can verify the sender header by visiting the website smsheader.trai.gov.in. This helps identify the entity behind commercial or government-awareness communications and confirms whether the header is registered. If an SMS claiming to be from the bank originates from a header that is unregistered or does not match the bank's details, it is a strong indication that the message is fake.

3. Pay close attention to the sender's name—under TRAI regulations, the SMS header is case-sensitive; therefore, changing even a single letter can alter the sender's identity. Fraudsters exploit this by using visually similar characters to create fake SMS messages that appear authentic.

Do not click on links immediately.

SBI advises users against clicking on links received via SMS or email that relate to banking or financial activities. You should never share OTPs, PINs, passwords, or other confidential banking information through suspicious messages. If you have concerns regarding a transaction, instead of using the link or number provided in the SMS, open the bank's official mobile app directly or contact the official customer care channel.