Fake EPFO SMS or call steals your UAN login and drains your PF savings
Fraudsters send fake EPFO SMS/emails about KYC expiry or PF advance release with phishing links to steal UAN credentials. A remote-access variant has fake EPFO customer care install AnyDesk to drain PF savings directly. EPFO issued a fresh advisory on August 11, 2026.
Also known as: EPFO KYC update SMS scam, fake EPFO customer care fraud, PF account phishing India, UAN phishing scam, provident fund fraud AnyDesk
Already happened to you? Do this in the next few minutes
Call 1930 now- 1 Call 1930 — the national cyber-crime helpline — right now. The sooner you report, the better the chance of freezing the money before it moves.
- 2 Call your bank to freeze the account and block the card immediately. Use the number printed on your card, never a number from the message or caller.
- 3 File a report at cybercrime.gov.in and keep every message, screenshot, and transaction ID.
- ! If you installed any "support", "server", "refund", or remote-access app at their request (AnyDesk, TeamViewer, Quick Support, etc.): disconnect the internet now, then run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
What to do right now
- 1 Access EPFO only at unifiedportal-mem.epfindia.gov.in — bookmark it; never use links from SMS, email, or WhatsApp
- 2 The only legitimate EPFO helpline is 14470 — if a number you found on Google is different, hang up
- 3 EPFO never asks for your UAN password, OTP, Aadhaar number, or bank details over a call or message — end any such call immediately
- 4 Check your EPFO member portal for unauthorised withdrawal requests and your registered mobile number — change it immediately if it looks wrong
- 5 If you installed any 'support' or 'server' or 'refund app' or remote-access app at the scammer's request (AnyDesk, TeamViewer, Quick Support, etc.), run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
- 6 Report at https://cybercrime.gov.in or call 1930 (national cyber helpline).
Was remote-access software installed?
If a scammer asked you to install AnyDesk, TeamViewer, Quick Support, or any remote-access app, your device may still be compromised.
Run SeraphSecure to detect and remove it →Red flags
- ⚠ SMS says your EPFO KYC has expired or your UAN is temporarily locked — EPFO never sends these messages with action links
- ⚠ Email or SMS says your PF advance is ready for release and you must update your bank details — this is a phishing pretext
- ⚠ A 'customer care agent' found via Google asks for your UAN, password, or OTP over the phone — EPFO's real helpline (14470) never asks for this
- ⚠ Caller or SMS asks you to install AnyDesk, TeamViewer, or QuickSupport to 'remotely resolve' an EPFO account issue
- ⚠ The link in the SMS goes to a site that looks like unifiedportal-mem.epfindia.gov.in but the URL is slightly different (epfo.org.in, epfindia.online, etc.)
- ⚠ Payment demand or fee to 'process' your PF withdrawal — the real EPFO portal never charges any fee for advances or withdrawals
Sources
- Business Standard — PF fraud alert: EPFO warns of fake links targeting your UAN, money (August 11, 2026)
- BuzzToday — EPFO Security Alert August 2026: Beware of Fake Phishing Links targeting PF account holders
- ScanTotal — India Scam Guides 2026: UPI, EPFO, IRCTC, Aadhaar & 12 More
- News24 Online — EPFO Fraud Alert: Organisation issues fresh advisory on online scams (August 2026)