Players chasing referral and welcome bonuses get more OTP phishing than casual users. Scammers know you are waiting on a payout or a “KYC call”. This guide is for people who deposit — not a general privacy essay.
OTPs that touch your money
- App login OTP — SMS or WhatsApp code to open the account.
- UPI / bank OTP — never requested by a real rummy support chat.
- KYC “video OTP” — fake agents ask you to read a code on a call while they approve a device change.
Earner-specific scam scripts
- “Your ₹X withdrawal is stuck; share the OTP we just sent to release it.”
- “Bonus upgrade: forward the SMS to this WhatsApp number.”
- “Play store verification” links that ask for the same OTP as your rummy login.
Real apps apply withdrawals inside the logged-in wallet. They do not need your SMS to “push” UPI.
Hard rules before you chase a bonus
- Never read an OTP aloud on a call, even if the caller knows your deposit amount.
- Turn on airplane mode for 30 seconds if someone pressures you while an SMS is arriving.
- Use a separate email/phone for rummy logins when you can, so a leaked OTP does not open your main bank apps.
- After any scam attempt, change the app password (if any) and check active sessions in settings.
OTP vs package check
A cloned APK can show a convincing login screen and harvest OTPs. Before the first deposit, confirm the package name matches the review you trust — see package check before depositing.
FAQ
Support asked for OTP on WhatsApp. Ever legitimate?
No for UPI/bank OTPs. For app login, use the official in-app chat only, and still prefer not to paste codes into third-party messengers.
Will denying SMS permission break withdrawals?
Usually not. Many apps let you type the OTP manually. Deny SMS access if the app does not need auto-read.
18+ only. Rules vary by state and may change; check whether it is allowed where you are.