Security Alert: How are scammers using Aadhaar update messages to hack your accounts?

A new phishing scam targets SBI users with fake YONO app alerts urging Aadhaar updates. The bank has issued a warning, advising customers to avoid suspicious links and unauthorized app downloads.

Post Published By: Sona Saini

Updated : 19 April 2026, 5:15 PM IST

Scammers Are Using Message to Steal Money from SBI Customers

New Delhi: The State Bank of India (SBI) has alerted its customers about a rising phishing scam designed to steal sensitive banking information. Fraudsters are circulating deceptive messages claiming that users’ YONO mobile banking accounts will be blocked if Aadhaar details are not updated immediately.

In an official communication, the SBI urged customers to remain cautious and avoid engaging with such messages. The bank emphasized that it does not send unsolicited links or APK files for account updates or KYC verification.

How the scam operates

The scam typically begins with an urgent message sent via SMS, WhatsApp or email. These messages falsely warn customers that their YONO account will be deactivated due to incomplete Aadhaar verification. Users are then instructed to download a so-called “official” app through a link provided in the message.

Once clicked, the link directs victims to a malicious application or website. These platforms are designed to capture the sensitive details such as login credentials, Aadhaar numbers, OTPs and other personal data. In many cases, the downloaded app may also install malware, further compromising the user’s device.

What SBI has advised

SBI has clearly stated that customers should not trust such unsolicited communications. The bank advises users to:

. Avoid clicking on unknown or suspicious links
. Refrain from downloading apps from unofficial sources
. Never share personal or banking details through unverified platforms
. Regularly review app permissions and remove suspicious applications

The bank reiterated that all official updates and services are available only through its verified platforms, such as the official app stores or the SBI’s website.

Staying safe in a growing digital threat landscape

As digital banking usage increases, phishing scams are becoming more sophisticated. Cybercriminals often exploit urgency and fear to trick users into making quick decisions without the verification.

Customers are encouraged to stay vigilant, verify any communication directly with the bank and report suspicious messages immediately. Practicing these basic digital hygiene and awareness remains the strongest defense against such evolving cyber threats.