How to Differentiate Between Genuine Bank SMS and Fraudulent Messages (TRAI Guidelines – India)

Banking fraud through SMS is one of the most common cyber threats in India. Fraudsters often send fake messages pretending to be from your bank, asking for OTPs, PINs, or urging you to click on malicious links. To protect consumers, the Telecom Regulatory Authority of India (TRAI) has issued new guidelines that make it easier to identify whether a message is genuine or fraudulent. Here’s a detailed guide on how to differentiate between the two. --- 1. Check the Header Suffix Under TRAI’s new rules (effective May 2025), every SMS must carry a suffix that indicates its type: -T → Transactional (bank alerts, OTPs, important updates) -S → Service (customer updates, notifications) -P → Promotional (advertisements, offers) -G → Government-authorized messages 👉 A genuine banking SMS will always end with “-T”. If you receive a banking message with -P or -S, treat it with suspicion. --- 2. Verify the Sender Header TRAI has provided tools to verify the authenticity of a sender’s header. Send an SMS: DETAILS to 1909 Or visit the official TRAI database: smsheader.trai.gov.in If the sender ID is not registered or marked inactive → the SMS is likely fraudulent. --- 3. Look for Red Flags in Content Fraudulent SMS often share certain patterns: Urgent warnings (“Your account will be blocked in 2 hours”) Spelling mistakes or poor grammar Requests for sensitive information like OTP, PIN, Aadhaar, or bank details Suspicious links leading to fake websites Genuine bank messages are professional, concise, and never ask for personal or financial details. 4. Beware of Spoofed Headers Fraudsters sometimes copy legitimate headers. For example, in Hyderabad, scammers used a registered but inactive header to circulate fake loan offers. Even if the header looks correct, always confirm whether it is active and legitimately in use. 5. Use TRAI Tools for Protection To safeguard yourself further: Download and use the TRAI DND 3.0 App to block or report unwanted promotional messages Visit the Sanchar Saathi Portal to report fraud or suspicious SMS/calls Always cross-check with your bank’s official helpline before acting on any SMS Quick Checklist: Genuine vs Fraudulent SMS Feature Genuine Bank SMS Fraudulent SMS Header Ends with -T Ends with -P/-S or missing suffix Header Validity Registered & active (verified via TRAI) Unregistered or inactive Message Tone Clear, professional Errors, urgent tone Data Requests Never asks for OTP/PIN Often asks for sensitive info Links Rarely included Suspicious/unknown links Final Word Fraudsters are getting smarter, but so are the safeguards. Thanks to TRAI’s new SMS suffix rules and verification tools, it’s now easier for consumers to separate genuine messages from fraudulent ones. Golden Rule: Never share OTPs, PINs, or personal details via SMS. When in doubt, contact your bank directly through official channels. Stay alert. Stay safe.