SBI Warns Fake YONO Deactivation Message Scam

India’s largest public sector bank, State Bank of India (SBI), has issued a fresh cybersecurity alert warning customers about an ongoing phishing campaign targeting users of its YONO digital banking platform.

The alert highlights a surge in fraudulent messages falsely claiming that a customer’s YONO app will be deactivated due to incomplete Aadhaar updates, a tactic designed to trigger panic and prompt immediate action.

The attackers exploit urgency and fear, pushing users to click on links or install apps that can compromise sensitive banking credentials. Once users interact with these malicious elements, threat actors can harvest login information, OTPs, and even gain remote access to devices, leading to financial theft.

The fraudulent messages are crafted to resemble official bank communication closely, making them difficult to distinguish from legitimate alerts.

Many messages claim that the user’s account will be blocked or the YONO app will stop functioning unless Aadhaar details are updated immediately. These messages often include shortened URLs or fake domains designed to mimic SBI’s official website.

Cybersecurity analysts note that such campaigns are part of a broader trend of social engineering attacks targeting digital banking users in India.

According to SBI, these scam messages are being widely circulated via SMS, WhatsApp, and email. They often include malicious links or instructions to download APK files from unofficial sources.

The use of APK files is particularly concerning, as these files bypass official app store security checks and can contain embedded malware such as banking trojans or spyware. Once installed, these malicious apps can monitor user activity, capture keystrokes, and intercept authentication codes.

SBI has clarified that it never asks customers to update sensitive information through unsolicited links or messages. The bank emphasized that any request to download apps outside of official app stores should be treated as suspicious. Customers are urged to verify all communications through official channels before taking any action.

SBI Warns Fake YONO

The bank reiterated that the YONO app should only be downloaded from trusted platforms such as the Google Play Store or Apple App Store. Additionally, customers can safely access YONO services through the official SBI website.

The bank also encouraged users to remain vigilant and report suspicious messages immediately. Cybersecurity experts recommend checking the sender’s details, avoiding interaction with unknown links, and ensuring that mobile devices have updated security patches and antivirus protection.

This latest warning comes amid a steady rise in phishing and mobile malware attacks targeting financial institutions. Threat actors continue to refine their techniques, leveraging brand impersonation and regulatory themes like Aadhaar compliance to increase the success rate of scams.

The combination of social engineering and malicious software makes these campaigns particularly dangerous for unsuspecting users.

SBI’s proactive alert serves as a reminder that user awareness remains a critical line of defense against cyber threats. As digital banking adoption continues to grow, customers must stay informed about evolving attack methods and practice safe online behavior to protect their financial assets.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.