eSIM fraud has started becoming popular and the Hyderabad cyber crime police recently even warned about the growing eSIM swapping fraud Following this, the fraudsters contact people under the garb of customer care executives of any of the telecom operators that provide eSIM services.
Phones that have eSIM support alongside a standard SIM are basically using it as a substitute for a second SIM.
Users are then asked to forward an email ID (sent by the fraudsters) to the customer card of that particular telecom operator. The email ID belongs to the scamsters so that they can register their mail IDs to access the user's bank information. Once the message is sent, an auto-generated message is received regarding the eSIM activation, following which another message is received that contains a link to a Google form asking users to fill in details for the KYC updating.
Once users fill in their personal details that also include the bank account number, the eSIM is activated and a QR code is sent to the fraudsters (via email) for them to access the user's phone number as the physical SIM card gets blocked. This way, the scamsters can use the phone number to get OTPs and enter the banking details in e-wallets to steal money from people.