EPFO does not ask for your OTP, UAN password, or bank login over phone, SMS or WhatsApp. Neither do we. Here's exactly what a genuine message looks like, and the specific patterns scammers actually use.
EPFO's own public advisories are consistent on this point: EPFO never requests your OTP, UAN password, ATM PIN, or bank-login credentials over phone, SMS or WhatsApp. It does not ask for money to "release" or "expedite" your PF claim. It does not ask you to click a link and log into a portal that isn't the official member portal.
NidhiSetu follows the identical rule. We never ask for your OTP, UAN password, bank-login details, or payment details over WhatsApp — not on a call, not in a message, not from anyone claiming to represent us.
The common scam patterns that target PF members specifically include: a message claiming your claim is "on hold" pending a small "processing fee" paid to a personal account; a call claiming to be from an EPFO office asking you to "verify" your account by sharing an OTP; and messages with links to fake portals designed to look like the real member portal, intended to capture your login credentials.
…you've already shared sensitive details and suspect your account has been compromised. This guide is about recognising and avoiding scams before they happen — if you believe your UAN, bank details or OTP have already been misused, that's an active-incident situation requiring immediate action with your bank and EPFO directly, not something a general awareness guide addresses.
Employees: Anyone with an active PF account is a potential target, especially while a claim, transfer or correction is pending, since scammers rely on urgency.
Employers: Employer-side EPFO communications (about ECR, compliance notices) follow the same rule — no genuine notice will ask for online banking credentials over WhatsApp or phone.
Pensioners (EPS members): Pension-related scams follow an identical pattern, often targeting older members with claims of "pension release" delays requiring payment.
NRI members: NRI members are frequently targeted specifically because cross-border verification feels harder to double-check — the same rules apply regardless of location.
This is a general awareness guide, not incident response. It doesn't cover the specific steps to take if you've already lost money to a scam — that requires immediate contact with your bank, a police complaint, and a report to the cybercrime portal, none of which a guide like this substitutes for.
Not over WhatsApp, not on a call, regardless of how official the request sounds.
Check any claim or notice directly on the official portal, not through a link someone sends you.
Use the official EPFO grievance channel or cybercrime.gov.in if you've been targeted.
If you're unsure whether a message you received is genuine, forward the details (without sharing any of your own credentials) and ask before acting on it — that judgment call is exactly the kind of thing worth a quick, free second opinion.
We never ask for your OTP, UAN password, bank-login details, or payment details over WhatsApp, phone, or email. If anyone claiming to be from NidhiSetu asks for these, it is not us.
Independence disclaimer: NidhiSetu is an independent private EPFO consultancy — not affiliated with, endorsed by, or representing EPFO or any government body. EPFO's own services are free; the fee here is for diagnosis, documentation, follow-up and escalation, agreed in writing before any work begins.
Safety note: We never ask for your OTP, UAN password, bank-login details, or payment details over WhatsApp, phone, or email.
Forward me what you received (without sharing any of your own credentials) and I'll tell you honestly whether it looks like a scam.