Call-Forwarding Scams: How Fraudsters Hijack Your Calls and Steal OTPs Without Malware

Call-forwarding scams have quietly become one of the most dangerous forms of telecom fraud in recent years. What makes them particularly alarming is not technical sophistication, but simplicity. There is no malicious app to install, no suspicious link to click, and no obvious breach of your device. Instead, the attack relies entirely on human trust and a built-in telecom feature that most people have never thought twice about.

Reverse Phone Lookup — Find Out Who’s Calling You

Across countries like India, the United States, and the United Kingdom, reports between 2023 and 2026 show a clear surge in these scams. Victims often realize something is wrong only after their bank accounts are accessed, social media accounts are taken over, or critical verification messages stop arriving. By then, the damage is already done.

What Is a Call-Forwarding Scam?

At its core, a call-forwarding scam is a form of social engineering that tricks you into redirecting your own incoming calls to a scammer’s phone number.

Call forwarding is a legitimate telecom feature. It allows users to send incoming calls to another number, such as a second phone or voicemail. This is typically activated using short codes known as USSD codes on mobile networks or star codes on landlines.

Scammers exploit this feature by convincing victims to dial a code under false pretenses. The moment that code is entered, all incoming calls, including sensitive verification calls and OTPs, are silently redirected.

Unlike traditional scams, nothing visibly breaks. Your phone still works. Your apps still open. But your control over incoming communication is gone.

Why This Scam Is So Effective

What makes this attack particularly powerful is that it bypasses most modern security layers without technically hacking anything.

There is no malware to detect, no phishing link to block, and no unauthorized login from a suspicious device. From a system perspective, everything appears legitimate because the user initiated the change.

This creates a dangerous illusion of safety. Victims often assume their accounts are secure because they never shared passwords or clicked suspicious links. In reality, the attacker has positioned themselves to intercept the very tools designed to protect those accounts.

The growing reliance on OTP-based authentication has made this vulnerability even more valuable. Once a scammer receives your OTPs, they can reset passwords, authorize transactions, and lock you out within minutes.

How Call-Forwarding Scams Work Step by Step

Understanding the mechanics of the scam reveals why so many people fall for it.

The process usually begins with an unsolicited call. The scammer impersonates a trusted entity such as a courier service, bank representative, telecom provider, or even law enforcement. The story varies depending on the target, but it always involves urgency.

A common scenario involves a missed delivery. The caller claims that a package cannot be delivered unless you complete a quick verification step. They then instruct you to dial a code, often presented as a way to connect with a supervisor or confirm your identity.

In reality, the code activates call forwarding. On GSM networks, this might involve sequences like 21 followed by a phone number. In the United States, it may involve dialing *72 with a number.

Once activated, all incoming calls are redirected to the scammer’s device. If a bank sends an OTP via voice call or verification call, the attacker receives it instantly. The victim remains unaware because their phone does not ring.

From that point, account takeover becomes trivial.

Real-World Scenario: How a Simple Call Leads to Account Takeover

Imagine a working professional expecting an important courier. They receive a call from someone claiming to be from a delivery company.

The caller sounds professional and provides just enough detail to appear legitimate. They say the delivery failed due to an address issue and ask the recipient to dial a code to confirm details with a dispatcher.

The recipient complies. Within seconds, call forwarding is enabled.

Later that day, the attacker attempts to log into the victim’s email account and requests a password reset. The OTP call goes directly to the scammer. They reset the password, access the inbox, and begin targeting linked financial accounts.

By the time the victim notices they are not receiving calls, multiple accounts may already be compromised.

Call-Forwarding Scam vs SIM Swap Fraud

Although both scams result in loss of control over phone-based authentication, they operate very differently.

SIM swap fraud targets the telecom provider. The attacker convinces the carrier to issue a new SIM card linked to the victim’s number. This often involves identity theft or insider manipulation.

Call-forwarding scams, on the other hand, target the user directly. The telecom system remains intact. The victim unknowingly enables the forwarding themselves.

This distinction matters because it changes how the attack is executed and how it can be prevented. SIM swaps require breaching carrier processes, while call-forwarding scams succeed purely through persuasion.

Global Rise of Call-Forwarding Scams (2021–2026)

The past few years have seen a noticeable increase in reported cases.

In India, authorities and telecom providers have issued repeated warnings about courier scams and USSD code misuse. The Indian Cyber Crime Coordination Centre began issuing formal advisories in late 2025, highlighting how criminals were using simple phone calls to trigger forwarding.

Media reports in early 2026 documented multiple incidents where victims lost access to banking and social media accounts after dialing such codes. Police departments, including those in Rajasthan, have actively warned citizens about strangers asking to use their phones or instructing them to dial codes.

In the United Kingdom, financial institutions like Co-operative Bank have cautioned customers about similar scams involving call-forwarding codes. In the United States, law enforcement agencies have warned about star code scams targeting older adults, often involving fabricated emergencies.

Even without precise statistics, broader data shows how widespread phone scams have become. Surveys indicate that a significant portion of adults receive scam calls regularly, creating a fertile environment for tactics like call forwarding to spread.

Who Is Most at Risk?

While anyone can fall victim, certain groups are more frequently targeted.

Older adults are often targeted because scammers assume they may be less familiar with telecom features. People expecting deliveries are also common targets, especially with the growth of online shopping.

Another vulnerable group includes individuals in public places such as bus stations or markets, where scammers may ask to borrow a phone for an emergency call and then quickly enable forwarding through settings.

The common thread is situational vulnerability. Scammers exploit moments when people are distracted, rushed, or emotionally engaged.

Red Flags That Signal a Call-Forwarding Scam

The warning signs are often subtle but consistent.

Unsolicited calls that create urgency should immediately raise suspicion. Legitimate organizations rarely demand immediate action over the phone, especially when it involves dialing unfamiliar codes.

Any request to dial a number containing symbols like asterisks or hashes should be treated as a major red flag. These are not typical phone numbers but command codes that control network functions.

Another key indicator is emotional pressure. Scammers often create scenarios involving missed deliveries, account threats, or emergencies involving loved ones. The goal is to push you into acting quickly without questioning the request.

How to Protect Yourself Effectively

Prevention in this case is largely about awareness and behavior rather than software.

The most important rule is simple. Never dial a code provided by an unknown caller. If someone claims to represent a company, disconnect the call and contact the organization through official channels.

It is also wise to check your call-forwarding status periodically. On many networks, dialing *#21# reveals whether forwarding is active. If you ever notice unusual call behavior, this should be one of the first things you verify.

Using app-based two-factor authentication instead of SMS adds another layer of protection. Even if calls are forwarded, authentication apps remain secure.

Securing your device with a strong passcode or biometric lock also prevents physical access attacks where someone might enable forwarding directly through settings.

What To Do If You Are a Victim

If you suspect that call forwarding has been enabled without your knowledge, speed matters.

The first step is to disable forwarding immediately. On many devices, dialing ##002# cancels all forwarding settings. You can also check your phone’s call settings manually.

Next, contact your telecom provider and report the issue. They can verify whether forwarding was enabled and ensure it is fully removed.

After that, secure your accounts. Change passwords for email, banking, and social platforms. Inform your bank about the potential breach so they can monitor or freeze suspicious activity.

Reporting the incident to cybercrime authorities helps prevent further cases and may assist in tracking organized fraud networks.

Why Telecom-Level Changes Are Needed

While user awareness is essential, the burden should not fall entirely on individuals.

Telecom providers could implement stronger safeguards, such as requiring confirmation messages before enabling call forwarding. Real-time alerts when forwarding is activated could also help users detect unauthorized changes.

There is also a growing case for regulatory oversight to ensure that such features cannot be exploited without user awareness.

As scams evolve, security must move beyond reactive measures and address the root vulnerabilities within communication systems.

Final Thoughts: A Scam Built on Trust, Not Technology

Call-forwarding scams are a reminder that the weakest link in any security system is often human behavior. These attacks do not rely on advanced hacking tools or technical exploits. They succeed because they manipulate trust, urgency, and routine actions.

As communication systems become more integrated into financial and personal security, even small features like call forwarding can carry significant risk when misused.

The most effective defense is a combination of awareness, skepticism, and simple verification habits. Taking a moment to question an unexpected request can prevent consequences that take weeks or months to recover from.

In a world where scams are constantly evolving, understanding the logic behind them is more valuable than memorizing specific tactics. Once you recognize the pattern, you are far less likely to become the next victim.

Frequently Asked Questions

Can call-forwarding scams happen without my knowledge?

They typically require some form of user action, such as dialing a code or allowing access to your phone. However, once enabled, they can operate silently, making them difficult to detect.

Does call forwarding affect SMS messages too?

Traditional call forwarding affects voice calls, but attackers can still use intercepted calls to receive OTPs or trigger account recovery processes. In some cases, related tactics may also impact messaging services.

Is this the same as SIM swap fraud?

No, although both lead to similar outcomes. SIM swaps involve the telecom provider, while call-forwarding scams rely on tricking the user into enabling the feature.

How often should I check call-forwarding settings?

It is good practice to check occasionally, especially if you notice missed calls or unusual account activity.

Are smartphones more secure against this scam?

Smartphones provide more visibility through settings, but they are not immune. The vulnerability lies in human behavior, not device type.

Originally published at https://www.linkedin.com.