Jamtara is back, this time in a new e-SIM phishing racket

Step 1: Acquire a series of mobile numbers, use all of them to try and log in to a bank account. If a number prompts an OTP, it’s time for the next step.

Step 2: Call the number’s owner and pretend to be customer care executives of the mobile operator offering to upgrade SIM cards or Know Your Customer (KYC) details. Gain trust, obtain the victim’s email ID.

Step 3: Send an email to the victim containing text to be sent to the official customer care number. It’s a ruse to register your email ID with the victim’s number, so that you can put in an official request to convert the SIM into an e-SIM. Once done, the victim’s phone number and everything else it’s linked to, including the bank account, is under your control.