Short answer: no. Don't reply YES or NO to a payment alert from a number you don't know. A real debit is something you can check yourself, safely, in your bank's own app.
🛡️
This is one scam out of dozens.The Scam-Proof Playbook covers phishing, bank and government impersonation, job and romance scams, AI voice cloning, and protecting your family. Plain language, real examples.
Get the Playbook · $24 →
How the scam works
A message arrives on WhatsApp or by text, often from an unknown or international number. It says money has just been debited from your bank account, sometimes with an amount, a date, and a reference number to make it look real. A second message follows: reply "NO" if you did not make this payment.
It feels like the responsible thing to do. You didn't make the payment, so you want to stop it. That panic is exactly what the scammers are counting on. In October 2026, the police commissioner of Hyderabad in India publicly warned people not to reply to these messages, and the warning spread through national news within days.
What happens if you reply
Police in India said replying can lead to criminals getting into your phone and your money. Tech reporters note that typing "NO" on its own does not normally give anyone control of a phone, but that doesn't make replying safe. Here is what a reply really does:
- It confirms your number is real and that you read your messages, so you become a target for more scams.
- It shows you are worried, which is the perfect setup for the next step.
- The next step is usually a call from a fake bank officer offering to "reverse" the payment, who then asks for your card details, a code, or for you to move money.
- Or you're sent a link, an app, or a file to "cancel the transaction". These can steal your banking details or put harmful software on your phone.
Some real banks do send fraud alerts that ask you to reply YES or NO. But a real bank uses its own official number or the alerts in its app, not a random WhatsApp number. If you have any doubt, don't reply. Check in your banking app instead.
Warning signs
- It comes from an unknown or foreign number, not your bank's official channel.
- It's a payment you know nothing about, designed to scare you.
- It asks you to reply, click a link, call a number, or open a file to stop the payment.
- It pushes you to act fast before the money is "gone".
How to check safely
- Don't reply, not even NO, and don't tap any link or open any file in the message.
- Open your bank's official app or website by yourself and look at your recent transactions.
- Still worried? Call your bank on the number on the back of your card or on its official website.
- Block and report the number in WhatsApp or your messages app, and keep a screenshot as evidence.
If you already replied or shared details
- If you only replied, don't panic. Block the number, ignore any follow-up calls or messages, and check your bank app.
- If you shared card details, a code, or a password, call your bank immediately and ask them to block your card and check your account.
- If you installed an app or opened a file, disconnect from the internet, remove the app, and contact your bank. Get help to check your phone if anything looks wrong.
- If you lost money, report it to your bank and to your country's police or cybercrime reporting service as quickly as you can. Acting fast gives you the best chance of getting money back.
The rule is simple: a message can't prove money left your account, but your banking app can. Check there, never by replying.
Sources: Business Today: One WhatsApp NO could cost you your savings, Hyderabad Police warn · Digit: WhatsApp scam alert, replying NO to a message, how to stay safe
Want the full playbook?
This is one trick out of dozens. The Scam-Proof Playbook covers fake bank alerts, WhatsApp scams, bank impersonation calls, and more, in plain language, with real examples.