High riskBank & Payment Scams

Card Rewards Redemption Scam

In this scam, a call or message claims your credit card reward points are expiring and must be redeemed now, then asks for your card number, OTP, or login to 'process' the redemption and drains your account.

Quick verdict

Risk level
High risk
Scam type
Bank impersonation (rewards phishing)
Main red flag
An urgent call or text to redeem expiring card reward points by sharing card details or an OTP.
What to do first
Hang up and check rewards only in your bank's official app; never share an OTP.

What this scam usually looks like

In this scam, a call or message claims your credit card reward points are expiring and must be redeemed now, then asks for your card number, OTP, or login to 'process' the redemption and drains your account.

Example message pattern

Example pattern — not a real report
Example pattern: 'Your card reward points worth $200 expire today. Share your card number and OTP to redeem them now.'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • An urgent rewards-expiry call or message
  • A request for your card number, OTP, or login
  • Pressure to redeem immediately
  • A caller or link not from your real bank
  • An offer to 'process' redemption for you

What to do

  • Check and redeem rewards in your bank's official app or website
  • Never share your card number, OTP, or login
  • Call your bank using the number on your card
  • Report and delete the message

If you already clicked or replied

  • If you shared details or an OTP, contact your bank immediately
  • Change your online banking password from a trusted device
  • Review transactions and report anything unfamiliar
  • Block the card if needed

What not to do

  • Do not share your card number or OTP to redeem points
  • Do not act on rewards-expiry pressure
  • Do not call back on a number the caller gives

Similar scams

Medium risk Text Message

Loyalty Points Scam

This scam claims your loyalty points, reward balance, or air miles are about to expire and pushes you to redeem them through a link, which leads to a phishing page built to steal your account login or card details.
High risk Bank & Payment

Bank Impersonation Phone Scam

In this scam a caller pretends to be your bank's fraud team, claims your account is under attack, and pressures you to move money to a 'safe account', read out one-time codes, or grant remote access so they can steal your funds.
High risk Bank & Payment

Fake Bank Alert Text Scam

This scam sends a text claiming suspicious activity on your account, then steers you to a fake login page or a 'fraud agent' who pressures you to move money.

Frequently asked questions

Does my bank ask for an OTP to redeem points?
No. Reward points are redeemed in your bank's official app or website, and you should never share an OTP or card number to 'process' a redemption.
My points might really expire. What do I do?
Check the genuine expiry and redeem in your bank's official app, not via an unsolicited call or link.
I shared my OTP. What now?
Contact your bank immediately, change your banking password from a trusted device, review transactions, and block the card if needed.
Why use rewards as the lure?
Reward points feel like 'free money' you might lose, so urgency makes people share details quickly, which is the scammer's goal.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.