High riskBank & Payment Scams

Wallet Provisioning Scam

In this scam, a fraudster who has your card details triggers a request to add your card to their mobile wallet, then calls or messages posing as your bank to get you to share the one-time code that authorises it.

Quick verdict

Risk level
High risk
Scam type
Card provisioning fraud
Main red flag
Someone asks for the OTP needed to 'verify' your card, which actually adds it to their wallet.
What to do first
Never share an OTP; a code to 'verify your card' can authorise wallet provisioning.

What this scam usually looks like

In this scam, a fraudster who has your card details triggers a request to add your card to their mobile wallet, then calls or messages posing as your bank to get you to share the one-time code that authorises it.

Example message pattern

Example pattern — not a real report
Example pattern: 'This is your bank. To verify your card, read us the code we just sent.' The code adds your card to the scammer's phone wallet.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A request to read out an OTP to 'verify your card'
  • An unexpected wallet or card-verification code
  • A caller posing as your bank
  • Pressure to share the code quickly
  • Spending alerts from a wallet you did not set up

What to do

  • Never share OTPs or verification codes with anyone
  • Hang up and call your bank using the number on your card
  • Report any wallet added without your knowledge
  • Set up transaction alerts to catch misuse

If you already clicked or replied

  • If you shared a code, contact your bank immediately to block the card
  • Ask the bank to remove the card from any unknown wallet
  • Change your online banking password from a trusted device
  • Review and report unauthorised transactions

What not to do

  • Do not share OTPs or card codes, even with 'the bank'
  • Do not act on pressure to verify quickly
  • Do not call back on a number the caller gives

Similar scams

Frequently asked questions

How does wallet provisioning fraud work?
A fraudster with your card details starts adding your card to their wallet, then gets you to share the OTP that authorises it, letting them pay with your card.
Why should I never share an OTP?
OTPs authorise actions like adding your card to a wallet or approving payments. Sharing one can hand control of your card to a scammer.
I shared a code. What now?
Contact your bank immediately to block the card and remove it from any unknown wallet, change your banking password, and review transactions.
How do I spot this?
Be wary of any request to read out a code to 'verify your card', and watch for wallet or spending alerts you did not set up.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.