Wallet Provisioning Scam
In this scam, a fraudster who has your card details triggers a request to add your card to their mobile wallet, then calls or messages posing as your bank to get you to share the one-time code that authorises it.
Quick verdict
What this scam usually looks like
In this scam, a fraudster who has your card details triggers a request to add your card to their mobile wallet, then calls or messages posing as your bank to get you to share the one-time code that authorises it.
Example message pattern
This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.
Red flags to watch for
- A request to read out an OTP to 'verify your card'
- An unexpected wallet or card-verification code
- A caller posing as your bank
- Pressure to share the code quickly
- Spending alerts from a wallet you did not set up
What to do
- Never share OTPs or verification codes with anyone
- Hang up and call your bank using the number on your card
- Report any wallet added without your knowledge
- Set up transaction alerts to catch misuse
If you already clicked or replied
- If you shared a code, contact your bank immediately to block the card
- Ask the bank to remove the card from any unknown wallet
- Change your online banking password from a trusted device
- Review and report unauthorised transactions
What not to do
- Do not share OTPs or card codes, even with 'the bank'
- Do not act on pressure to verify quickly
- Do not call back on a number the caller gives
Similar scams
Cardless ATM Scam
This scam exploits cardless ATM features, where a fraudster who has phished your login or one-time code generates a withdrawal code in your banking app and takes cash from an ATM without your physical card.
PayPal Payment Pending Scam
This scam shows a fake 'payment on hold' message claiming funds will be released once you ship an item or confirm details, but no real payment exists.
Fake Bank Alert Text Scam
This scam sends a text claiming suspicious activity on your account, then steers you to a fake login page or a 'fraud agent' who pressures you to move money.
Frequently asked questions
How does wallet provisioning fraud work?
Why should I never share an OTP?
I shared a code. What now?
How do I spot this?
Last reviewed: June 2026