Telangana’s cybercrime units have issued a fresh warning about a new phishing campaign dubbed “PAN 2.0”, in which scammers lure citizens with fraudulent offers to “upgrade” their Permanent Account Numbers (PAN).
The fake messages — often adorned with official-looking government logos — direct users to counterfeit websites that mimic legitimate portals, where personal and banking information is quietly harvested.
Officials from Cyberabad and Rachakonda police said the fraudulent links are designed to steal sensitive data, including PAN numbers, dates of birth, contact details, and banking credentials.
“The links are fake and aimed at identity theft and financial fraud,” said Cyberabad cybercrime DCP B. Sai Sri, adding that similar tactics were previously observed in RTI and traffic challan scams. “Victims believe the messages are genuine and share their details on fake sites that mirror official pages.”
The Anatomy of ‘PAN 2.0’
The scam follows a simple but effective social-engineering script.
Emails or WhatsApp messages promise users a “new version” of their PAN card under a supposed government update. Clicking the link opens a lookalike portal — complete with seals, banners, and even dummy verification boxes — that prompts users to re-enter their details.
Once entered, the data is captured and used for SIM swaps, fraudulent KYC verifications, or unauthorized transactions.
Banks across Telangana have begun issuing social media alerts, warning customers not to click on suspicious links or share confidential information. Financial institutions are also flagging phishing domains that imitate NSDL, UTIITSL, and Income Tax Department pages.
Police Urge Vigilance Amid Rising Online Deception
Rachakonda DCP S.V. Naga Lakshmi said that while no “PAN 2.0” fraud cases have been formally reported yet, the deception pattern is consistent with previous online traps.
“This particular scam hasn’t surfaced in our jurisdiction so far,” she noted, “but we frequently handle cases of job, matrimonial, and investment frauds that use similar psychological triggers.”
The officer added that “digital arrest” scams — which saw a sharp rise earlier this year — have declined following public-awareness drives and ringtone alerts that warn citizens against such schemes.
The Cyberabad police urged residents to report phishing attempts on the cybercrime.gov.in portal or through the national helpline 1930, emphasizing that timely reporting increases the likelihood of fund recovery.
A Tech Hub Under Threat
With Hyderabad’s vast tech-savvy population, cybercrimes here often involve high-value frauds ranging from stock scams to crypto-linked schemes.
Investigators said that while the PAN 2.0 campaign appears to be in its early stages, it represents a growing trend: scammers adopting official branding to exploit India’s expanding digital infrastructure.
Officials warned that mass data phishing could pave the way for more serious crimes, including loan fraud, impersonation, and synthetic identity creation.
As Telangana’s cyber units strengthen awareness campaigns, they reiterated a simple rule — no government agency sends links via SMS or email for PAN-related services. Citizens are advised to access only official portals like incometax.gov.in or nsdlpanonline.in.
