The disconnection SMS that is not from your discom
A threat, a link and a deadline. That combination is the pattern, every time.
The usual script
An SMS says your electricity will be disconnected tonight unless you pay immediately, and includes a shortened link. The page that opens looks like a payment page and asks for a card or UPI PIN. The deadline exists to stop you checking.
How to check in thirty seconds
- Does the domain match the discom's official domain, character for character?
- Was the message from a normal ten-digit number rather than the provider's sender ID?
- Does the page ask for a UPI PIN? A PIN is never required to receive a payment or to pay a bill through a mandate.
- Can you find the same notice by logging into the official portal yourself?
If you have already paid
Call your bank immediately and report an unauthorised transaction. Change the UPI PIN. Report it on the national cybercrime portal. Speed matters more than anything else — the first hour is when a reversal is most likely.
What real providers do
Discoms send reminders through registered sender IDs, name the discom, and give a due date rather than a countdown. They do not ask for a PIN, a CVV or an OTP over a link. When in doubt, ignore the link and open the portal yourself.
Questions people ask
Are all short links in bill SMS fake?
No, but they remove your ability to check the domain. Treat a shortened link in a payment message as a reason to go to the provider directly instead.
Is a UPI PIN ever needed to receive money?
Never. A PIN authorises money leaving your account. Anyone asking you to enter it to receive a refund or a payment is taking money, not giving it.