Hidden Mobile Setting Can Empty Your Bank Account, Experts Warn

Islamabad: Cybersecurity experts have warned that a hidden mobile phone setting could allow hackers to gain access to users’ calls and OTPs, potentially leading to bank account theft.

According to reports, a new fraud scheme—known as the “call forwarding scam”—is being used to divert calls and messages without users’ knowledge. In this method, scammers impersonate bank representatives, customer care agents, or delivery service staff to trick victims into dialing specific codes.

Fraudsters reportedly convince users that there is an issue with their bank account or mobile network and ask them to dial codes such as *21# or similar USSD commands to “fix” the problem. Once activated, these codes can silently enable call forwarding on the victim’s phone.

Experts say that once call forwarding is enabled, all incoming calls, messages, and even OTP verification codes can be redirected to a hacker’s number, giving them access to banking and social media accounts without needing passwords or direct OTP sharing.

Because no app installation is required, victims often remain unaware until financial loss occurs.

How to check call forwarding

Users are advised to dial *#62# or *#21# to check whether their calls are being diverted. If an unknown number appears, it may indicate that call forwarding is active.

How to disable it

To disable all call forwarding settings, users can dial ##002#, which deactivates all forwarding services.

Safety tips

Experts recommend:

Never dial unknown codes given by callers claiming to be from banks or telecom companies
Do not share OTPs or PINs with anyone
Immediately disconnect suspicious calls
Report fraud incidents to cybercrime authorities

Authorities stress that awareness and caution are key to preventing financial fraud.