New cyber scam trick asks you to dial a code, beware

A new scam is spreading quietly — one that doesn’t require clicking on suspicious links or downloading malicious apps. All it takes is a single code you unknowingly dial.

It begins with a scammer posing as a courier company representative from firms such as Blue Dart or DTDC. Claiming that a delivery person is unable to reach you, they urge you to “coordinate with the delivery person on this number.”

The code they send appears harmless — something like *21*[Phone number]#. Yet, that short sequence stealthily diverts all incoming calls and SMS messages to a different number.

Once activated, the scammers intercept one-time passwords (OTPs) for your banking and WhatsApp accounts. Within minutes, they can gain complete access — without you ever sharing a password or clicking a link.

In a recent case, a scammer posing as a representative of an express logistics company called a user, asking her to talk to the delivery person. Speaking to The Tribune, the victim said the caller instructed her to dial a code — *21*7667932517# — to establish the connection.

I pressed the call button but hung up almost immediately, sensing something was wrong. Within minutes, my WhatsApp began showing signs of compromise. Someone tried to transfer my account to another number, and soon after, my calls and SMS messages were being diverted. I rushed to my bank and froze my account. It took me hours to regain control, she said.

How the feature is misused?

Call forwarding is a legitimate telecom feature that lets users divert calls and SMSes from one number to another, usually used when a phone is switched off or out of coverage.

However, scammers have found a way to exploit it. When you dial a code like *21*[Phone number]#, your carrier automatically forwards all incoming calls and texts to the number entered. That includes the OTPs banks and messaging apps send for verification.

This gives scammers complete control, allowing them to reset your WhatsApp or even transfer money.