EPFO warns members of rising phishing scams targeting provident fund data

The Employees’ Provident Fund Organisation issues fresh warning as fraudsters craft convincing fake websites and messages to steal sensitive member data like UAN, Aadhaar, and PAN, urging caution and verification to prevent scams.

The Employees’ Provident Fund Organisation has warned members to be on guard against fake links and websites designed to look like official EPFO portals, saying fraudsters can use them to steal sensitive data including UAN, Aadhaar, PAN, bank details and one-time passwords. In a social media post on August 9, the organisation urged users to check every link before clicking, as even a convincing-looking page can be built to trick people into revealing private information.

According to EPFO, the main danger comes from messages sent through SMS, email and social media that encourage users to open links or enter personal credentials. The organisation said members should inspect the web address carefully for odd spellings or unusual domain names and should avoid logging in through anything other than the official EPFO website. It also advised people not to share their UAN, PPO, password, Aadhaar, PAN, bank details or OTP on any other website.

The warning fits a longer pattern of frauds targeting provident fund users. Financial Express reported that EPFO has repeatedly told members not to share Aadhaar, PAN, UAN or bank details over the phone, and The Economic Times has likewise said the organisation does not ask subscribers to deposit money into any bank account. Separate guidance published by other outlets has said EPFO services are free and should be accessed only through the official website or the UMANG app, not through Google ads or unfamiliar links.

EPFO also said it never asks for OTPs, passwords or personal data by phone call, WhatsApp, social media or email. Members who receive suspicious messages or encounter possible phishing attempts have been advised to report them through official help channels or cybercrime reporting systems. With online PF services now widely used, the organisation said basic steps such as typing the website address directly, verifying the source and keeping KYC details up to date can reduce the risk of fraud.

Disclaimer: This article is intended to inform and educate, not to recommend or endorse any financial product, investment or strategy. Please consider your own financial circumstances and seek professional advice where appropriate before making financial decisions.