The "Network Glitch" Scam: Why *21# is Dangerous

They call pretending to be Jio or Airtel support and ask you to dial *401#. You just handed over your WhatsApp account.

The Call: "Hello, I am calling from Airtel Support. We noticed a network issue on your SIM. To fix it, please dial *401*98XXXXXX#."

You dial it. The call disconnects. Your network seems fine. But a few minutes later, your WhatsApp is logged out.

What Just Happened?

Codes containing patterns such as *401* or *21* can configure call forwarding on some Indian mobile networks. The exact code and behaviour vary by operator.

By dialing that code with the scammer's number, you forwarded all your incoming calls to them.

Now, they log into your WhatsApp. WhatsApp sends a voice call for OTP verification. The call goes to the scammer. They enter the OTP and own your account.

How RakshaLink Can Help

RakshaLink does not query your telecom account or continuously poll call-forwarding status. It can flag scam-shaped instructions containing forwarding codes and supported notification previews that confirm call forwarding was activated.

If a suspicious call is in progress, start Suspicious Call SOS. For 15 minutes, RakshaLink applies heightened checks to risky activity visible through enabled protection, including forwarding confirmations and OTP notifications. It never listens to or records the call.

If you suspect forwarding is active, use your operator's official app, support number or documented status code to check it. Do not dial a deactivation code supplied by an unknown caller.