Security & Fraud Awareness

• Your OTP, PIN, CVV, card number, password or UPI PIN, on any channel, ever.
• A fee, deposit or "processing charge" to apply, approve or release a card or loan.
• Your Aadhaar, PAN or bank statement on our site. Lenders may ask for these on their own secure, verified platforms.
• Installation of any app, screen-sharing tool or APK file.

If anyone claiming to be from CardSparrow asks for these, it is a scam. Report it to grievance@cardsparrow.com.

• The address bar shows https://cardsparrow.com or https://www.cardsparrow.com with a padlock.
• Our e-mails come only from an @cardsparrow.com address.
• Our "Apply now" buttons take you either to a form on our own domain or to the Lender's official website, whose address you can see in your browser.
• We never contact you first about a product you did not enquire about.

• Cards: no card may be issued without your consent; the issuer must give you the MITC; you can close a card within seven working days of asking; and your liability for unauthorised transactions is zero if you report within three working days of the bank's alert.
• Digital loans: under RBI's Digital Lending Directions a loan must be disbursed directly to your bank account by the regulated lender, you must receive a Key Fact Statement with the APR and all charges, and you have a cooling-off period to exit the loan by paying principal and proportionate APR without penalty. Apps that ask for contacts, photos or SMS access, or that are not linked to a named RBI-regulated lender, are red flags; check RBI's list of unauthorised apps.
• Recovery: collection agents may not harass, threaten or call outside 8 am to 7 pm.

• "Your card is blocked / KYC expired, click this link" messages.
• Calls offering a limit increase or reward redemption that need your OTP.
• "Pre-approved loan, pay ₹999 to release the amount".
• Fake customer-care numbers found through search ads or social media.
• Screen-sharing requests "to help you apply".

1. Call your bank immediately to block the card or account; use the number printed on your card or on the bank's official site.
2. Report online fraud to the National Cyber Crime helpline 1930 or cybercrime.gov.in within the "golden hour".
3. Report the incident to the Lender's grievance officer and, if unresolved in 30 days, to the RBI Integrated Ombudsman (cms.rbi.org.in, 14448).
4. Tell us at grievance@cardsparrow.com if the scam used CardSparrow's name so we can warn others.
5. Check your credit report (free once a year from each bureau) for accounts you do not recognise.