A sophisticated phishing campaign is targeting PNB MetLife insurance customers, using fake payment gateways to steal personal information and redirect victims to fraudulent UPI transactions. The scam exploits the trusted reputation of PNB MetLife by creating convincing mobile-optimized payment portals that mimic legitimate premium payment services. The malicious pages accept policy numbers and customer details without validation, forwarding captured data to attackers through automated channels.<\/p>\n
The phishing operation spreads primarily through SMS messages, but email and social media platforms may also be used. When victims land on the fake payment gateways, they encounter professionally designed interfaces requesting basic information such as name, policy number, and mobile number. The pages deliberately avoid backend verification, accepting arbitrary values to maintain the illusion of legitimacy.<\/p>\n
The campaign uses real payment applications like PhonePe, Paytm, and Google Pay to complete fraudulent transactions, reducing victim suspicion and increasing the likelihood of successful financial theft. Behind the polished interface lies a sophisticated data exfiltration mechanism powered by Telegram Bot API, which silently transmits captured details to attacker-controlled Telegram channels.<\/p>\n
The stolen data includes names, policy numbers, and mobile numbers, all transmitted instantly as victims complete each form field. The phishing flow then introduces urgency through countdown timers and QR code displays, pressuring victims to complete UPI payments quickly. The JavaScript generates UPI payment URIs dynamically, rendering them as scannable QR codes that direct funds to attacker-controlled accounts.<\/p>\n
Advanced variants of this phishing campaign escalate beyond simple payment fraud into comprehensive banking credential harvesting. These sophisticated templates offer multiple options, creating the illusion of legitimate policy servicing, and request complete bank account details and debit card information. All submitted financial credentials are exfiltrated through the same Telegram infrastructure, transforming the operation from payment fraud into full-scale identity and financial data theft.<\/p>\n
Security researcher Anurag Gawande identified multiple variants of this phishing scheme and revealed that attackers deployed these pages across free hosting platforms, enabling rapid deployment and rotation of malicious sites. The campaign demonstrates a clear evolution in financial fraud tactics, moving beyond simple credential theft to multi-stage operations that combine data exfiltration with direct payment manipulation. The use of real payment applications and Telegram infrastructure makes this threat particularly dangerous, and users are advised to be cautious when receiving suspicious messages or encountering unfamiliar payment gateways.<\/p>\n","protected":false},"excerpt":{"rendered":"
A sophisticated phishing campaign is targeting PNB MetLife insurance customers, using fake payment gateways to steal personal information and redirect victims to fraudulent UPI transactions. The scam exploits the trusted reputation of PNB MetLife by creating convincing mobile-optimized payment portals that mimic legitimate premium payment services. The malicious pages accept policy numbers and customer details […]<\/p>\n","protected":false},"author":1,"featured_media":221241,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[22,29],"tags":[],"class_list":["post-222720","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-insurance","category-pnb-metlife-insurance"],"jetpack_featured_media_url":"https:\/\/smallnews.in\/insurance\/wp-content\/uploads\/sites\/5\/2025\/04\/PNB_MetLife_India_Logo.png","jetpack_shortlink":"https:\/\/wp.me\/p9ibIB-VWg","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":222724,"url":"https:\/\/smallnews.in\/insurance\/2026\/01\/24\/a-phishing-scam-is-utilizing-a-fake-pnb-metlife-payment-gateway\/","url_meta":{"origin":222720,"position":0},"title":"A phishing scam is utilizing a fake PNB MetLife payment gateway.","author":"Team Small News","date":"January 24, 2026","format":false,"excerpt":"A sophisticated phishing scam has been uncovered, targeting PNB MetLife policyholders in India. The scammers have created fake mobile-optimized websites that mimic the official PNB MetLife premium payment interface, with the goal of stealing sensitive user information and facilitating fraudulent transactions. The fake websites use Telegram bots to exfiltrate user\u2026","rel":"","context":"In "Insurance"","block_context":{"text":"Insurance","link":"https:\/\/smallnews.in\/insurance\/category\/insurance\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":222772,"url":"https:\/\/smallnews.in\/insurance\/2026\/02\/06\/pnb-metlife-has-introduced-the-pension-premier-multicap-fund-as-part-of-its-retirement-savings-plan-the-funds-net-asset-value-nav-and-subscription-window-details-are-now-available-for-investors-to\/","url_meta":{"origin":222720,"position":1},"title":"PNB MetLife has introduced the Pension Premier Multicap Fund as part of its retirement savings plan. The fund’s net asset value (NAV) and subscription window details are now available for investors to review.","author":"Team Small News","date":"February 6, 2026","format":false,"excerpt":"PNB MetLife India has launched a new pension fund, the PNB MetLife Pension Premier Multicap Fund, as part of its Unit-Linked Insurance Plans (ULIPs) offerings. The fund is available for subscription from April 1 to April 15, 2025, and is designed to help customers build secure retirement savings. The fund\u2026","rel":"","context":"In "Insurance"","block_context":{"text":"Insurance","link":"https:\/\/smallnews.in\/insurance\/category\/insurance\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":222775,"url":"https:\/\/smallnews.in\/insurance\/2026\/02\/09\/pnb-metlife-survey-reveals-three-unique-personas-of-indian-fathers-based-on-their-financial-saving-habits\/","url_meta":{"origin":222720,"position":2},"title":"PNB MetLife Survey Reveals Three Unique Personas of Indian Fathers Based on Their Financial Saving Habits","author":"Team Small News","date":"February 9, 2026","format":false,"excerpt":"A recent survey conducted by PNB MetLife, a leading life insurer in India, has revealed that 62% of Indian fathers identify themselves as \"Hero Dads\", who prioritize their family's financial security. The survey, which engaged over 6,000 fathers across the country, classified them into three distinct personas: \"Hero Dads\", \"Thoughtful\u2026","rel":"","context":"In "Insurance"","block_context":{"text":"Insurance","link":"https:\/\/smallnews.in\/insurance\/category\/insurance\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":222756,"url":"https:\/\/smallnews.in\/insurance\/2026\/01\/29\/allianz-pnb-life-enhances-its-cybersecurity-measures-by-adopting-a-risk-based-approach\/","url_meta":{"origin":222720,"position":3},"title":"Allianz PNB Life enhances its cybersecurity measures by adopting a risk-based approach.","author":"Team Small News","date":"January 29, 2026","format":false,"excerpt":"Allianz PNB Life, a leading insurance company, is prioritizing cybersecurity and fraud prevention by adopting a risk-based approach. The company recognizes that not all assets are created equal and that a targeted defense is necessary to protect high-risk assets from cyber threats. According to Rosanna Canlas, Head of Information Security,\u2026","rel":"","context":"In "Insurance"","block_context":{"text":"Insurance","link":"https:\/\/smallnews.in\/insurance\/category\/insurance\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":222746,"url":"https:\/\/smallnews.in\/insurance\/2026\/01\/27\/fraudulent-health-care-scheme-halted-in-montana\/","url_meta":{"origin":222720,"position":4},"title":"Fraudulent health care scheme halted in Montana","author":"Team Small News","date":"January 27, 2026","format":false,"excerpt":"The Commissioner of Securities and Insurance Office in Montana has helped to stop a multimillion-dollar billing scheme that targeted Native Americans on reservations. The scheme, which involved fraudulent claims through the Affordable Care Act, resulted in over $23.3 million in unjustified claims, with an additional $27 million pending. Commissioner James\u2026","rel":"","context":"In "Care"","block_context":{"text":"Care","link":"https:\/\/smallnews.in\/insurance\/category\/care\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":222717,"url":"https:\/\/smallnews.in\/insurance\/2026\/01\/23\/tata-aia-plan-allows-customers-to-stop-paying-premiums-after-6-years\/","url_meta":{"origin":222720,"position":5},"title":"Tata AIA plan allows customers to stop paying premiums after 6 years.","author":"Team Small News","date":"January 23, 2026","format":false,"excerpt":"Tata AIA Life Insurance has introduced a new plan that allows customers to stop paying premiums after six years, while still maintaining the life insurance coverage. This innovative feature is designed to provide policyholders with greater flexibility and financial freedom. The new plan, which is a type of unit-linked insurance\u2026","rel":"","context":"In "Insurance"","block_context":{"text":"Insurance","link":"https:\/\/smallnews.in\/insurance\/category\/insurance\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/smallnews.in\/insurance\/wp-content\/uploads\/sites\/5\/2025\/04\/tata-aia.jpeg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/posts\/222720","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/comments?post=222720"}],"version-history":[{"count":0,"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/posts\/222720\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/media\/221241"}],"wp:attachment":[{"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/media?parent=222720"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/categories?post=222720"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/smallnews.in\/insurance\/wp-json\/wp\/v2\/tags?post=222720"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}