Electricity Disconnect SMS Scam 2026: Fake BSES, Adani, Tata Power Notices in India

Published: 31 May 2026 8 min read By ScanTotal Security Team
Last reviewed: 31 May 2026 by Kumari Rajapaksha, Founder, ScanTotal

The SMS arrives at 8:14am. “Dear consumer, your electricity will be disconnected today at 9:30pm due to unpaid bill of last month. Pay immediately to avoid disconnection: [link], BSES.” You glance at the clock. You check the calendar. You did just receive a bill last week, right? You don’t remember whether you paid it. The link is right there. You tap.

You just landed on a page that looks exactly like the BSES Rajdhani Power Limited customer portal, same logo, same colour scheme, same login fields. You enter your account number, your phone number, and your card details to “clear the pending dues”. The page confirms payment. Forty minutes later your card is charged ₹47,200, three times, in a city you’ve never been to.

This is the electricity disconnect scam, and in 2026 it is one of the highest-volume scam SMS categories in India across every metro and tier-1 city. The script is universal but the brand changes by your address, BSES in Delhi, Tata Power in Mumbai or Delhi, Adani Electricity in Mumbai, MSEDCL across Maharashtra, BESCOM in Bangalore, TNEB across Tamil Nadu. This guide walks through how the scam works, how real DISCOMs (electricity distribution companies) actually communicate, the three signals that catch every variant, and what to do if you’ve already paid.

What the scam looks like

Three illustrative examples assembled from the typical structure of disconnect-scam SMS circulating publicly and documented in CERT-In and DISCOM advisories:

Dear Consumer, Your electricity will be disconnected tonight 9:30 PM due to non-update of your previous month bill. Please immediately contact our officer http://bses-update[.]online/pay -BSES
Adani Electricity: Your power supply will be cut today 8:00 PM. Outstanding amount ₹3,470. Pay now to avoid disconnection. https://adani-electricity-pay[.]xyz Helpline: +91 9X XXXX XXXX
Tata Power: Bill of ₹ 2,840 is pending. Last date: today midnight. Avoid power cut, pay here: http://tatapower-bill[.]in Last reminder.

The brand changes. The amount changes. The deadline (today 8pm / 9:30pm / midnight) changes. The structure does not. Three components are always present: a recognised DISCOM brand, an artificial same-day deadline, and a link to a domain that has nothing to do with the DISCOM’s actual website.

How real DISCOMs actually communicate in India

The most important fact: no Indian DISCOM disconnects residential power with same-day SMS notice. The disconnection process is regulated by your state’s State Electricity Regulatory Commission (SERC) and follows a defined sequence:

  1. Bill issued, monthly, with a stated due date (typically 10-15 days after issue).
  2. Due date passes, you start to accumulate late-payment surcharge, usually 1-2% per month on the outstanding amount.
  3. First reminder, an SMS or post arriving 7-15 days after the due date. The SMS includes your CA (Consumer Account) number, the bill amount with breakdown, and a link to the DISCOM’s own portal.
  4. Second reminder + 15-day disconnection notice, physical notice taped to the meter or hand-delivered, stating the date on which disconnection will occur if the bill is not paid. By law, this notice period is typically 15 days for residential connections.
  5. Site visit and disconnection, a DISCOM lineman arrives, disconnects the supply at the meter, and leaves a disconnection certificate.

The entire timeline from a missed payment to actual disconnection is normally 30-45 days minimum, never the “90 minutes from this SMS” that scam messages claim.

Real DLT sender headers, the single fastest tell

Since 2021, all transactional SMS in India must be sent through DLT-registered sender headers. Each DISCOM has registered specific 6-character headers with TRAI:

  • BSES Rajdhani (BRPL): VK-BSESRD, JM-BSESRD, similar
  • BSES Yamuna (BYPL): VK-BSESYP, JM-BSESYP
  • Tata Power Delhi (TPDDL): VK-TPDDL, JM-TPDDL
  • Adani Electricity Mumbai: VK-AEMLAD, JM-AEMLAD
  • Tata Power Mumbai: VK-TATAPM
  • MSEDCL (Maharashtra): VK-MSEDCL
  • BESCOM (Bangalore): VK-BESCOM
  • TNEB / TANGEDCO (Tamil Nadu): VK-TNEBIN, JM-TNEBIN
  • TPNODL (Odisha): VK-TPNODL

The 2-letter prefix (VK, JM, JD, VM) is the telecom-aggregator path the message went through; the 6-character suffix is the DISCOM. Real DISCOM messages never come from a 10-digit mobile number. If your “BSES” SMS arrived from +91 9XXXX XXXXX, it is not from BSES, full stop.

The three signals that catch every variant

1Sender header

Real DISCOM SMS uses a DLT-registered 6-character header, never a 10-digit mobile number. The header format is fixed: 2 letters + dash + 6 letters representing the DISCOM. Match the header against the list above for your DISCOM. If it doesn’t match, ignore the message regardless of how official it looks.

2The deadline

Any SMS demanding payment in the next 6 hours, 90 minutes, “today by 8pm”, or with any similar same-day deadline is fraudulent. Real DISCOMs follow a 15-day disconnection notice process by law. If the deadline is artificial urgency, the message is artificial.

3The link destination

Long-press the link (don’t tap) to preview the destination. It must be the DISCOM’s exact official domain, bsesdelhi.com, tatapowerddl.com, adanielectricity.com, tatapower.com, mahadiscom.in, bescom.org, tnebltd.gov.in, tpnodl.com, etc. Variants that put the brand name inside another domain (bses-update.online, tatapower-bill.in, adani-electricity-pay.xyz) are impersonation. If you have any doubt, paste the link into ScanTotal’s URL scanner first.

What the scam does once you tap

Variant 1, the card grab. The fake DISCOM payment page takes your card details (number, expiry, CVV). Within hours these are used for repeated overseas transactions on subscription services (Netflix global, gaming subscriptions, Amazon foreign storefronts) until your bank’s fraud detection kicks in or you notice the charges.

Variant 2, the UPI grab. The page initiates a UPI collect request for the “outstanding amount”. You authorise it in your UPI app thinking you’re paying your bill, but the recipient is a fraud-controlled UPI ID, not the DISCOM’s official biller ID.

Variant 3, the call-back escalation. The SMS includes a customer-care number. When you call, a friendly “agent” talks you through installing AnyDesk or TeamViewer to “help process the payment”. The full screen-sharing scam follows from there, see our IRCTC scam guide for the detailed mechanics.

The amount in the SMS is calibrated to be plausible. Scammers send the SMS to thousands of numbers in a city, betting that some recipients genuinely have an outstanding bill in that range. The ₹2,840 figure isn’t a real amount, it’s a number chosen to fall within what a typical household bill could believably be.

If you’ve already paid

  1. Call your card-issuing bank’s anti-fraud line immediately (number on the back of your card or in your bank app). Block the card and dispute the transaction as “utility-impersonation fraud”. If the charge is still pending, the bank can often prevent settlement.
  2. Call 1930, the national cyber-financial-fraud helpline. If you paid by UPI or IMPS, give them the transaction reference. They can in some cases ask the receiving bank to freeze the account before the attacker withdraws.
  3. File at cybercrime.gov.in with the SMS, the fake payment page screenshot, and the transaction confirmation.
  4. Call your DISCOM’s real customer care (use a number from the printed bill or the DISCOM’s official website typed by you, NOT the number from the scam SMS) and confirm whether you actually have outstanding dues. Most DISCOMs are aware of the scam and will help you authenticate the channel.
  5. File an FIR at your local cyber-crime cell within 24 hours. Bring all evidence. The FIR unlocks formal bank-side recovery.

How to verify a real outstanding bill in 60 seconds

Independent of any SMS, here’s how to check whether you actually owe your DISCOM money:

  1. Open your DISCOM’s official app (BSES Sahaj, Tata Power TPDDL Mobile, Adani Electricity, MSEDCL Mahavitaran, etc.), installed from the Play Store or App Store from the verified publisher.
  2. Log in with your CA number (printed on every paper bill, in the top section).
  3. Check the “Current Bill” or “Outstanding” tab. If the app shows zero or a paid bill, you’re clear. If there’s a genuinely outstanding amount, the app shows you the exact figure, the bill date, the due date, and a link to the DISCOM’s own payment portal.
  4. Pay through the app or the DISCOM’s website typed by you. Never through any link in an SMS or WhatsApp, regardless of how official the source looks.
If your DISCOM has an app or web portal, that’s the canonical source. Treat every other channel as untrusted until verified.

The respectful reality about Indian DISCOMs

BSES Rajdhani, BSES Yamuna, Tata Power Delhi Distribution, Adani Electricity Mumbai, Tata Power Mumbai, MSEDCL, BESCOM, TNEB / TANGEDCO, TPNODL and the dozen other DISCOMs operating in India collectively serve over 250 million metering points. They are being impersonated, not failing their customers. Their billing systems have improved meaningfully over the past five years, apps work, payment portals work, customer-care channels are answered. The scam ecosystem exists because the brand is universally trusted and because everyone has electricity.

The defence is straightforward and the same regardless of which DISCOM serves your address. Check the sender header. Distrust same-day deadlines. Verify outstanding bills through the DISCOM’s own app, not through any SMS link. Three rules, every variant covered.

Got a "power will be disconnected today" SMS?

Paste the link into ScanTotal first, we’ll tell you whether it’s your real DISCOM or impersonation.

Open URL Scanner

More India scam guides

16 free guides covering the most-reported India scams of 2026.

Browse India scam guides

Sources & Further Reading

Related India scam guides

KYC Update Scam SMS in India
Same SMS-fraud pattern, banking impersonation flavour.
Customs Parcel Held Scam
India Post / DHL / FedEx impersonation, same playbook.
IRCTC Refund Scam 2026
The AnyDesk variant and the 8-step recovery.
PhonePe Collect Request Scam
The "wrong transfer" UPI trick and three signals.