How to verify a call or SMS claiming to be from Zerodha

To verify whether a call, SMS, or person claiming to be from Zerodha is genuine, match the calling number against Zerodha’s official published contact list on support.zerodha.com; Zerodha’s genuine calls come only from that list of registered numbers, and a number outside it is not Zerodha. Layer on a behavioural test that does not depend on the number at all: Zerodha staff never ask for your OTP, password, PIN, or KYC documents, never ask you to transfer funds, and never give stock tips over the phone. A caller doing any of these is an impostor regardless of the number on your screen.

This matters because caller ID can be spoofed and because fraudsters arrive armed with partial data, your name, the fact that you trade on Kite , a recent transaction, to sound credible. None of that proves identity. This guide gives the two-step verification (number match plus never-asks test), the independent-callback rule that defeats spoofing, the official WhatsApp and email channels, and the reporting route when a call fails the test.

Conflict-of-interest disclosure. This guide is published by the WebNotes Editorial Team for informational purposes and is written independently. WebNotes operates a Zerodha account-opening referral programme, disclosed on the pages that carry the referral link; this guide does not carry it and earns no referral commission from the procedure described here.

Step-by-step procedure

The numbered box at the top of this guide gives the full sequence. The detail below expands the verification logic and the reporting route.

1. Do not act on the call yet

Pause. The fraud depends on momentum: a credible voice, a manufactured urgency, a request to act before you think. Treat every inbound call, SMS, or message that asks for information, an action, or money as unverified until you have confirmed it. Share nothing, click nothing, transfer nothing while the call is live. Nothing genuine is lost by ending the call and verifying first, because real Zerodha matters can always be resumed through official channels.

2. Note the calling number

Write down the exact number. It is the input to the verification step, but it is not proof on its own, because caller ID can be spoofed to display a number that is not the real source. A spoofed number that happens to match a Zerodha number still cannot survive the never-asks test in step 4, which is why both checks run together.

3. Match it against Zerodha’s official contact list

Open Zerodha’s official contact list on support.zerodha.com and look for the calling number. Zerodha’s genuine outbound calls come only from this published list of registered numbers, the support and compliance lines Zerodha actually dials from. If the number is not on the list, it is not Zerodha; stop there. Do not be reassured by the caller knowing your details; that knowledge is bought or phished, not a credential.

4. Apply the never-asks test

Run the behavioural test regardless of what step 3 returned, because a spoofed number can mimic a genuine one. End the call immediately if the caller asks for your OTP, password, PIN, or KYC documents; asks you to install any remote-access or screen-sharing app; offers a stock tip or buy/sell call; or asks you to transfer funds to any bank account or UPI ID “to fix”, “to verify”, or “to unblock” anything. Zerodha staff never do any of these. Genuine calls are confined to account-opening issues, margin calls, and compliance requirements, and none of those needs your OTP or your money sent anywhere.

5. Verify independently through official channels

If the matter sounds genuine, a real margin shortfall, a real document request, do not continue on the inbound call. Hang up and reach Zerodha yourself through the official support portal or a ticket , using contact details you find on zerodha.com, not a number the caller dictated and not a callback to the number that rang you. This independent-channel rule is the single most important defence: it severs the attacker’s control of the conversation. A genuine request will still be there when you reach real support; a fraud will not survive it.

6. Report a suspicious call

If the number failed step 3 or the call failed step 4, ignore the call, then raise a Zerodha support ticket noting the suspicious number so Zerodha can investigate and warn others, and report the number to TRAI through the 1909 channel or the DND app as unsolicited or fraudulent communication. If you already shared an OTP, password, or any money, treat it as an active fraud: call the national cybercrime helpline 1930 immediately and report at cybercrime.gov.in, because the first hour is when a frozen transaction can still be reversed.

Official channels, so you know the genuine baseline

Verification is easier when you know what genuine Zerodha contact looks like.

Calls come only from the numbers on Zerodha’s official contact list on support.zerodha.com. OTPs and official WhatsApp messages come from 951 351 2020, and Zerodha does not run two-way support or take instructions over WhatsApp chat, so a “WhatsApp support agent” is not genuine. Email comes from support@zerodha.com ; mail from any other domain claiming to be Zerodha is suspect, and how to verify a Zerodha email covers the header checks. The website is zerodha.com, with the apps at kite.zerodha.com and console.zerodha.com , and the verified social handles are listed in Zerodha official social media handles . Anything outside this set is not an official Zerodha channel.

Why “they knew my details” is not verification

The common reason people fall for a vishing call is that the caller already knew something specific, and the mind reads that knowledge as proof of identity. It is not. Partial client data circulates from breaches, phished forms, and clone apps, and a fraudster opens with it precisely to lower your guard. The verification model in this guide is built to ignore what the caller knows and test only what the caller does: which number they called from (step 3) and what they ask you to do (step 4). A genuine Zerodha employee passes both tests; a fraudster who has bought your name and trading platform passes neither, because they cannot place the call from a registered Zerodha line and still cannot avoid asking for the OTP or the transfer that the fraud requires.

How this fits the wider fraud picture

A verified-call check is one defence in a set. SEBI warned in February 2024 of unscrupulous entities falsely claiming registration and promising assured returns, and the phone is one of their channels alongside SMS tips and fake social handles. The companion controls are: stopping stock-tip SMS sent in a broker’s name; knowing that Zerodha never solicits fund transfers to personal or third-party accounts; and hardening the account itself with TOTP two-factor authentication and, for a buy-and-hold portfolio, a voluntary demat freeze so even a leaked credential cannot move the holdings. Verification of the contact and hardening of the account work together: one keeps the attacker out of the conversation, the other keeps them out of the account.

See also

• Zerodha
• Zerodha official social media handles
• How to verify a Zerodha email
• How to stop stock-tip SMS in Zerodha’s name
• Does Zerodha solicit fund transfers?
• Zerodha cyber security
• Is Zerodha safe?
• Zerodha hack and security incidents
• How to create a Zerodha ticket
• Zerodha customer care number
• How to set up TOTP on Zerodha
• How to reset 2FA on Zerodha
• How to freeze and unfreeze a Zerodha demat account
• Kite by Zerodha
• Zerodha Console
• How to file an investor grievance with Zerodha
• Zerodha grievance redressal
• Zerodha SCORES
• Zerodha investor charter
• Investor protection
• Finfluencer SEBI ban and Zerodha referrals
• SEBI
• How to add funds to Zerodha via UPI
• Zerodha client password policy
• CDSL

External references

• Zerodha support: How do I verify if a call is officially from Zerodha?
• Z-Connect: Customer verification at Zerodha
• SEBI investor education and caution against unauthorised entities
• National cybercrime reporting portal
• TRAI: Unsolicited Commercial Communications

References

1. Zerodha support, How do I verify if a call is officially from Zerodha? (match number against official contact list; never asks for personal information or gives tips by phone; ignore, ticket, and report to TRAI; as of 20 June 2026).
2. Z-Connect by Zerodha, Customer verification at Zerodha (genuine call scope, never-asks behaviours, official channels; as of 20 June 2026).
3. SEBI press release, caution against unscrupulous entities falsely claiming registration and promising assured returns, February 2024.
4. Indian Cyber Crime Coordination Centre, national cybercrime helpline 1930 and reporting portal cybercrime.gov.in.
5. TRAI (Telecom Commercial Communications Customer Preference Regulations), 2018, reporting of unsolicited and fraudulent communications via 1909 and the DND app.

WebNotes Editorial Team prepares factual how-to guides based on publicly available regulatory documents and broker disclosures. WebNotes is not affiliated with Zerodha Broking Limited. Contact channels and lists are subject to change; verify the current official contact list at support.zerodha.com before acting.