WaZappySMS Sender & Scam Checker.
Got an SMS from “VM-HDFCBK-S” (Android), “HDFCBK-S” (iPhone) or a random number? Decode the sender ID, see what its category means and paste the message to check it for common fraud patterns.
Checked in your browser — the message is never uploaded.
Sender ID
Scam risk
What we found
Received a fraud SMS?
- Do not click links, call numbers or share OTP, PIN, CVV or Aadhaar details from the message.
- Report it on Sanchar Saathi → Chakshu (Department of Telecommunications).
- If money was lost, call the national cyber-crime helpline 1930 immediately and file a complaint at cybercrime.gov.in.
- Report unwanted promotional SMS by forwarding to 1909.
How Indian SMS sender IDs work
Businesses must register their sender ID (header) on the TRAI DLT platform. How it looks depends on your phone:
- Android: VM-HDFCBK-S — route code, header and category.
- iPhone: HDFCBK-S — iOS does not show the two-letter route code, so the sender starts directly with the header. This is normal and not a sign of fraud.
- XX (Android only) — a two-letter routing code added by the telecom network (operator and circle). It changes depending on the route and is not part of the brand name.
- HEADER — the registered sender name, usually 6 letters (e.g. HDFCBK). Government and some legacy headers can be numeric.
- C — the category letter added in 2025: P promotional, S service, T transactional, G government.
Frequently asked questions
Can this tool confirm that a header belongs to a real company?
No public register of DLT headers is available, so no website can confirm ownership. The tool explains the format and checks the message for known fraud patterns. Always verify through the company’s official app or website.
Is an SMS from a 10-digit mobile number genuine?
Banks, telecom operators, electricity boards and government departments send official SMS through registered headers, not personal mobile numbers. Treat KYC, OTP, bill or prize messages from a mobile number as fraud.
Can scammers use a registered header?
It is much harder, but fraudsters do sometimes misuse headers registered through careless senders. That is why the message content check matters: no genuine company asks you to share an OTP or install an app from an SMS link.
We are a business. Can you help us send compliant SMS or WhatsApp messages?
Yes. Infrared Techno is a DLT-registered principal entity and builds OTP, alert and WhatsApp Business API messaging for businesses. Contact us through WhatsApp or Start a Project.
