Applying for IPOs is practically a national sport in India now. But as soon as subscription closes, the real race starts: checking if you've got any shares. Scammers know this anticipation makes you vulnerable. They're targeting retail investors using the Hexagon Nutrition IPO allotment scam. If you've been looking for your allotment status on Google or waiting for a WhatsApp update, you need to pause immediately. Fake websites and sketchy chat groups are circulating online, claiming to offer direct links to the official registrar, KFin Technologies.
Honestly, this is one of the more dangerous tricks scammers play. It exploits your eagerness to secure shares. I think it's because we all want those shares badly. The Hexagon Nutrition IPO, which focuses on clinical nutrition products, got a lot of interest from retail investors during its bidding window. As soon as the bidding ended, fake WhatsApp groups started buzzing with links promising instant allotment results. But clicking these links doesn't show your shares. It drains your bank account instead.
What is the Hexagon Nutrition IPO allotment scam?
Look, the scam is actually quite simple. But they run it with surprising skill. Fraudsters build exact replicas of the KFintech allotment portal. They buy domains that look almost identical to the official site, maybe changing one letter or adding a suffix. In my experience, most people can't tell them apart at first glance. Once the fake site is ready, they blast the link to thousands of phone numbers. They scrape these numbers from public databases or stock market forums. The numbers here are a bit fuzzy, but cybercrime reports say WhatsApp is the main delivery channel.
If you click the link, you'll see a form asking for your PAN details or DP ID. It looks totally real. You enter your details. You expect to see your allotment status, but the page loads a fake success screen instead. It claims you've been allotted a full lot. Then, it demands a processing fee or asks you to verify bank details via UPI. This is a trap (obviously). That's where they get you.
No IPO registrar's ever going to ask you to pay money or authenticate a transaction to check your allotment. KFin Technologies doesn't send WhatsApp messages with direct payment links. The allotment process is automated. Your money's either debited by your bank if you get shares, or the UPI block is released if you don't. Any website demanding a payment is a fraud. I've seen similar schemes in other public offerings. But this latest wave is targeting Hexagon Nutrition applicants aggressively.
How scammers use a fake KFintech allotment link to steal your money
Here's the deal: scammers want more than your PAN number. They want control of your money. And they get it by bypassing your bank's security. Let's break down how this process works in detail. If you ask me, understanding this step-by-step is the only way to spot the warning signs before it's too late.
- You receive a message on WhatsApp or Telegram. The sender often uses a logo of KFintech or the BSE to look official. They claim that the allotment is finalized and offer a link.
- You click the link and land on a cloned page that looks exactly like the official KFintech portal. It has the same logo, colors, and layout. I tried this on a test device, and the visual similarity is terrifying.
- The website asks for your PAN card number and mobile number. Since PAN is linked to your Aadhaar card and bank accounts, scammers harvest these details instantly when you submit them. They'll use them later for other scams or identity theft.
- The site shows a fake success pop-up. It says you got the allotment but claims you must confirm your bank details to complete the transfer of shares.
- The site redirects you to a fake UPI gateway. It asks you to enter your UPI PIN to authorize a small verification charge of Rs 1. But in the background, it requests a mandate of Rs 15,000 or more.
- Once you enter your UPI PIN, the money is instantly debited from your account. The website disappears, and you're left with a debited bank account and zero shares.
It's a really fast process. It takes under two minutes from the moment you click the link to the moment your money disappears. Honestly, a lot of Indian investors have lost their hard-earned money to these frauds. You can read more about other online scams in our alerts section.
Warning signs of this IPO status check fraud
So, how do you separate the real deal from a fake? The signs are usually there. But you have to look closely. In my experience, most investors make the mistake of rushing because they're excited. That's exactly what the fraudsters want.
The first sign is the URL. The official KFintech website is kfintech.com, and their allotment portal is kosmic.kfintech.com. Scammers use domains like kfintech-allotment.in or hexagon-allotment-kfin.com. Always look at the address bar of your browser. If it doesn't end in kfintech.com, it's fake. Don't trust the page design. Anyone can copy a logo. But they can't hijack the official domain.
The second warning sign is the communication channel. Official registrars send automated emails and SMS notifications. They don't send personal WhatsApp messages from normal mobile numbers. And they don't use Telegram bots to distribute results. If someone starts a chat with you to share your allotment status, it's a scam. Block the number immediately.
The third and most important warning sign is any request for money. IPO allotments don't require processing fees or delivery charges. The money's handled through the ASBA process, where your bank blocks the funds. The registrar never handles your money directly. If a website asks for your UPI PIN, close the tab immediately. No genuine site will ever ask for your UPI PIN to show your allotment status.
Steps to check your allotment status safely
Fortunately, you don't need to risk your savings to check your status. There are only three official, safe ways to do this. I recommend bookmarking these links so you don't have to search for them on Google every time. Google search results can sometimes show sponsored ads that lead to fake sites (which is a mess, honestly).
- Check the BSE website. This is the safest method. You can visit the official BSE India website and navigate to the status of debt and equity applications page. You just need to select 'Equity', choose Hexagon Nutrition from the dropdown, and enter your application number and PAN. It's fast and 100% secure.
- Use the official KFintech portal. KFintech is the registrar for Hexagon Nutrition. You can go to their official website and find the IPO allotment status page. They usually have multiple servers listed. Pick one, select the IPO, and enter your details. Make sure the domain name in your browser is kfintech.com.
- Check your bank's ASBA section. You can log in to your net banking portal and go to the ASBA section where you applied for the IPO. The bank will show whether the blocked amount has been debited or released. If the money's debited, you've been allotted shares. If it's released, you didn't get them. It's that simple.
I know, checking via these methods might take an extra minute compared to clicking a direct WhatsApp link. But it's what protects your bank account. If you ask me, that extra minute is totally worth it. If you want to understand more about the stock market, you can check our IPO guides for beginners.
What to do if you fell for the UPI mandate scam
If you've already clicked a link and authorized a transaction, you have to act fast. Every minute counts. Scammers move money quickly through multiple accounts to make it hard to track. So your response must be immediate.
First, open your UPI app and block the transaction if it's pending, or block the UPI ID. Next, open your mobile banking app and freeze your bank account. Also, call your bank's customer care to block your net banking credentials. You want to make sure scammers can't access any more of your funds.
Second, change your UPI PIN immediately. Even if the scammers only managed to steal one transaction, they might've captured details that let them try again. Changing your PIN resets your security. You should also change passwords for net banking and email if you used them on the fake site. Honestly, it's better to be safe than sorry when your savings are on the line.
Critical Warning: Never share your OTP or UPI PIN with anyone claiming to be a bank official offering to refund your lost money. Scammers often call victims posing as recovery agents to steal even more money.
Lastly, keep screenshots of the chat and the fake website. You'll need these details when you file your complaint. The police need the transaction ID and the recipient UPI ID to freeze the scammers' account. For the latest updates on market rules, check our IPO news section.
Where to report this IPO fraud
Reporting the crime is essential if you want to get your money back. Also, it stops these scammers from targeting other retail investors. The government of India has set up dedicated channels to handle online financial fraud. You should use them as soon as you notice the theft.
The main portal for reporting is the National Cyber Crime Reporting Portal. You can access it at cybercrime.gov.in. You should file a detailed complaint online, uploading screenshots and transaction receipts. Make sure to specify that it was a UPI-based fraud related to the Hexagon Nutrition IPO allotment.
You should also call the national cybercrime helpline number 1930 immediately. This helpline is run by the Indian Cyber Crime Coordination Centre. If you call within the first few hours, police can coordinate with banks to freeze the stolen money in the scammers' accounts before they withdraw it. Honestly, many investors have recovered their money this way. But speed is everything.
Also, you can report the fake domains to the Indian Computer Emergency Response Team, known as CERT-In. They have a reporting form on their website, cert-in.org.in, where you can submit malicious links. They can coordinate with domain registrars to take down the fake websites. Doing this helps keep the Indian internet safe from these predators.