I received a phishing email pretending to be from my bank in Hyderabad asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email that pretends to be from your bank and asks for your OTP and credentials is indeed a crime under Indian law.

Phishing is a form of cybercrime where an individual is deceived into providing sensitive information such as passwords, credit card numbers, and other personal data, often through fraudulent emails or websites. In India, such acts are primarily governed by the Information Technology Act, 2000 (IT Act) and the Indian Penal Code (IPC).

• Information Technology Act, 2000:
  • Section 66: This section addresses computer-related offenses, including hacking and data theft. Phishing could be classified under this section as it involves unauthorized access to personal information.
  • Section 66C: This section penalizes identity theft, which is applicable if the phishing email impersonates your bank to steal your credentials.
  • Section 66D: This section deals with cheating by personation using computer resources and is particularly relevant in cases of phishing.
• Indian Penal Code:
  • Section 419: This section covers cheating by personation and can be invoked against individuals who send phishing emails pretending to be someone else.
  • Section 420: This section pertains to cheating and dishonestly inducing delivery of property, which can be applicable if money is lost due to phishing.
• Cyber Crime Reporting:
  • If you receive a phishing email, you should report it to the Cyber Crime Cell of your local police or through the National Cyber Crime Reporting Portal (https://cybercrime.gov.in).
  • Collect evidence, such as screenshots of the email, headers, and any other relevant information before making the report.
  • Inform your bank immediately to secure your account and prevent unauthorized transactions.

It is crucial to be vigilant and report such incidents, as they not only affect individuals but can also lead to larger cybersecurity threats. Always verify the authenticity of emails and never share sensitive information through unsecured channels.