I received a phishing email pretending to be from my bank in Kannur asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email that attempts to deceive you into providing your personal banking information is indeed a crime under Indian law.

Phishing is a form of cybercrime where a malicious actor impersonates a legitimate entity to trick individuals into revealing sensitive information, such as passwords and credit card details. In India, phishing is primarily governed by the Information Technology Act, 2000, and relevant sections of the Indian Penal Code (IPC).

• Information Technology Act, 2000:
  • Section 66: This section deals with computer-related offenses, including hacking and phishing. It prescribes a punishment of up to three years imprisonment and/or a fine for committing such offenses.
  • Section 66C: This section specifically addresses identity theft and stipulates a punishment of up to three years imprisonment and/or a fine for using someone else's identity fraudulently.
• Indian Penal Code (IPC):
  • Section 420: This section pertains to cheating and dishonestly inducing delivery of property. Phishing can fall under this section as it involves deceiving individuals to gain unauthorized access to their property (i.e., personal information).
  • Section 463: This section deals with forgery, which can be applicable if the phishing email falsely represents an institution.

If you have received such an email, it is crucial to take the following steps:

• Do not respond: Avoid replying to the email or clicking on any links provided.
• Report the incident: Notify your bank immediately about the phishing attempt. Most banks have dedicated fraud prevention teams that can assist you.
• File a complaint: You can lodge a complaint with the Cyber Crime Cell of your local police station or file it online through the National Cyber Crime Reporting Portal (cybercrime.gov.in).
• Document evidence: Keep a record of the phishing email, including screenshots and headers, as this information may be useful for law enforcement investigations.
• Monitor your accounts: Regularly check your bank statements and online accounts for any unauthorized transactions.

Phishing is a serious offense, and reporting it not only helps protect yourself but also aids in preventing similar attacks on others.