I received a phishing email pretending to be from my bank in Rohini asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email pretending to be from your bank is indeed a crime under Indian law, specifically categorized as a form of cyber fraud.

Phishing refers to the fraudulent attempt to obtain sensitive information such as usernames, passwords, and credit card details by disguising as a trustworthy entity in electronic communications. In India, such acts are primarily governed by the Information Technology Act, 2000 (IT Act) and the Indian Penal Code (IPC).

• Information Technology Act, 2000:
  • Section 66: This section deals with computer-related offenses, including hacking with a computer system and data theft. Phishing is a form of data theft where the perpetrator unlawfully acquires sensitive information.
  • Section 66D: This section specifically addresses cheating by personation using computer resources. Phishing falls under this category as it involves impersonating a legitimate entity to deceive individuals.
  • Section 67: This section pertains to publishing or transmitting obscene material in electronic form, which can also be relevant if the phishing attempt involves inappropriate content.
• Indian Penal Code, 1860:
  • Section 420: This section deals with cheating and dishonestly inducing delivery of property. If financial loss is incurred due to phishing, the perpetrator can be charged under this section.
  • Section 463: This section addresses forgery, which can be applicable if the phishing email uses forged documents or identities.

If you have received such an email, it is crucial to take immediate steps:

• Do not respond to the email or provide any personal information.
• Report the phishing attempt to your bank by forwarding the email.
• File a complaint with the Cyber Crime Cell in your area or through the National Cyber Crime Reporting Portal (https://cybercrime.gov.in).
• Consider changing your passwords and enabling two-factor authentication on your bank accounts for added security.

Phishing not only poses a risk to individual accounts but also undermines the trust in digital transactions. It is essential to remain vigilant and report such incidents to help combat cybercrime effectively.