I received a phishing email pretending to be from my bank in Saharanpur asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email that pretends to be from your bank and requests your OTP and credentials is indeed a crime under Indian law.

Phishing is a form of cybercrime and fraud where scammers impersonate legitimate entities to deceive individuals into providing sensitive information. In India, this type of activity is addressed under various laws and provisions, primarily under the Information Technology Act, 2000, and the Indian Penal Code, 1860.

• Information Technology Act, 2000:
  • Section 66: Deals with computer-related offenses, including hacking and data theft. Phishing can be classified under this section as it involves unauthorized access to personal data.
  • Section 66C: Specifically addresses identity theft. If a person uses your credentials without your consent, it falls under this provision.
  • Section 66D: Covers cheating by impersonation using computer resources, which is directly applicable to phishing scams.
• Indian Penal Code, 1860:
  • Section 420: Pertains to cheating and dishonestly inducing delivery of property. If a victim is tricked into providing personal information or financial data, it can be prosecuted under this section.
  • Section 463: Deals with forgery, which can be relevant if the phishing email is crafted to deceive the victim into thinking it is legitimate.
• Reporting the Crime:
  • Immediately report the phishing attempt to your bank’s customer service to alert them of the fraudulent activity.
  • File a complaint with the Cyber Crime Cell of your local police in Saharanpur.
  • You can also report the phishing email to the Indian Cyber Crime Coordination Centre (I4C) at the government portal.

It is essential to act swiftly in such situations to prevent any potential misuse of your personal information. Additionally, ensure that you change your passwords and enable two-factor authentication on your bank accounts for enhanced security.