I received a phishing email pretending to be from my bank in Gorakhpur asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email pretending to be from your bank is indeed a crime under Indian law.

Phishing is a form of cybercrime that involves tricking individuals into providing sensitive information, such as passwords and OTPs, by impersonating a trustworthy entity. In India, this is addressed under various laws, including the Information Technology Act, 2000, and the Indian Penal Code, 1860.

• Information Technology Act, 2000:
  • Section 66: This section pertains to computer-related offenses, including hacking and phishing. It stipulates that anyone who dishonestly or fraudulently uses a computer resource or a communication device with the intent to cause damage can be punished with imprisonment and/or fines.
  • Section 66C: This section specifically deals with identity theft, where a person impersonates another person through electronic communication, which is exactly what phishing entails. The punishment may extend to three years of imprisonment and/or a fine.
• Indian Penal Code, 1860:
  • Section 420: This section addresses cheating and fraud. If someone deceives you with the intent to gain an advantage, this can lead to criminal charges under this section as well.

If you receive such phishing emails, it is crucial to take the following steps:

• Do not respond: Avoid replying to the email or providing any personal information.
• Report the incident: Inform your bank’s fraud department immediately. Most banks have dedicated teams to handle such incidents.
• File a complaint: You can file a complaint with the Cyber Crime Cell of your local police station or through the National Cyber Crime Reporting Portal (https://cybercrime.gov.in).
• Preserve evidence: Keep a copy of the phishing email as evidence. Screenshots or saved emails can be helpful during investigations.
• Monitor your accounts: Regularly check your bank statements and online banking accounts for any unauthorized transactions.

Phishing is a serious offense, and taking prompt action can help protect your personal information and financial assets.