I received a phishing email pretending to be from my bank in Rohtak asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email that impersonates your bank and requests your OTP and credentials constitutes a crime under Indian law.

Phishing is a form of cybercrime where attackers attempt to deceive individuals into providing sensitive information by masquerading as a legitimate entity. In India, such activities are addressed under various laws, including the Information Technology Act, 2000, and the Indian Penal Code, 1860.

• Information Technology Act, 2000:
  • Section 66: This section deals with computer-related offenses and includes hacking with a computer system, which can be applicable if the phishing attack involves unauthorized access to data.
  • Section 66D: Specifically addresses cheating by personation using computer resources, which directly applies to phishing.
  • Section 70: Provides protection for protected systems and imposes penalties for accessing such systems unlawfully.
• Indian Penal Code, 1860:
  • Section 419: Pertains to cheating by personation, which is relevant when someone impersonates another person to commit fraud.
  • Section 420: Relates to cheating and dishonestly inducing delivery of property, applicable if the phishing results in financial loss.

If you receive such a phishing email, it is essential to take the following steps:

• Do not respond: Avoid providing any personal information, such as your OTP or credentials.
• Report the email: Inform your bank's fraud department immediately about the phishing attempt.
• File a complaint: You can lodge a complaint with the Cyber Crime Cell in your area or through the National Cyber Crime Reporting Portal (cybercrime.gov.in).
• Notify authorities: In Rohtak, you can also file a complaint at the local police station.
• Secure your accounts: Change your passwords and monitor your bank statements for any unauthorized transactions.

Taking prompt action can help minimize the risk of identity theft and financial loss. Always remain cautious of unsolicited communications that request sensitive information.