I received a phishing email pretending to be from my bank in Jodhpur asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email pretending to be from your bank is a criminal offense under Indian law.

Phishing is a type of cybercrime where an attacker impersonates a legitimate entity to deceive individuals into providing sensitive information, such as passwords, credit card numbers, or other personal details. The act of sending such fraudulent emails is punishable under several provisions of Indian law.

• Information Technology Act, 2000 (IT Act): Under this act, phishing can be classified as a cybercrime. Specifically, Section 66C of the IT Act deals with identity theft, which includes the act of impersonating someone to deceive others for financial gain.
• Section 66D: This section addresses cheating by personation using computer resources. If the phishing attempt deceives you into sharing sensitive information, the offender can be charged under this provision.
• Indian Penal Code, 1860 (IPC): Various sections of the IPC can also apply to phishing activities, such as:
  • Section 420: This section pertains to cheating and dishonestly inducing delivery of property. If the phishing email results in financial loss, the perpetrator can be charged accordingly.
  • Section 463: This deals with forgery. The act of creating a fraudulent email can be considered forgery under the IPC.
• Filing a Complaint: If you receive a phishing email, it is advisable to take the following steps:
  • Do not respond to the email or provide any personal information.
  • Report the incident to your bank immediately, as they may have protocols in place to address such issues.
  • File a complaint with the Cyber Crime Cell of your local police station or through the National Cyber Crime Reporting Portal (https://cybercrime.gov.in).
  • Preserve evidence by taking screenshots of the email and noting down any relevant details.

In conclusion, phishing is a serious crime, and it is essential to take prompt action in reporting such incidents to mitigate any potential harm and assist law enforcement in addressing cybercrime effectively.