240,679+ questions
↑↓ navigate ↵ select esc close
Home / Cyber Law / Question
Cyber Law India · Just now · 632 views

I received a phishing email pretending to be from my bank in Mysore asking for my OTP and credentials. Is this a crime?

JA Asked by Jaya Lakshmi from India

Quick Answer

Yes, receiving a phishing email that pretends to be from your bank asking for your OTP and credentials is a crime under Indian cyber law. Phishing is a form of cybercrime where an attacker masquerades as a trustworthy entity to deceive individuals into providing sensitive information, such as passwords and credit card details.

Detailed Legal Analysis

Yes, receiving a phishing email that pretends to be from your bank asking for your OTP and credentials is a crime under Indian cyber law.

Phishing is a form of cybercrime where an attacker masquerades as a trustworthy entity to deceive individuals into providing sensitive information, such as passwords and credit card details. In India, this is addressed under various legislations, primarily the Information Technology Act, 2000.

  • Definition of Phishing: Phishing is categorized as a form of cyber fraud. Under Section 66 of the IT Act, 2000, it is punishable as it involves cheating and fraud through computer resources.
  • Relevant Laws:
    • Information Technology Act, 2000: This act aims to provide legal recognition for electronic transactions and to prevent cybercrimes. Key sections include:
      • Section 66: Deals with computer-related offenses, including hacking and data theft.
      • Section 66D: Specifically addresses cheating by personation using computer resources, which encompasses phishing activities.
    • Indian Penal Code (IPC), 1860:
      • Section 420: Pertains to cheating and can be invoked in phishing cases.
      • Section 463: Concerns forgery, which may apply if the phishing email involves falsifying documents or identities.
  • Steps to Take:
    • Do Not Respond: Avoid providing any information requested in the phishing email.
    • Report the Incident: Notify your bank immediately and report the phishing attempt to the Cyber Crime Cell in your area.
    • File a Complaint: You can lodge a formal complaint under Section 66D of the IT Act. Complaints can be filed online or at your local police station.
    • Preserve Evidence: Keep a copy of the phishing email and any other relevant information as evidence.

In conclusion, phishing is a serious offense under Indian law, and it is important to take immediate action to protect your personal information and report the crime.

Last updated: October 3, 2026 LPReviewed by LawPucho Legal Team

Disclaimer: AI-generated for educational purposes only. Does not constitute legal advice. Consult a qualified practitioner.

Share: