I received a phishing email pretending to be from my bank in Meerut asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email that impersonates your bank and requests sensitive information like your OTP and credentials constitutes a crime under Indian law.

Phishing is a form of cybercrime that involves deceitful attempts to obtain sensitive information from individuals by masquerading as a trustworthy entity. In India, this is primarily governed under the Information Technology Act, 2000, along with various provisions in the Indian Penal Code, 1860.

• Information Technology Act, 2000:
  • Section 66: Deals with computer-related offenses, including hacking and identity theft.
  • Section 66D: Specifically addresses cheating by personation using computer resources, which includes phishing.
  • Section 70: Protects sensitive personal data, which is relevant when discussing unauthorized access to such data.
• Indian Penal Code, 1860:
  • Section 420: Pertains to cheating and dishonestly inducing delivery of property, applicable to phishing cases.
  • Section 463: Involves forgery, which can also be linked to phishing schemes.

If you have received such an email, it is crucial to take the following steps:

• Do not respond: Avoid clicking on any links or providing further information.
• Report the incident: Notify your bank immediately and report the phishing attempt. Most banks have dedicated channels for such complaints.
• File a complaint: You can lodge a complaint with the Cyber Crime Cell of your local police or file a report on the National Cyber Crime Reporting Portal (cybercrime.gov.in).
• Document evidence: Keep a record of the email, including headers, as it can serve as evidence in investigations.
• Monitor your accounts: Regularly check your bank and online accounts for any unauthorized transactions or changes.

Phishing not only endangers your personal and financial information but also represents a significant threat to overall cybersecurity. Awareness and prompt action are essential in mitigating such risks.