I received a phishing email pretending to be from my bank in Surat asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email that impersonates your bank and requests your OTP and credentials constitutes a crime under Indian law.

Phishing is a form of cybercrime where fraudsters attempt to obtain sensitive information such as usernames, passwords, and credit card details by masquerading as a trustworthy entity in electronic communications. In India, this practice is illegal and punishable under various statutes.

• Information Technology Act, 2000: The primary legislation governing cybercrime in India is the Information Technology Act, 2000. Relevant sections include:
• Section 66: This section deals with computer-related offenses and provides punishment for hacking with a maximum imprisonment of three years, or with a fine which may extend to five lakh rupees, or both.
• Section 66D: This section specifically addresses cheating by personation using computer resources, including phishing, and prescribes a punishment of up to three years imprisonment and a fine which may extend to one lakh rupees.
• Indian Penal Code, 1860: Certain provisions of the IPC may also apply to phishing activities:
• Section 419: Punishes cheating by personation with imprisonment for a term which may extend to seven years, and shall also be liable to fine.
• Section 420: Deals with cheating and dishonestly inducing delivery of property, which can apply if financial loss is involved.
• Filing a Complaint: If you receive such phishing emails, consider the following steps:
• Do not respond to the email or click on any links.
• Report the phishing attempt to your bank immediately.
• File a complaint with the Cyber Crime Cells in Surat or through the National Cyber Crime Reporting Portal (https://cybercrime.gov.in).
• Keep records of the phishing email, including screenshots and headers for evidence.
• Consider informing the Indian Computer Emergency Response Team (CERT-In) about the incident.
• Prevention Measures: To protect yourself from phishing:
• Always verify the source of emails requesting sensitive information.
• Use two-factor authentication wherever possible.
• Regularly update your passwords and avoid using easily guessable passwords.

It is crucial to remain vigilant and informed about such cyber threats to safeguard your personal and financial information.