I received a phishing email pretending to be from my bank in Manali asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email that pretends to be from your bank and solicits your OTP and credentials is a crime under Indian cyber law.

Phishing is a form of cybercrime where individuals or entities attempt to deceive users into providing sensitive information such as passwords, credit card numbers, and other personal data. In India, such acts are primarily governed by the Information Technology Act, 2000, and the Indian Penal Code, 1860.

Key legal provisions relevant to phishing include:

• Information Technology Act, 2000:
  • Section 66: Deals with computer-related offenses and states that whoever dishonestly or fraudulently does any act to secure access to a computer resource or to data held in any computer resource shall be punished with imprisonment which may extend to three years, or with fine, or with both.
  • Section 66C: Pertains specifically to identity theft, stating that any person who, fraudulently or dishonestly makes use of the digital signature, password, or any other unique identification feature of another person shall be punished with imprisonment of up to three years and/or a fine that may extend to ₹1,00,000.
• Indian Penal Code, 1860:
  • Section 415: Defines cheating and includes acts where a person deceives another for obtaining a gain.
  • Section 420: Deals with cheating and dishonestly inducing delivery of property, which can be applicable in cases of financial fraud through phishing.

To take action against phishing, consider the following steps:

• Do not respond: Never provide personal information, OTPs, or passwords in response to phishing emails.
• Report the incident: Report the phishing attempt to your bank’s customer service and the Cyber Crime Reporting Portal of the Government of India.
• Preserve evidence: Keep a copy of the email, including the sender's address, to assist with investigations.
• Educate yourself: Familiarize yourself with common phishing tactics to avoid falling victim in the future.

By understanding the legal framework and taking appropriate actions, you can protect yourself and contribute to the fight against cybercrime in India.