240,679+ questions
↑↓ navigate ↵ select esc close
Home / Cyber Law / Question
Cyber Law India · Just now · 340 views

I received a phishing email pretending to be from my bank in Darbhanga asking for my OTP and credentials. Is this a crime?

VI Asked by Vinod Mehta from India

Quick Answer

Yes, receiving a phishing email that pretends to be from your bank and asks for your OTP and credentials is a crime under Indian law. Phishing is a form of cybercrime that involves deceiving individuals into providing sensitive information such as passwords, credit card numbers, or other personal details by impersonating a legitimate entity.

Detailed Legal Analysis

Yes, receiving a phishing email that pretends to be from your bank and asks for your OTP and credentials is a crime under Indian law.

Phishing is a form of cybercrime that involves deceiving individuals into providing sensitive information such as passwords, credit card numbers, or other personal details by impersonating a legitimate entity. In India, this is primarily addressed under the Information Technology Act, 2000, and the Indian Penal Code, 1860.

  • Information Technology Act, 2000:
    • Section 66: This section deals with cyber fraud and provides for punishment for hacking into computer systems, including phishing-related activities.
    • Section 66D: Specifically punishes the act of cheating by personation using computer resources, which includes phishing.
    • Section 67: Addresses the publication or transmission of obscene material in electronic form, which may also be applicable if the phishing email contains harmful content.
  • Indian Penal Code, 1860:
    • Section 420: This section pertains to cheating and can be invoked against individuals who commit fraud through phishing.
    • Section 463: Defines forgery and can be applicable if false electronic documents are created as part of the phishing scheme.
  • Steps to Take if You Receive a Phishing Email:
    • Do not respond to the email or provide any personal information.
    • Report the phishing attempt to your bank immediately.
    • Forward the phishing email to the Cyber Crime Cell or the appropriate authorities in your area.
    • Change your passwords and enable two-factor authentication for added security.
    • Consider reporting the incident to the Cyber Crime Reporting Portal (cybercrime.gov.in).

It is essential to remain vigilant and report any phishing attempts to help prevent others from falling victim to these types of cybercrimes. Law enforcement agencies take these matters seriously, and prompt reporting can aid in investigations.

Last updated: October 3, 2026 LPReviewed by LawPucho Legal Team

Disclaimer: AI-generated for educational purposes only. Does not constitute legal advice. Consult a qualified practitioner.

Share: