I received a phishing email pretending to be from my bank in Tumkur asking for my OTP and credentials. Is this a crime?

Detailed Legal Analysis

Yes, receiving a phishing email that impersonates your bank to solicit your OTP and credentials is indeed a cybercrime under Indian law.

Phishing is a form of cyber fraud where attackers masquerade as a trusted entity to deceive individuals into providing sensitive information. In India, this behavior is primarily governed by the Information Technology Act, 2000, and the Indian Penal Code, 1860.

• Information Technology Act, 2000:
  • Section 66: This section deals with computer-related offenses and includes provisions for hacking and identity theft. Phishing falls under this category as it involves deceitful practices to gain unauthorized access to personal information.
  • Section 66D: This specifically addresses cheating by personation using computer resources. It is applicable to phishing as it involves impersonating a legitimate entity to deceive individuals.
  • Section 70: This section provides for the protection of sensitive data and information stored in computer resources, which phishing attacks compromise.
• Indian Penal Code, 1860:
  • Section 415: It defines cheating, which is relevant in phishing cases as individuals are misled to part with their personal information.
  • Section 420: This section penalizes cheating and dishonestly inducing delivery of property, which can include personal data.

If you have received such a phishing email, it is crucial to take immediate action:

• Do not respond to the email or provide any personal information.
• Report the incident to your bank’s fraud department to ensure they are aware of the phishing attempt.
• File a complaint with the Cyber Crime Cell in your area. In Tumkur, you can approach the local police or file an online complaint through the National Cyber Crime Reporting Portal (https://cybercrime.gov.in).
• Preserve evidence by taking screenshots of the email and any related communications.
• Monitor your bank account for any unauthorized transactions and inform your bank immediately if you notice any irregularities.

It’s vital to remain vigilant and educate yourself about phishing tactics to protect your personal information in the future.