What is phishing and how can I protect myself legally?

Detailed Legal Analysis

Phishing is a fraudulent attempt to obtain sensitive information such as usernames, passwords, and financial details by impersonating a legitimate entity online. It is an offence under Section 66D (cheating by personation) and Section 43 of the IT Act, 2000, and can be reported to the cyber cell.

Legally, a victim can file an FIR, seek recovery from the bank under RBI guidelines if reported promptly, and the entities involved face penalties. To protect yourself, never share OTPs, verify URLs and emails, use two-factor authentication, and report phishing attempts to the National Cyber Crime Reporting Portal and the CERT-In.