Security and scam glossary
Short, plain definitions with real-life examples from India and a few tips for each term.
1 · A · B · C · D · E · F · G · H · I · J · K · L · M · N · O · P · Q · R · S · T · U · V · W · X · Z
1
A
Aadhaar masked copyAadhaar masked copy is a version of your Aadhaar that hides the first eight digits, so…Accessibility serviceAn accessibility service is an Android feature that can read the screen and tap for you,…Account freezeAccount freeze is when a bank holds or blocks your account, often after a fraud report.…Advance-fee fraudAdvance-fee fraud asks you to pay a small fee first to receive a bigger reward, job,…AdwareAdware is software that floods your phone or computer with unwanted ads, pop-ups and…APKAn APK is the file format used to install Android apps; one received from a chat or link…App LockApp Lock adds a separate PIN or biometric check to chosen apps, such as WhatsApp or UPI,…App permissionsApp permissions are the rights an app asks for, such as camera, location, SMS or…App signingApp signing is a digital seal that proves who built an Android app and that it has not…
B
BackupA backup is a separate copy of your photos, contacts and files kept safely, so you can…Beneficiary additionBeneficiary addition is the net banking step of saving a payee's account details before…Biometric authenticationBiometric authentication unlocks a phone or app using your body, such as a fingerprint…Bluetooth attacksBluetooth attacks are attempts to pair with, spy on or send unwanted files to a nearby…BootloaderA bootloader is the first program that runs when you switch on a phone and checks the…BotnetA botnet is a large group of hacked phones, computers or gadgets that an attacker…Browser cookiesBrowser cookies are small files that websites store on your device to remember you, log…Brute force attackA brute force attack tries huge numbers of passwords or PINs one after another until one…
C
Call forwarding codeCall forwarding code is a dial code that sends your calls to another number. Scammers…Caller IDCaller ID shows a number or name when someone calls you. It is a helpful clue but can be…Caller ID spoofingCaller ID spoofing is faking the number or name on your screen, so a scam call looks…Card tokenisationCard tokenisation replaces your real card number with a unique token for each app or…ChakshuChakshu is the facility on the Sanchar Saathi portal to report suspected fraud calls,…ChargebackChargeback is a way to dispute a card payment through your bank when goods never arrive…ClickjackingClickjacking tricks you into clicking something hidden under a harmless-looking button…Collect requestCollect request is a UPI message asking you to pay someone. Approving it with your PIN…ConsentConsent is your clear, informed yes before a company collects or uses your data. It…Courier parcel scamCourier parcel scam is a call or SMS saying your parcel is held, with a fee, address…Credential stuffingCredential stuffing is when criminals take leaked emails and passwords from one site and…CVVCVV is the 3 digit security code on the back of your card. Do not tell it to anyone,…cybercrime.gov.incybercrime.gov.in is India's national cyber crime reporting portal, where you can report…
D
Data breachA data breach is when private information held by a company or website leaks or is…Data brokerData broker is a business that collects personal details from many sources and sells or…Data fiduciaryData fiduciary is the company or body that decides why and how your personal data is…Data minimisationData minimisation is the habit of giving or collecting only the personal data truly…DeepfakeA deepfake is a fake video, photo or audio made with AI to show someone saying or doing…Deepfake impersonationDeepfake impersonation uses AI-made video or voice that copies a real person, like a…Device adminDevice admin is an Android right that lets an app control your phone, such as lock it or…DigiLockerDigiLocker is the government's digital document wallet for Aadhaar, driving licence and…Digital arrestDigital arrest is a scam where fake officers say you are held on a video call and must…Digital certificateA digital certificate is an electronic ID that proves a website or app is run by who it…DLT headerDLT header is a registered sender name that a business must use to send bulk SMS in…DND registryDND registry is India's Do Not Disturb list that lets you opt out of many promotional…DNSDNS, the Domain Name System, is the internet's phone book that turns a website name into…DoxxingDoxxing is publishing someone's private details, like address, phone number or…DPDP ActDPDP Act is India's Digital Personal Data Protection law, which sets rules for how…
E
E-challanE-challan is a digital traffic fine sent to a vehicle owner. Fake challan messages with…e-KYCe-KYC is a paperless identity check that uses your Aadhaar number and an OTP sent to…E-mandateE-mandate is an online standing instruction that lets a company debit your card or bank…EDREDR, endpoint detection and response, is software on computers and servers that watches…EncryptionEncryption scrambles your data into unreadable code so only someone with the right key…End-to-end encryptionEnd-to-end encryption means only you and the person you message can read it; not even…eSIMAn eSIM is a SIM built into the phone that is set up digitally with a QR code or app, so…
F
Factory resetA factory reset erases everything on a phone and returns it to how it was when new, and…Fake customer care numberFake customer care number is a helpline number found in a search result or map listing…Fake refund requestFake refund request is a scam where someone says they will refund money, then sends you…Fake trading appFake trading app shows profits on screen to lure bigger deposits, then blocks…FASTagFASTag is the windscreen tag that pays highway tolls from a prepaid account. Fake FASTag…Find my deviceFind My Device is Google's Android service for locating, ringing, locking or erasing a…FirewallA firewall is a filter that watches network traffic and blocks connections that are not…
G
H
HashingHashing turns a password or file into a short fixed code that cannot be reversed, so…Homograph attackA homograph attack uses letters from other alphabets that look identical to normal ones,…Honey trapHoney trap is a scam where an attractive stranger builds a romantic or intimate bond…HoneypotA honeypot is a decoy system or account set up on purpose to attract attackers, so…HTTPSHTTPS is the secure version of a website connection, with a padlock, that encrypts what…
I
IMEIAn IMEI is a 15-digit number that identifies your phone's hardware; keeping it noted…IMPSIMPS (Immediate Payment Service) moves money between bank accounts instantly, any time,…
J
JailbreakJailbreaking removes Apple's restrictions on an iPhone so it can run unapproved…Juice jackingJuice jacking is the risk that a public USB charging port or a borrowed cable steals…
K
KeyloggerA keylogger is a program or device that records every key you press, so a thief can read…KYCKYC (Know Your Customer) is the identity check banks, wallets and brokers do before…
L
LayeringLayering means passing stolen money through many accounts and people quickly so the…Loan app permissionsLoan app permissions are the contacts, photos and SMS access that predatory loan apps…Lottery scamLottery scam tells you that you won a prize in a draw you never entered, then asks for a…
M
MalwareMalware is harmful software made to steal data, spy on you, lock your files or take…Man-in-the-middleA man-in-the-middle attack happens when an attacker secretly sits between you and a…MDMMDM, or mobile device management, lets an organisation control work phones from a…Merchant QR codeMerchant QR code is the printed code at a shop that you scan to pay. A swapped sticker…Mobile bankingMobile banking is your bank's official app on your phone for balances, transfers and…Mule accountMule account is a bank account used to receive and pass on fraud money. Lending your…
N
NEFTNEFT (National Electronic Funds Transfer) sends money between bank accounts in batches…Net bankingNet banking is your bank's website login for checking balances and moving money. Use…NPCINPCI, the National Payments Corporation of India, runs UPI, IMPS, RuPay and FASTag. It…
O
OTPAn OTP, or one-time password, is a short code valid for one use, sent by SMS or an app…Overlay attackAn overlay attack draws a fake screen, such as a bank login, on top of a real app so…
P
PAN cardPAN is a ten-character tax ID linked to your name and finances. Scammers use stolen PAN…Part-time job scamPart-time job scam promises easy daily income for simple online work, then asks you to…PasskeyA passkey is a password replacement that lets you sign in with your fingerprint, face or…Password managerA password manager is an app that creates and stores a different strong password for…PatchA patch is a small software update that fixes a security hole or bug, and installing it…PhishingPhishing is a trick where a fake message or website pretends to be a trusted company to…Play ProtectPlay Protect is Google's built-in Android checker that scans apps for harmful behaviour;…Ponzi schemePonzi scheme pays early investors with money from newer ones and promises high, steady…PretextingPretexting is when a scammer invents a believable story and identity, such as bank staff…Privacy policyPrivacy policy is the document where an app or website says what data it collects, why,…Profile photo cloneProfile photo clone is a fake chat account that uses a relative's or boss's photo and…Pump-and-dumpPump-and-dump is a scheme where a group hypes a cheap share or coin, then sells at the…
Q
R
RansomwareRansomware is malware that locks your files or device and demands money to unlock them,…Remote wipeA remote wipe erases a lost or stolen phone's data from far away, so a thief cannot read…Right to erasureRight to erasure is your ability to ask a company to delete your personal data once it…RootRooting an Android phone gives full control over the system, but it removes safety…RootkitA rootkit is a deep, hidden type of malware that gives an attacker lasting control of a…RTGSRTGS (Real Time Gross Settlement) is a bank transfer for large payments, sent one by one…
S
SaltSalt, in security, is a random extra value added to a password before hashing, so that…Sanchar SaathiSanchar Saathi is the Department of Telecommunications portal to check SIMs in your…SandboxA sandbox is a walled area where an app or file runs with limited rights, so a bad…Screen lockA screen lock is the PIN, pattern, password or biometric that protects a phone when it…Screen sharing fraudScreen sharing fraud tricks you into installing a remote-view app so a caller can watch…Secure eraseSecure erase overwrites or destroys stored data so it cannot be recovered, unlike a…Session hijackingSession hijacking is when an attacker steals the small pass that keeps you logged in and…SextortionSextortion is blackmail using real or fake intimate photos or video calls, with threats…SideloadingSideloading means installing an Android app from a file, not from the Play Store, which…SIEMA SIEM, or security information and event management system, collects logs from many…SIM swapA SIM swap is a fraud where a criminal gets a new SIM issued with your number so they…SIM swap fraudSIM swap fraud is when criminals get a duplicate SIM for your number so your OTPs and…SmishingSmishing is phishing sent by SMS or messaging apps, with a short text and a link that…SMS sender IDSMS sender ID is the short name, like a header with letters, shown as the sender of a…Social engineeringSocial engineering is tricking people, not machines, into giving away secrets or money,…Spam callSpam call is an unwanted call about loans, offers or fake services. Some are only…Spear phishingSpear phishing is a targeted phishing attack written for one person or company, using…Spoofed numberSpoofed number is a fake caller number made to look like a bank, police station or…SpywareSpyware is hidden software that secretly watches what you do on your phone or computer…StalkerwareStalkerware is a spy app secretly installed on someone's phone to track their location,…
T
Telegram task scamTelegram task scam pays small amounts for easy online tasks like liking videos, then…TokenA token is a small digital pass that proves you are logged in or allowed to do…Tracking pixelTracking pixel is a tiny invisible image or code in a web page or email that tells a…TRAITRAI, the Telecom Regulatory Authority of India, sets rules for telecom companies. It…Transaction limitTransaction limit is the maximum amount your bank or UPI app lets you send in one…TrojanA trojan is harmful software that pretends to be a useful app or file, so you install it…Two-factor authenticationTwo-factor authentication asks for a second proof, such as a code or approval, besides…TyposquattingTyposquatting is registering a website name that is one letter off from a real one,…
U
UPIUPI (Unified Payments Interface) lets you send money from your bank account to another…UPI AutoPay mandateUPI AutoPay mandate is a standing permission for a company to take repeat payments, like…UPI ID (VPA)UPI ID (VPA) is your payment address, like name@bank, that people use to pay you without…UPI LiteUPI Lite is a small-value wallet inside your UPI app for quick payments without a PIN,…UPI PINUPI PIN is the secret 4 or 6 digit number that approves a UPI payment from your account.…URL shortener risksURL shortener risks come from short links that hide the real destination, so you cannot…
V
Video KYCVideo KYC is an identity check done over a live video call with a bank or broker…VishingVishing is voice phishing: a phone call where the caller pretends to be a bank, police…Voice cloningVoice cloning uses AI to copy a person's voice from a short clip, so a scammer can phone…VPNA VPN, or virtual private network, sends your internet traffic through an encrypted…
W
WhatsApp group invite scamWhatsApp group invite scam adds you to a group of fake traders or job seekers who push…WhatsApp linked devicesWhatsApp linked devices lets you use one account on other devices. Scammers trick people…WhatsApp wrong number scamWhatsApp wrong number scam starts with a stranger's friendly "Hi, is this Rahul?" and…Wi-Fi evil twinA Wi-Fi evil twin is a fake hotspot with the same name as a real one, set up so that…