Phishing

Phishing is a trick where a fake message or website pretends to be a trusted company to steal your passwords, OTPs or money.

Phishing: Phishing is a scam in which an attacker sends a message or builds a website that looks like it comes from a bank, a government office or a well-known company. The goal is to make you type a password, OTP, card number or UPI PIN into the wrong place.

In India, phishing usually arrives as an SMS about a blocked bank account, an expiring KYC, a pending challan or an electricity bill that will be cut tonight. The link opens a page that copies the real bank or service, down to the logo and colours. Anything you type goes straight to the scammer, who can use it within minutes.

Phishing works because it hurries you. The message creates fear or greed, and you act before you think. A single typed OTP can empty an account. The safest habit is to ignore the link completely and open the official app or type the website address yourself to check if the claim is true. If you already typed details, call your bank at once using the number on your card, and report the fraud at cybercrime.gov.in.

Tips

• Never tap links in messages about KYC, blocked accounts or pending dues; open the official app instead.
• Check the web address letter by letter before typing any password or OTP.
• Paste a suspicious message into the Safeavio scam check to see the reasons it looks risky before you act.

Related terms