Scams by email in India

An email gives the scammer room to look official: a signature, a fake invoice, an attachment and a button that goes to a lookalike login page.

What it looks like

• A sender address that is almost, but not exactly, the real domain.
• A button that says "Verify account" or "View invoice".
• An attachment such as a PDF, ZIP or HTML file you did not expect.
• A generic greeting instead of your name.
• A login page that opens from the email and asks for your password and OTP.

Scams that use this channel

What to do

1. Do not open the attachment and do not press the button.
2. Go to the company website by typing it yourself and check your account there.
3. Check the full sender address, not just the display name.
4. Report it as phishing in your email app and delete it.
5. If you typed a password on the page, change it at once and turn on two-step verification.

Use Report phishing in your email app. If money or accounts are affected, call 1930 and report at cybercrime.gov.in.