Recognizing Online Fraud and Phishing
Online financial fraud and cyber deception have grown exponentially with the rapid adoption of digital payments. Fraudsters rarely hack bank servers directly; instead, they exploit human trust through social engineering. In Hindi, hum ise kehte hain "Online dhokhadhadi aur phishing se bachav aur savdhani".
1. What is Phishing?
Phishing is a deceptive cybercrime where attackers impersonate legitimate organizations (like State Bank of India, Paytm, Income Tax Department, or Electricity Board) via email, SMS, WhatsApp, or phone calls to trick victims into revealing sensitive personal and financial data.
- Vishing (Voice Phishing): Fraudsters call posing as a bank manager claiming: "Your ATM card is blocked! Tell me your 16-digit card number and CVV to unblock it immediately!".
- Smishing (SMS Phishing): Fraudulent SMS claiming: "Dear Customer, your electricity connection will be disconnected tonight at 9 PM due to unpaid bill. Call officer immediately at 98765xxxxx".
2. Common Online Scams in India
| Scam Type | Modus Operandi (Kaise hota hai dhokha) | Golden Safety Rule |
|---|---|---|
| Fake QR Code Scam (OLX / Sell Scam) | Scammer pretends to buy your furniture on OLX, sends a QR code claiming "Scan this QR code to receive money into your bank account". | Scanning a QR code or entering a UPI PIN is ALWAYS for SENDING money, NEVER for receiving money! |
| Remote Screen Share App Scam | Scammer asks you to install AnyDesk, TeamViewer, or QuickSupport to "fix customer care complaint". | Never install screen-sharing apps on advice of strangers. They see your screen live and steal your banking OTP! |
| Fake Google Search Helpline Numbers | Fraudsters edit contact numbers of banks, couriers, or airlines on Google Maps with their personal mobile numbers. | Always look up customer care numbers directly inside official mobile apps or verified bank websites (.co.in / .com). |
| Lottery / Job Offer Scam | SMS claiming you won ₹25 Lakh in KBC lottery or offering ₹5,000/day for liking YouTube videos. | Genuine companies never demand "registration fee" or advance processing tax to give you money or jobs. |
3. Red Flags to Identify Phishing
- 1Sense of Urgent Panic: Scammers create artificial panic: "Account suspended within 1 hour!" or "Electricity cut tonight!". Genuine banks always give formal written notices.
- 2Grammar & Spelling Mistakes: Phishing messages often contain poor grammar, strange capitalization, or odd characters.
- 3Suspicious Link URLs: Look closely at web addresses:
- Genuine:
https://www.onlinesbi.sbi/ - Phishing:
http://sbi-verification-login.freehost.com/
- 1Demands for Secret Credentials: No genuine bank official, police officer, or government representative will ever ask for your ATM PIN, UPI PIN, CVV, or OTP.
4. What to Do If Defrauded? (National Cyber Helpline 1930)
If money has been fraudulently deducted from your bank account:
- 1The Golden Hour (Pehle 2 Ghante): Report the cyber fraud within 2 hours. If reported quickly, the police and nodal banks can freeze the stolen money in the recipient's mule account before the criminal withdraws it.
- 2Call National Cyber Helpline Number: Dial 1930 (Citizen Financial Cyber Fraud Reporting System) immediately.
- 3File Complaint Online: Visit the official portal cybercrime.gov.in and register a detailed complaint with transaction UTR numbers and screenshots.
- 4Notify Your Bank: Immediately call your bank's 24x7 toll-free helpline to block your debit card, net banking, and UPI ID.
Multiple Choice Questions
1. What is the National Cyber Crime reporting helpline number in India for financial fraud?
A. 100 B. 108 C. 1930 D. 1098 Answer: C Explanation: 1930 is the official citizen financial cyber fraud reporting helpline number launched by the Ministry of Home Affairs in India.
2. When does a user need to enter their secret 4 or 6-digit UPI PIN?
A. Only when sending/deducting money from their bank account B. When receiving cashback or payment from another person C. When someone scans their QR code to pay them D. When checking an incoming SMS message Answer: A Explanation: UPI PIN is strictly an authorization for debiting (sending) money from your account. You NEVER need to enter your UPI PIN to receive funds.
3. What is the deceptive practice of sending fake emails or messages masquerading as reputable organizations called?
A. Spooling B. Phishing C. Defragmentation D. Compiling Answer: B Explanation: Phishing is a social engineering attack where malicious actors impersonate trusted institutions to steal sensitive credentials like passwords and credit card details.
4. Why do cyber fraudsters ask victims to install apps like AnyDesk or TeamViewer?
A. To increase internet bandwidth B. To remotely view and control the victim's mobile screen and capture banking OTPs in real-time C. To activate 5G network on the phone D. To clean dust from the smartphone speaker Answer: B Explanation: AnyDesk and TeamViewer are remote desktop screen-sharing tools. If installed by a scammer, they can see everything on your screen, including incoming SMS OTPs and passwords.
5. What is the official Government of India portal for reporting all types of cyber crimes?
A. www.irctc.co.in B. www.cybercrime.gov.in C. www.upsc.gov.in D. www.incometax.gov.in Answer: B Explanation: National Cyber Crime Reporting Portal (cybercrime.gov.in) is the official platform for registering cybercrime complaints online in India.
Introduction to Future Technologies
Continue learning with hands-on practice, examples, and exercises in the upcoming topic.
Related Lessons
| Previous Lesson | Next Lesson |
|---|---|
| Safe Practices for Mobile Devices | Introduction to Future Technologies |
Practice Quiz
Test your understanding of this lesson with 5 questions. Each question has one correct answer.