The Supreme Court of India has issued an urgent warning about a fake website impersonating its official portal, a stark reminder of how easily cybercriminals can exploit public trust to steal personal and financial information.
The Official Alert
In an advisory on November
3, the Supreme Court Registry cautioned the public about a fraudulent website with the URL 'scigovinjudicial.com'. This fake portal was created to mimic the court's official site in a targeted phishing attack. The goal of such scams is to trick citizens, litigants, and advocates into surrendering sensitive data, including login credentials and banking information. The Registry clarified that its one and only official domain is 'sci.gov.in'. This is not an isolated incident; the court has issued similar warnings in the past about other fake websites, highlighting a recurring threat that requires constant public vigilance.
Anatomy of a Phishing Scam
Phishing is a form of cybercrime where attackers pose as legitimate institutions—like a court, bank, or government agency—to lure individuals into providing sensitive data. These scams are a type of 'social engineering', preying on human trust rather than technical vulnerabilities. Attackers often create a sense of urgency or fear, for example, by suggesting there's a problem with an account or a pending legal issue that requires immediate action. The fake websites they create can be incredibly convincing, using official logos and a similar design to the real thing, making it difficult for many to spot the fraud before it's too late.
Red Flags to Watch For
While scammers are sophisticated, their traps have common giveaways. The most crucial clue is the website address or URL. The official Supreme Court website ends in '.gov.in'; the fake one used a confusing but unofficial address. Always check for the '.gov.in' or '.nic.in' suffix on any Indian government website. Be wary of slight misspellings, extra words, or hyphens in the domain name. Another major red flag is any unsolicited request for personal information, passwords, or financial details like your PIN or CVV. Legitimate government bodies and courts will never ask for such confidential data via email or an unverified link.
What Criminals Do With Your Data
The information stolen through phishing attacks is a valuable commodity for criminals. Personal details can be used for identity theft, where scammers take out loans or apply for credit cards in your name, potentially ruining your financial history. Bank account numbers and passwords can be used to directly steal money from your accounts. Even if they don't use it themselves, attackers can sell your data on underground online marketplaces to other criminals. A single lapse in judgment can lead to significant financial loss and a long, difficult process to restore your personal reputation and credit.
Your Digital Defence Checklist
Protecting yourself requires a combination of awareness and good habits. First, never click on links in unexpected emails, text messages, or WhatsApp forwards. Instead, type the official website address directly into your browser. The Supreme Court's advisory recommends hovering your mouse over any link before clicking to see the actual destination URL. Always look for 'https' and the padlock icon in your browser's address bar, but remember this only means the connection is secure, not that the website is genuine. Finally, if you suspect you've already shared your details on a fraudulent site, the Registry advises immediately changing all your online passwords and contacting your bank to report the potential compromise.
