Know Your Enemy: Common Digital Scams in India
The first step to protection is awareness. Scammers are constantly finding new ways to trick people, but most methods rely on creating a sense of urgency or trust. Some of the most prevalent scams include phishing, vishing, and smishing, where fraudsters
use fake emails, calls, or SMS messages to steal your data. Look out for messages about KYC updates, electricity bill disconnections, or unbelievable job offers that ask you to click a link or download an app. Another major threat is UPI fraud. Scammers might send a fake 'collect request', which looks like they are sending you money, but approving it actually debits your account. They also use fake QR codes or impersonate officials to create panic and manipulate you into making a payment.
Spotting Phishing: Your First Line of Defence
Phishing remains one of the most common ways criminals gain access to your accounts. These fraudulent messages are designed to look like they come from your bank, a government agency, or a popular online service. Always be suspicious of unsolicited messages that demand immediate action. Check the sender's email address or SMS ID; it often has slight misspellings or looks unofficial. Hover over links before clicking to see the actual destination URL—if it doesn't match the legitimate website, it's a trap. Poor grammar and spelling are also major red flags. Remember, no bank or reputable institution will ever ask for your PIN, OTP, or password via email or SMS. If you receive such a request, delete it immediately.
Fortifying Your Accounts: Essential Security Habits
Strong security is about building layers of protection. Start with your passwords. Use complex and unique passwords for each of your financial accounts. A mix of upper and lowercase letters, numbers, and symbols is best. Most importantly, enable two-factor authentication (2FA) wherever possible. This adds a critical second layer of security, usually an OTP sent to your phone, making it much harder for anyone to access your account even if they steal your password. Be cautious about the networks you use. Avoid performing financial transactions on public or unsecured Wi-Fi, as hackers can intercept your data. Stick to your mobile data or a trusted private network. Finally, only download banking and payment apps from official sources like the Google Play Store or Apple App Store.
Safe UPI and Digital Wallet Practices
The convenience of UPI has also made it a prime target for fraud. The golden rule is simple: you only need to enter your UPI PIN to send money, never to receive it. If someone asks you to enter your PIN to get a refund or receive a payment, it is a scam. Always double-check the details on a payment request, including the recipient's name and UPI ID, before approving it. Be wary of QR codes from unknown sources; scanning a fraudulent QR code can initiate a payment from your account. Regularly review your transaction history within your UPI app to ensure all debits are authorised by you. Setting transaction limits on your accounts can also help minimise potential losses from any single fraudulent event.
What to Do If You Spot an Unauthorised Debit
If you notice a transaction you didn't make, you must act fast to limit the damage. The first step is to immediately contact your bank's 24/7 customer helpline to block your card, UPI access, or account. Most banking apps also have a feature to block cards instantly. Follow up by sending a written complaint to the bank via email. According to RBI guidelines, your liability is limited or even zero if you report the fraud promptly. The second crucial step is to report the incident on the National Cyber Crime Reporting Portal at cybercrime.gov.in or by calling the helpline number 1930. Prompt reporting through this portal can help authorities try to freeze the transferred funds. Keep all records of the transaction and your communications with the bank and police.
