Differences
This shows you the differences between two versions of the page.
| — | cyber:report-fake-website [2026/07/10 21:06] (current) – created - external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | {{htmlmetatags> | ||
| + | metatag-description=(Step-by-step guide to report a fake website or phishing link in India via the National Cyber Crime Portal helpline 1930 CERT-In and Chakshu in 2026) | ||
| + | metatag-og: | ||
| + | metatag-twitter: | ||
| + | ====== Report a Fake Website or Phishing Link 2026 ====== | ||
| + | |||
| + | {{https:// | ||
| + | |||
| + | **Reviewed on:** 2026-06-19. | ||
| + | |||
| + | <WRAP info> | ||
| + | |||
| + | ===== Two Routes: Pick the Right One ===== | ||
| + | |||
| + | There are two distinct actions. Use both if you lost money; use only the first if you spotted a fake site without being defrauded. | ||
| + | |||
| + | * **Route A, Report the URL** (no money lost): Flag the fake website or phishing link so authorities can block it. | ||
| + | * **Route B, File a victim complaint** (money lost or account compromised): | ||
| + | |||
| + | These are separate forms on the same portal. Do not skip Route A thinking Route B is enough, the Suspect Repository is what drives takedowns. | ||
| + | |||
| + | ===== Route A: Report the Fake URL (Suspect Repository) ===== | ||
| + | |||
| + | **Where:** [[https:// | ||
| + | |||
| + | **Step-by-step: | ||
| + | |||
| + | - Go to [[https:// | ||
| + | - Select **Website URL** as the identifier type. | ||
| + | - Enter the full fake URL (copy-paste from your browser address bar, including " | ||
| + | - Select the **state where the incident occurred** from the dropdown. | ||
| + | - Write a brief description (up to 500 characters): | ||
| + | - Upload supporting evidence (screenshot, | ||
| + | - Complete the CAPTCHA and click **Submit**. | ||
| + | |||
| + | You do not need to register or log in for Route A. There is no fee. | ||
| + | |||
| + | **What can be reported this way:** | ||
| + | |||
| + | * Fake bank or government websites | ||
| + | * Phishing links sent by SMS, WhatsApp, or email | ||
| + | * Fraudulent e-commerce shops | ||
| + | * Fake investment or lottery portals | ||
| + | * Spoofed apps linked from SMS or social media | ||
| + | * Fake helpline websites impersonating RBI, UIDAI, IRCTC, or similar bodies | ||
| + | |||
| + | ===== Route B: File a Victim Complaint ===== | ||
| + | |||
| + | **Where:** [[https:// | ||
| + | |||
| + | Use this route if you clicked a phishing link and lost money, shared OTP, or had your account accessed. | ||
| + | |||
| + | **Step-by-step: | ||
| + | |||
| + | - Choose **File a Complaint** on the home page. | ||
| + | - Register with your mobile number (OTP verified) to get a trackable reference number. | ||
| + | - Select the category: **Financial Fraud** (if money was debited) or **Other Cyber Crime** (for account compromise without financial loss). | ||
| + | - Fill in the incident details: date, platform, amount lost (if any), and the fake URL. | ||
| + | - Paste the phishing URL in the description and in the suspect identifier field. | ||
| + | - Upload all evidence (bank statement, chat screenshots, | ||
| + | - Submit. You will receive a reference number by SMS and email. | ||
| + | - Track progress at [[https:// | ||
| + | |||
| + | **Call 1930 first if money was debited.** The Cyber Crime Helpline 1930 can flag the transaction for a hold, call within hours of the fraud. Filing the portal complaint can follow, but the call triggers the faster financial-freeze mechanism. | ||
| + | |||
| + | ===== Also Report on Chakshu (DoT Portal) ===== | ||
| + | |||
| + | If the fake website reached you via an SMS or WhatsApp message, additionally report the communication on the Department of Telecommunications' | ||
| + | |||
| + | **Where:** [[https:// | ||
| + | |||
| + | - Select the medium: SMS, WhatsApp, or Call. | ||
| + | - Choose the fraud type: **Malicious link / website**. | ||
| + | - Paste the URL mentioned in the message. | ||
| + | - Verify with OTP and submit. | ||
| + | |||
| + | Chakshu reports help DoT block the originating telecom resource (SIM, number, sender ID) used to spread the phishing link. It is separate from the cybercrime complaint and takes about two minutes. | ||
| + | |||
| + | ===== Also Report to CERT-In ===== | ||
| + | |||
| + | The Indian Computer Emergency Response Team (CERT-In) handles reports about phishing infrastructure, | ||
| + | |||
| + | **Email:** [email protected] (as listed by the dispatch; confirm the current address at [[https:// | ||
| + | |||
| + | **Include in your email:** | ||
| + | |||
| + | * Subject line: " | ||
| + | * The full URL of the fake site | ||
| + | * A brief description of what the site claims to be (e.g., " | ||
| + | * The date and time you encountered it | ||
| + | * A screenshot attached as a PNG or PDF | ||
| + | |||
| + | CERT-In works with hosting providers and domain registrars to take down phishing infrastructure. Response timelines are not publicly fixed, confirm current procedures on the CERT-In website. | ||
| + | |||
| + | ===== Evidence to Collect Before Reporting ===== | ||
| + | |||
| + | Collect this before the fake site goes offline: | ||
| + | |||
| + | ^ Evidence ^ How to Capture ^ | ||
| + | | Full URL | Copy from browser address bar | | ||
| + | | Screenshot of the fake page | Full-page screenshot (browser print or extension) | | ||
| + | | SSL certificate details | Click the padlock icon, note the issuer and domain | | ||
| + | | SMS or email that linked you | Screenshot showing sender number or email address | | ||
| + | | Transaction proof (if defrauded) | Bank SMS, UPI app transaction ID, statement | | ||
| + | | Browser warning (if shown) | Screenshot of any " | ||
| + | |||
| + | Do not submit a report from the fake site itself, it may log your IP or attempt further phishing. | ||
| + | |||
| + | ===== Legal Basis ===== | ||
| + | |||
| + | Fake websites and phishing attacks are offences under the Information Technology Act 2000. Impersonation and identity-theft offences under the IT Act attract imprisonment and fines. The Indian Penal Code sections on cheating and forgery also apply. You do not need to cite any section in your complaint, police map the offence at their end. | ||
| + | |||
| + | ===== If Your Report Gets No Action ===== | ||
| + | |||
| + | - **Appeal to GAC:** The Grievance Against Police portal at [[https:// | ||
| + | - **Contact State Cyber Cell:** Every state has a Cyber Crime Police Station. File a written complaint there with your cybercrime.gov.in reference number. | ||
| + | - **CERT-In escalation: | ||
| + | - For money-fraud victims: also see [[cyber: | ||
| + | |||
| + | ===== FAQ ===== | ||
| + | |||
| + | ==== Can I report a fake website anonymously? | ||
| + | |||
| + | Yes. Route A (Report Suspect) does not require login or registration. You only need to register if you want a trackable reference number for a victim complaint under Route B. | ||
| + | |||
| + | ==== The fake site has already disappeared. Can I still report it? ==== | ||
| + | |||
| + | Yes. Report the URL even if the site is offline, the domain and hosting details remain in registrar records and help authorities trace the operators. Submit whatever cached evidence you have (screenshot, | ||
| + | |||
| + | ==== What if the SMS had a shortened link (bit.ly, etc.)? ==== | ||
| + | |||
| + | Report the shortened link as-is. Also expand it using a link-preview tool (such as checkshorturl.com) and report the destination URL separately. Include both in your submission. | ||
| + | |||
| + | ==== I received a phishing email from a fake government address. Where do I report? ==== | ||
| + | |||
| + | Report on cybercrime.gov.in under Other Cyber Crime. Also forward the email (with full headers) to [email protected]. If the email impersonates a specific ministry or department, additionally write to that department' | ||
| + | |||
| + | ==== How long does it take for a fake site to be taken down? ==== | ||
| + | |||
| + | No fixed timeline is published. Takedowns depend on the hosting country, the domain registrar, and the response speed of the ISP. Reporting on multiple channels (cybercrime.gov.in, | ||
| + | |||
| + | ==== Will I get a case reference number? ==== | ||
| + | |||
| + | Route A (Report Suspect) does not generate a complaint number, it feeds the Suspect Repository. Route B (File a Complaint with login) generates an SMS and email reference number for tracking. | ||
| + | |||
| + | ==== I spotted a fake job advertisement website. Is this the right place? ==== | ||
| + | |||
| + | Yes, report the URL under Route A. If you paid money or shared documents, also file Route B and read our guide on [[cyber: | ||
| + | |||
| + | ==== What about fake social media profiles impersonating a brand? ==== | ||
| + | |||
| + | Use the Report Abuse to Social Media option on cybercrime.gov.in in addition to Route A. Also use the platform' | ||
| + | |||
| + | ===== RTI Escalation ===== | ||
| + | |||
| + | If your complaint is not acted upon and you want official information, | ||
| + | |||
| + | **File an RTI to:** //CERT-In (under MeitY) and the State Cyber Cell (under the State Home Department)// | ||
| + | |||
| + | * What action was taken on cybercrime complaint reference number [your number]? | ||
| + | * How many fake-website URLs were reported and taken down in the last quarter? | ||
| + | * What is the standard operating procedure for handling phishing URL reports? | ||
| + | * Which officer is the CPIO for cybercrime complaints in this state? | ||
| + | * Has any FIR been registered on this complaint, and if not, why? | ||
| + | |||
| + | → **[[https:// | ||
| + | |||
| + | If you lost money through a [[cyber: | ||
| + | |||
| + | ===== Sources ===== | ||
| + | |||
| + | * National Cyber Crime Reporting Portal: https:// | ||
| + | * Report Suspect form: https:// | ||
| + | * CERT-In (Indian Computer Emergency Response Team): https:// | ||
| + | * Chakshu, Sanchar Saathi fraud portal: https:// | ||
| + | * Grievance Against Police (GAC): https:// | ||
| + | |||
| + | //By Dr. Shrawan Kumar Pathak// | ||
| + | ===== Report fake website to cyber crime: How to file complaint and get it blocked? ===== | ||
| + | |||
| + | Reporting fake websites to cyber crime authorities is critical for preventing fraud. Here is the complete guide: | ||
| + | |||
| + | - **Step 1: What is a fake website?** (a) a website that impersonates a legitimate business, government department, or individual, (b) a website that sells counterfeit products, (c) a phishing website that steals personal/ | ||
| + | - **Step 2: How to identify a fake website.** (a) the URL is slightly different from the original (e.g., amaz0n.com instead of amazon.com), | ||
| + | - **Step 3: Where to report.** (a) National Cyber Crime Reporting Portal: cybercrime.gov.in — report online, (b) call the cyber crime helpline: 1930 (for financial fraud), (c) file an FIR at the local cyber crime police station, (d) report to CERT-In (cert-in.org.in) — for website blocking, (e) report to the legitimate business being impersonated. | ||
| + | - **Step 4: How to file on cybercrime.gov.in.** (a) visit cybercrime.gov.in, | ||
| + | - **Step 5: Getting the website blocked.** (a) CERT-In can direct ISPs to block the fake website, (b) the blocking order is issued under Section 69A of the IT Act, (c) to request blocking: file a complaint with CERT-In (cert-in.org.in), | ||
| + | - **Step 6: If you lost money.** (a) call 1930 immediately — to freeze the fraudulent account, (b) file a complaint on cybercrime.gov.in, | ||
| + | - **Step 7: File RTI.** File RTI with CERT-In / MeITY asking for: (a) the number of fake websites reported, (b) the number of websites blocked, (c) the average time to block a website, (d) the action taken on your complaint. | ||
| + | |||
| + | See [[https:// | ||
| + | |||
| + | {{tag> | ||