Device Code Phishing on Indian Orgs

How Device Code Phishing on Indian Orgs Works

Overview: A new wave of device code phishing schemes is impacting hundreds of Indian organizations. These scams target employees of small and large companies alike, tricking them into sharing their corporate login credentials and even multi-factor authentication codes. If successful, scammers gain direct access to sensitive business resources and data, putting both jobs and company security at risk. How It Works: Scammers leverage ready-made phishing kits—often sold under "Phishing-as-a-Service" models. Victims receive what appear to be legitimate links for Microsoft or other cloud services, asking them to enter device codes, emails, and one-time passwords. These phishing pages are redirected and disguised through multiple cloud service platforms (like Cloudflare and Railway), making them tough to detect. When details are entered, scammers instantly grab tokens used to access company systems. India Angle: Expanding Indian IT and business process outsourcing (BPO) sectors make the country a prime target, especially metros like Bengaluru, Hyderabad, and Gurugram. Attackers mimic popular IT tools (Microsoft 365, GSuite) used by Indian firms. Employees in operations, HR, and finance are common targets, but anyone with business email access is vulnerable. Real Examples: An HR staffer gets an email with the subject ‘Remote Work Device Verification’ containing a link to “verify your device code” before accessing files. An IT admin from Pune receives a WhatsApp urging them to “link your device to company account before the policy deadline.” Red Flags: (a) Requests to enter device codes online, (b) Links that jump between multiple unfamiliar domains, (c) Pages that ask for both login and 2FA codes, (d) Sudden urgency around a corporate login, (e) Messages from generic or unknown senders. Protective Measures: Confirm any device or login verification requests directly with your IT department, not over email or WhatsApp. Use only official apps and bookmarks for accessing business tools. Never share MFA codes with anyone. Enable alerts for sign-ins from new devices. If Victimised: Inform your company’s IT/security department and reset passwords immediately. Report incidents at 1930 and cybercrime.gov.in. Monitor accounts for unauthorized access or data movement. Related Scams: (a) Office 365 password phishing, (b) WhatsApp hacking via device linking requests, (c) GSuite credential theft.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Device Code Phishing on Indian Orgs Target?

General public across India

Red Flags — How to Identify Device Code Phishing on Indian Orgs

• Unusual requests for device codes
• Multiple domain redirects before login
• Pages ask for both password and OTP
• Urgency to act for business account access
• Unfamiliar senders demanding verification

What To Do If You Encounter Device Code Phishing on Indian Orgs

1. Do not click any links or share personal information
2. Block and report the sender immediately
3. Report at cybercrime.gov.in or call 1930
4. Inform your bank if financial details were shared

How to Report Device Code Phishing on Indian Orgs in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Device Code Phishing on Indian Orgs?

Overview: A new wave of device code phishing schemes is impacting hundreds of Indian organizations. These scams target employees of small and large companies alike, tricking them into sharing their corporate login credentials and even multi-factor authentication codes. If successful, scammers gain direct access to sensitive business resources and data, putting both jobs and company security at risk. How It Works: Scammers leverage ready-made phishing kits—often sold under "Phishing-as-a-Service

How does Device Code Phishing on Indian Orgs work?

Overview: A new wave of device code phishing schemes is impacting hundreds of Indian organizations. These scams target employees of small and large companies alike, tricking them into sharing their corporate login credentials and even multi-factor authentication codes. If successful, scammers gain direct access to sensitive business resources and data, putting both jobs and company security at ris

How to protect yourself from Device Code Phishing on Indian Orgs?

Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared

How to report Device Code Phishing on Indian Orgs in India?

Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.