Phishing via Fake Government Portals
Verdict: Suspicious | Risk Score: 7/10 | Severity: high
Category: UPI, WhatsApp, KYC
How Phishing via Fake Government Portals Works
Overview: Scammers set up lookalike websites mimicking official Indian government portals for Aadhaar, PAN, or tax filing. The aim is to steal sensitive data, financial details, and, often, to demand fraudulent payments. All digital citizens—especially those less familiar with tech—are at risk, and the scam can result in data theft, identity compromise, and significant financial loss. How It Works: The criminal sets up a website that visually mirrors government sites, often with near-identical URLs and logos. Victims arrive via search ads, phishing SMS, or shared WhatsApp links. The fake site asks for personal data (Aadhaar, PAN, mobile OTPs), sometimes requesting a small UPI 'processing fee' to proceed. Data entered is harvested, which is then abused in further frauds. Sometimes, malware is also delivered to the user's device. India Angle: The scam is uniquely tailored to Indians filing taxes online or managing Aadhaar/PAN updates. Tier 2/3 city residents, senior citizens, and Hindi-medium users are more vulnerable since they’re less likely to spot small spelling or URL differences. Messages may promise fast tax refunds, ration card renewal, or urgent KYC updates. Real Examples: - WhatsApp: “Click here to update Aadhaar KYC to avoid SIM blockage: adhaar-secure.in.” - SMS: “Congratulations! Your tax refund of ₹13,280 is ready. Submit details at incometax-dept.online.” Red Flags: - Website URLs not ending with ‘.gov.in’, with extra or missing characters - Demands for full Aadhaar/PAN and OTP in a single step - Requests for UPI payment for government services - Poor grammar or errors in official-looking communication Protective Measures: - Always use bookmarked, official urls (e.g., uidai.gov.in, incometax.gov.in) - Never pay via UPI for government processes - Double-check security certificates and look for ‘https’ in the address bar - Report any suspicious portals or pop-up ads If Victimised: - Change all passwords, especially on government-linked accounts - Lodge FIR and report via cybercrime.gov.in, 1930 helpline - Inform UIDAI, ITD, or relevant authority for data misuse Related Scams: - SMS KYC Update Phishing - PAN Card Update Fraud - Fake Ration Card Application Portals
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Phishing via Fake Government Portals Target?
General public across India
Red Flags — How to Identify Phishing via Fake Government Portals
- Websites imitating government portals with non-.gov.in URLs
- Requests for Aadhaar or PAN plus OTP together
- Asks for UPI fee payments for public services
- Spelling/grammar mistakes in official-looking messages
What To Do If You Encounter Phishing via Fake Government Portals
- Do not click any links or share personal information
- Block and report the sender immediately
- Report at cybercrime.gov.in or call 1930
- Inform your bank if financial details were shared
How to Report Phishing via Fake Government Portals in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is Phishing via Fake Government Portals?
- Overview: Scammers set up lookalike websites mimicking official Indian government portals for Aadhaar, PAN, or tax filing. The aim is to steal sensitive data, financial details, and, often, to demand fraudulent payments. All digital citizens—especially those less familiar with tech—are at risk, and the scam can result in data theft, identity compromise, and significant financial loss. How It Works: The criminal sets up a website that visually mirrors government sites, often with near-identical
- How does Phishing via Fake Government Portals work?
- Overview: Scammers set up lookalike websites mimicking official Indian government portals for Aadhaar, PAN, or tax filing. The aim is to steal sensitive data, financial details, and, often, to demand fraudulent payments. All digital citizens—especially those less familiar with tech—are at risk, and the scam can result in data theft, identity compromise, and significant financial loss. How It Work
- How to protect yourself from Phishing via Fake Government Portals?
- Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
- How to report Phishing via Fake Government Portals in India?
- Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.