Phishing Email or Message
You received a suspicious message asking for personal or banking details.
What this generally means
Phishing attempts try to trick you into revealing sensitive information. Reporting them early — even if you didn't fall for it — helps prevent others from being scammed.
Your journey
You Are Here
You're trying to understand what to do about a phishing attempt. That's a good first step.
Understand Issue
Read through what this situation generally means and what your options are.
Gather Documents
Collect the evidence and paperwork that will support your case.
Contact Resource
Reach out to the most relevant authority, helpline, or legal aid service.
Escalate If Needed
If the first contact doesn't resolve things, escalate to a higher forum or authority.
Follow Up
Track your complaint's status and keep records of every response you receive.
Common next steps
- 1Do not click any links or share any information.
- 2Verify the sender through the organization's official channel.
- 3Report the message to the National Cyber Crime Reporting Portal or CERT-In.
- 4If you did share details, change your passwords and alert your bank immediately.
Useful documents
- Screenshot of the phishing message
- Sender's email/number
- Any linked URLs (do not click)
Relevant authorities
- CERT-In
- National Cyber Crime Reporting Portal
Frequently asked questions
I clicked the link but didn't enter details — am I safe?+
Likely, but run a security scan on your device and monitor your accounts for unusual activity just in case.
How can I tell if a message is phishing?+
Watch for urgency, spelling errors, mismatched sender addresses, and requests for OTPs or passwords — legitimate organizations rarely ask for these directly.
Verified resources
CERT-In (Indian Computer Emergency Response Team)
National nodal agency under MeitY for responding to cybersecurity incidents and vulnerabilities.
National Cyber Crime Reporting Portal
I4C (Ministry of Home Affairs) portal to report all types of cybercrime, especially crimes against women and children. Supported by the 1930 helpline.
Understanding the IT Act (Guide)
Plain-language explainer on cybercrime provisions under the Information Technology Act, 2000.