Fraud Perpetrated Through Fake Websites: Government Explains How to Distinguish Between Real and Fake

The government recently issued a warning regarding fraud being committed through fake websites. Scammers create counterfeit websites—mimicking educational institutions and platforms like DigiLocker—to steal people's personal information. They then use this data to carry out fraudulent activities. Scammers gain access to sensitive details such as people's Aadhaar cards, driving licenses, Voter IDs, email addresses, and even phone numbers.

Issuing an advisory on this matter, the Ministry of Electronics and Information Technology (MeitY) has warned students to remain vigilant against fake websites. An advisory posted on X (formerly Twitter) via the 'Digital India' handle revealed the discovery of a fake website—"digilocker.cisceboard.org"—created by scammers in the name of DigiLocker and CISCE. This site is designed to look exactly like the authentic DigiLocker portal. This fake website is confusing users and stealing their personal information, including One-Time Passwords (OTPs).

How to Identify Real vs. Fake Websites?

Most fake websites are designed to look exactly like their genuine counterparts, making it difficult for the average person to distinguish between the two. If you are not tech-savvy, you may find it particularly challenging to identify such fraudulent sites. However, by paying attention to a few basic details, you can determine whether a website is legitimate or fake.

• First, check the URL. If a website's URL looks suspicious or unusual to you, exercise immediate caution. Hackers often attempt to use URLs that closely resemble those of the original websites. However, if the exact domain name is unavailable, they may resort to using any available URL.
• Furthermore, instead of directly clicking on a link found via a Google search, try typing the website's URL manually into your browser. You should strictly avoid clicking on any suspicious links.
• To prevent fake applications from being downloaded to your phone, ensure that 'Google Play Protect' is enabled. This feature helps block the installation of fraudulent apps on your device.
• Always enter your personal information exclusively on official websites. Make it a habit to manually type out the website's URL to ensure you are accessing the official domain. A website is considered secure only if its URL begins with "https://".