Online Banking: Could you be entering your bank details on a fake website? Here’s how to identify one..
Fake Bank Websites: In today’s digital age, the need to stand in long queues at banks has all but vanished. Tasks like transferring money or checking account balances can be completed in minutes using UPI apps. Meanwhile, for other essential banking-related activities—such as updating your mobile number, changing your address, or requesting a chequebook—people rely on net banking.
Cybercriminals are also exploiting the convenience of online banking. In one alarming case, fraudsters created a fake Canara Bank website in 2021 and swindled an individual out of ₹27 lakh. Five years later, the police have arrested two suspects in connection with this incident.
Modern-day hackers have become highly sophisticated; they design fake websites to look identical to the real ones, replicating logos and color schemes. When an unsuspecting user searches for their bank on Google, they may inadvertently fall into the trap of these fraudulent sites and lose their money. Here is how you can distinguish between a genuine website and a fake one.
Check for the Padlock in the Address Bar
To avoid falling victim to scams—like the one involving the fake Canara Bank website—always examine the website’s address bar (the URL) carefully. Any legitimate bank website should begin with "https://". The "s" stands for "secure," and right next to it, you should see a small padlock icon. If a site displays only "http://" and lacks the padlock icon, do not enter your personal details under any circumstances.
Government-Mandated Domain
Furthermore, to curb fraud, the Reserve Bank of India (RBI) has directed all Indian banks to use the ".bank.in" domain. This specific domain cannot be acquired by an ordinary individual or a fraudster. Therefore, always verify that your bank’s web address ends with this official domain.
How Fake Websites Are Created
Cybercriminals exploit people's haste by making subtle changes to the spelling of a website's address. For instance, in the name of Canara Bank or any other bank, they might replace a lowercase 'l' (L) with an uppercase 'I' (i), or substitute the letter 'o' with the digit '0' (zero). Often, they create fraudulent links by appending terms like "online," "kyc," or "update" to the bank's name.
Exploiting Google Ads
Another major method used for fraud involves "sponsored ads" that appear in Google search results. When you search for a bank's name or its customer care number on Google, the top one or two results are frequently paid advertisements placed by scammers. Users often click on the first link they see without checking it carefully. Therefore, always avoid links marked as "Sponsored" and instead click on the official website that appears further down in the search results.
How to Identify Fake Websites
If you land on a banking website and have even the slightest doubt, perform a few checks before attempting to log in. Scammers often do not build an entire website; they merely design a "front" login page to steal your ID and password. If you try to click on other sections—such as "About Us," "Privacy Policy," or "Contact Us"—you will find that these links either do not work at all or simply redirect you back to the login page.
Another key indicator is that no legitimate bank will ever ask for your ATM PIN, CVV number, card expiry date, and OTP all at once during the login process. If a website presents a form requesting all these details immediately upon your arrival, be on high alert and close the page right away.
Disclaimer: This content has been sourced and edited from Money Control. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.
