Email is an essential part of daily life for millions of Indians — from online banking and shopping to job applications and government services. But because it’s used so widely, it’s also a favourite target for cybercriminals. Phishing, fake messages, and online scams are becoming more sophisticated, making it harder to tell real emails from fraudulent ones. The good news is that with a few smart habits and some awareness, you can protect yourself from most online fraud attempts.

What Is Phishing – and Why Does It Work?

Phishing is a type of online scam where criminals try to trick you into revealing personal information such as passwords, bank details, or Aadhaar numbers. This usually happens through emails that appear to come from trusted sources — for example, your bank, a courier company, or even a government department.

Scammers often use fear or urgency to make you act quickly. You might receive a message saying your bank account will be frozen, or that you need to verify your PAN details immediately. When you click the link, you’re taken to a fake website that looks real, where your information can be stolen.

How to Recognise a Fake Email

Even though phishing emails can look convincing, there are usually small signs that give them away. Here are some common red flags:

• Sender’s address: Always check who the email is really from. A message from “support@hdfc-secure.com” is not the same as “support@hdfcbank.com”.
• Language and tone: Many fake emails contain spelling mistakes, awkward phrasing, or an overly urgent tone.
• Links and attachments: Hover your mouse over a link (without clicking) to see where it leads. If the address looks suspicious, don’t open it.
• Unexpected messages: Be cautious if you receive an email about a parcel you didn’t order or a payment you don’t recognise.
• Pressure to act fast: Scammers often try to rush you — for example, by threatening to block your account or charge a fee.

Good Habits That Keep You Safe

Protecting yourself from phishing isn’t just about spotting fake emails — it’s also about building strong digital habits. Here are some key practices:

• Use strong, unique passwords for every account. Consider using a password manager to keep track of them.
• Enable two-factor authentication (2FA) wherever possible. This adds an extra layer of security even if someone gets your password.
• Keep your software and devices updated. Many attacks exploit known security flaws that updates can fix.
• Never share personal information via email, such as passwords, OTPs, or bank details. Legitimate organisations will never ask for these.
• Stay sceptical: If something sounds too good to be true — like winning a lottery you never entered — it probably is.

What to Do If You’ve Been Scammed

Even the most careful person can fall victim to a phishing attack. If you’ve clicked on a suspicious link or entered your details on a fake site, act quickly:

1. Change your passwords immediately, especially for your email, bank, and social media accounts.
2. Contact your bank if you’ve shared card or account details. They can block your card and monitor for suspicious transactions.
3. Report the incident to the National Cyber Crime Reporting Portal at https://cybercrime.gov.in or call the helpline number 1930.
4. Inform your contacts if you think scammers might use your email to send fake messages in your name.

Use Technology to Your Advantage

Many tools can help you stay safe online. Most email services automatically filter suspicious messages, but you can also install security software that warns you about dangerous websites and attachments.

Consider using a password manager and regularly backing up your important data. This ensures you can recover your information if something goes wrong.

Digital Safety Starts with Awareness

Phishing and online fraud are becoming more advanced, but that doesn’t mean you’re powerless. With awareness, good habits, and the right tools, you can protect your email and personal information effectively.

Staying safe online isn’t about being paranoid — it’s about being alert. The more you understand how scammers operate, the harder it becomes for them to trick you.