Beware of Phishing



Dear Saurabh Kumar, At ICICI Bank, it has always been our endeavour to make your banking experience safe and convenient. We request you to be aware and vigilant of ‘Phishing’ e-mails. ICICI Bank or its employees will never ask for your personal or financial details, over e-mail, call or SMS. What is Phishing? Phishing is a practice of sending e-mails to acquire information, such as User ID, Password, OTP, URN, PIN etc. by fraudsters trying to gather your personal and financial details. This information is then used to do unauthorised financial transactions in your account. Phishing e-mails and websites have a familiar appearance to deceive customers into thinking that the sender or website is a Bank/RBI/Private Company/ Income Tax Office etc. Points to check while transacting on secure websites of ICICI Bank. https://www.icicibank.com • Check for HTTPS – “S” stands for Secure     ❯ Example: http://www.icicibank.com – ‘S’ is missing and this is not ICICI Bank official site - Don’t transact/share any information on such links • Check for any name or symbol, if preceding the ICICI Bank site     ❯ Example: http://ngicicibank.com – ‘S’ is missing and ‘NG’ is added before ICICI Bank – this is not ICICI Bank official site – Don’t transact/share any information on such links   ❯ Example: http://iciccbank.com or http://iccibank.com -‘S’ is missing and ‘ ICICI Bank “has been spelled incorrectly – this is not ICICI Bank official site – Don’t transact/share any information on such links • Do not click on short links received through unsolicited e-mails or SMSes, unless you are sure about its origin. The message may contain fake news, such as a lottery win, foreign trip, parcel delivery or threats mentioning names of reputed organisations such as Banks, RBI or the Income Tax Department, threatening action for certain non-adherence.     ❯ Example: "Dear customer your XXXX bank account will be suspended! Please complete Re KYC Verification. Update by clicking link http://446bdf227fc4.ngrok.io/xxxbank" Here’s how you can safeguard your account Do’s   • Use an effective anti-virus software   • Download apps from authorised applications or sites   • Be cautious, even if the e-mail or SMS appears to come from an enterprise or bank you do business or banking with. It is a good practice to call up the concerned bank to confirm, in case the e-mail or SMS is suspicious   • Check for genuine SMSes received from banks, which usually contain a sender ID (consisting of the bank's short name) instead of a phone number in the ‘Sender Information’ field   • Hover your cursors over the shortened URLs or use a URL checker to see the full website domain before clicking. Don’t’s   • Click on links, download files or open attachments in e-mails or SMS from unknown senders   • Provide your credentials on non-https websites   • Share confidential banking details through e-mails or links, even if it claims to be from the bank   • Do not open spam mails. Be especially cautious of e-mails that:     ❯ Ask you to confirm personal or financial information over the internet and/or make urgent requests for this information   ❯ Are not personalised   ❯ Try to create urgency, by requesting you to act quickly or by threatening you with frightening information.   • Do not download apps from unverified sources. If you receive an e-mail/call/SMS claiming to be from ICICI Bank, regarding updating sensitive account information like PIN, password, account number or if you notice any spoofed (duplicate/unofficial) ICICI Bank website, let us know by writing to us at antiphishing@icicibank.com. Stay secure and bank safely. Sincerely, ICICI Bank Limited. *Click here to view the Disclaimer