आपको इंटरनेट बैंकिंग लॉग-इन पेज पर ले जाया जाएगा.

क्या आप जारी रखना चाहते हैं?

आपको इंटरनेट बैंकिंग लॉग-इन पेज पर ले जाया जाएगा.

क्या आप जारी रखना चाहते हैं?

आपको इंटरनेट बैंकिंग लॉग-इन पेज पर ले जाया जाएगा.

क्या आप जारी रखना चाहते हैं?

आपको इंटरनेट बैंकिंग लॉग-इन पेज पर ले जाया जाएगा.

क्या आप जारी रखना चाहते हैं?

आपको इंटरनेट बैंकिंग लॉग-इन पेज पर ले जाया जाएगा.

क्या आप जारी रखना चाहते हैं?

हमारे ब्लॉग

ऑनलाइन धोखाधड़ी को पहचानें और अपनी सुरक्षा करें

Pharming Scams: How do they work and how to stay safe

With the increasing use of online banking, cyber criminals are finding new ways to steal sensitive financial information. One such dangerous method is pharming-a sophisticated scam that redirects users from legitimate websites to fake ones, allowing fraudsters to steal banking credentials.

फार्मिंग क्या है?

Pharming is a cyber-attack where scammers manipulate your device or internet settings to redirect you to a fake website that looks identical to a genuine one (e.g. your bank's website). The goal is to trick you into entering your login credentials, OTPs, or credit card details, which are then stolen and used for fraud.

April 24, 2025

How Does Pharming Happen?

Pharming attacks usually occur in two ways:

1 DNS Spoofing (DNS Cache Poisoning)

  • The Domain Name System (DNS) translates website names (e.g., www.axisbank.com) into IP addresses.
  • Cyber criminals hack or manipulate the DNS server so that when you type a legitimate website (e.g. www.axisbank.com), you are redirected to a fraudulent lookalike website controlled by the scammer.

2 Malware-Based Pharming

  • Fraudsters trick users into downloading malicious software via fake ads, email attachments, or infected links.
  • Once installed, this malware changes your host file settings, forcing your browser to open a fraudulent banking website instead of the real one.

In both cases, the fake website looks identical to the bank's website, making it difficult to detect the scam until it's too late.

How to Safeguard Against Pharming Attacks?

1 Check for HTTPS & Website Authenticity

  • Before entering your banking credentials, check if the website URL starts with "https://" (not just "http://").
  • Look for a padlock icon in the address bar, indicating a secure connection.
  • Be cautious if the website looks slightly different than usual.

2 Avoid Clicking on Suspicious Links

  • Never open links or apk files sent via SMS, WhatsApp, or emails claiming to be from your bank.
  • If you receive an email about banking issues, visit the bank's website manually by typing its address.

3 Keep your device & Antivirus updated

  • Regularly update your operating system, browser, and security software to protect against malware-based pharming.
  • Install a reputable antivirus program that includes anti-phishing and anti-malware protection.

4 Use secure Wi-Fi networks

  • Avoid logging into your bank account using public Wi-Fi (like in cafes, airports, or hotels).
  • If necessary, use a VPN (Virtual Private Network) to secure your internet connection.

5 Enable Multi-Factor Authentication (MFA)

  • Activate two-factor authentication (2FA) for online banking.
  • Even if fraudsters steal your credentials, they won't be able to access your account without the additional OTP or biometric verification.

6 Verify your bank's official communication channels

  • Axis Bank and other financial institutions will never ask for sensitive details via email, SMS, or phone calls.
  • If you receive a suspicious message, contact Axis Bank's customer support directly.

How to report a fraudulent website mimicking Axis Bank?

If you come across a suspicious website pretending to be Axis Bank, report it immediately to protect yourself and others.

Report to Axis Bank

  • Email: Send details (including the fraudulent URL) to phishing@axisbank.com
  • Customer Care: Call Axis Bank's customer support from the official number on their website.
  • Visit a branch: If necessary, report the issue in person at the nearest Axis Bank branch.

Report to National Cyber Crime Portal

  • File a complaint at www.cybercrime.gov.in
  • Call 1930, the Cyber Crime Helpline, to report phishing or pharming fraud.

Report to Google Safe Browsing

  • If you suspect a phishing or pharming website, you can report it to Google: https://safebrowsing.google.com/safebrowsing/report_phish/

Remember:

  • Banks never ask for passwords, PINs, or OTPs via email, SMS, or calls.
  • Always check the website URL before logging into your account.
  • If in doubt, STOP and report the fraudulent site immediately.

By staying alert and reporting suspicious activities, you can help prevent cyber criminals from exploiting others.