Phishing & Fake messages

Question 1 Report

A phishing email includes your full name, phone number, and the last four digits of your account number. Does this prove the sender is your bank?

Scammers can obtain real personal information from many sources.

No. Accurate personal details can make phishing more convincing but should not replace independent verification No, because banks never know customers' phone numbers Yes, only your bank could know those details Yes, if all three details are correct

Question 2 Report

A message from an unknown number says, 'I accidentally sent ₹8,000 to your account. Please send it back.' Your bank account shows no such credit. What should you do?

Your actual account history matters more than the sender's claim.

Send ₹1 first to confirm the UPI ID Do not transfer money based on the message and rely on verified account records or your bank for resolution Send your bank statement to prove you did not receive it Send ₹8,000 because keeping accidental money is wrong

Question 3 Report

A fake banking website asks you to enter your username, password, card number, CVV, ATM PIN, and OTP on a single page. What should this combination tell you?

Consider whether a legitimate login should require every financial secret at once.

The site is extra secure because it verifies many details Enter the information if the page displays a padlock icon Enter everything except the OTP The request is highly suspicious and you should not submit the information

Question 4 Report

You receive a link that visually reads 'yourbank.com', but when you preview it, the actual destination is an unrelated domain. What should you do?

Displayed link text and the actual destination can be different.

Open it in private browsing mode Open it only after clearing browser history Avoid the link because the actual destination does not match the expected official domain Open it because the visible text shows the correct bank

Question 5 Report

An SMS claims your credit card limit has been increased and asks you to confirm the upgrade through a link. You never requested an increase. What should you do?

Unexpected beneficial offers can be phishing bait too.

Verify the offer through your card issuer's official app or customer-care channel Click the link but do not accept the final confirmation Reply with the last four digits of your card Accept immediately because a higher limit is beneficial

Question 6 Report

After entering your card details on a suspicious page, you realize it may have been phishing, but you did not provide an OTP. What should you do?

Information can be compromised even if you stop before the final step.

Do nothing because the OTP was not shared Immediately contact your card issuer through official channels and take the recommended steps to secure the card Return to the phishing page and delete the information Wait until an unauthorized transaction appears

Question 7 Report

An email claims to be from your bank's fraud department and correctly describes a transaction you recently made. It then asks for your internet banking password to 'confirm ownership.' What should you do?

Correct contextual information does not make a request for a password appropriate.

Provide only part of the password Provide the password because the sender knows about a real transaction Change the password to something temporary and send that instead Do not provide the password and independently contact the bank if verification is needed

Question 8 Report

A customer-care account on social media replies to your public complaint and asks you to continue in a private message by sharing your card number, CVV, and OTP. What should you do?

Fraudsters can watch public complaints and impersonate support teams.

Share the information because the account contacted you about your real complaint Do not share the credentials and contact the organization using its independently verified support channel Share only the card number and CVV Ask the account to send its logo before sharing the details

Question 9 Report

You receive a message claiming your credit card reward points expire tonight. It asks you to log in through a link to redeem them. What should you do?

Deadlines can be used to make attractive offers feel urgent.

Use the link quickly before the points expire Click the link as long as it displays your bank's logo Reply with your card number and ask how many points you have Open your card issuer's official app or website independently and check your rewards there

Question 10 Report

A relative messages you from a new phone number saying their phone was damaged and they urgently need money. What is the safest first step?

The story may be plausible, but the new number has not been authenticated.

Ask the new number whether they really are your relative Send a smaller amount first Verify the person's identity through another trusted contact method before sending money Transfer the money because emergencies require quick action

Question 11 Report

A bank-related message contains a link beginning with 'https://'. Does HTTPS prove the website is genuine?

Encryption and identity are related but not identical concepts.

Yes, but only on mobile devices Yes, HTTPS means the bank owns the website No, because HTTPS websites are always unsafe No. Phishing websites can also use HTTPS, so the domain and context still need verification

Question 12 Report

A banking email links to 'mybank-secure-login.example' instead of the bank's normal domain. The page looks professional. What is the strongest warning sign?

The visual appearance of a page is easier to copy than its legitimate web address.

The page uses modern graphics The web address is different from the bank's known official domain The page loads quickly The page contains a login form

Question 13 Report

You receive an SMS claiming to be from your bank saying a new device has logged into your account. The message includes a link to 'secure your account immediately.' What should you do?

A security warning can itself be used as phishing bait.

Forward the link to another phone and open it there Open the bank's official app independently and review your account or security activity Reply to the SMS asking which device logged in Click the link because account-security alerts require immediate action

Question 14 Report

A message claiming to be from your bank asks you to call a mobile number immediately to reverse a suspicious transaction. What is the safest way to contact the bank?

Do not let a suspicious message choose the channel you use to verify it.

Reply asking the sender whether the number is genuine Search social media comments for someone claiming to represent the bank Use a customer-care number obtained independently from the bank's official app, website, or other trusted bank source Call the number in the message because it is specifically for fraud cases

Question 15 Report

You receive an email saying your bank account has been locked. Instead of a link, it provides a QR code that supposedly unlocks the account. How should you treat the QR code?

QR codes can hide destinations just as shortened links can.

As safe if your phone's camera recognizes it As suspicious until the account issue is independently verified through the bank As safe if the email contains your name As automatically safe because it is not a clickable link