Fake Website Guide

How to Identify Fake Websites in India

Bank portal clones, fake shopping sites, fraudulent government portals — 9 detection methods and an instant AI checker.

Major Fake Website Types in India

These categories account for over 90% of fake website fraud in India.

Fake Bank & NetBanking Portals

Critical

Cloned versions of SBI YONO, HDFC NetBanking, ICICI Bank, Axis Bank, and Kotak login pages. Victims enter credentials which are captured instantly, leading to account takeover and fund transfers.

Fake domain examples

sbi-banking.in
hdfcbankonline.com
icicibanklogin.net

How to detect

✓Genuine URL: onlinesbi.sbi.co.in — not "sbi-banking.in" or "sbibank.com"
✓Official bank sites always use the bank's own domain (hdfc.com, not hdfcbanklogin.net)
✓Real bank sites enforce strict HTTPS with a verified organization certificate (click the padlock)

Official domains

SBI: onlinesbi.sbi.co.inHDFC: netbanking.hdfcbank.comICICI: www.icicibank.comAxis: retail.axisbank.co.in

Fake Shopping & E-commerce Sites

High

Sites mimicking Amazon India, Flipkart, Meesho, and other e-commerce platforms, typically appearing during sale seasons (Big Billion Day, Prime Day, festivals). Products are never delivered or counterfeit.

Fake domain examples

amazon-india-deals.in
flipkart-bigsale.com
meesho-outlet.shop

How to detect

✓Always access Amazon/Flipkart only from their official apps or by typing the URL directly
✓Prices dramatically below market value are a scam signal
✓Check payment acceptance — fake sites often only accept bank transfer or UPI to personal IDs

Official domains

Amazon India: www.amazon.inFlipkart: www.flipkart.comMeesho: www.meesho.com

Fake Government & Scheme Portals

Critical

Fake sites impersonating PM Kisan, IRCTC, Ayushman Bharat, income tax filing, Aadhaar linking, PAN card services, and other government schemes. Collect registration fees, Aadhaar numbers, and bank details.

Fake domain examples

pmkisan-registration.in
ayushman-card-apply.com
irctc-refund.net

How to detect

✓Official government sites end in .gov.in — never .in, .com, .net, or .org
✓Example: incometax.gov.in (official) vs incometax-refund.com (fake)
✓Government portals do not charge registration fees for public schemes

Official domains

IRCTC: www.irctc.co.inIncome Tax: www.incometax.gov.inPM Kisan: pmkisan.gov.inAadhaar: uidai.gov.in

Fake Investment & Trading Platforms

Critical

Sites mimicking Zerodha, Groww, Upstox, and Paytm Money. Show fake portfolio gains to encourage more deposits, then block withdrawals when victims try to cash out.

Fake domain examples

zerodha-pro.in
groww-trade.com
upstox-premium.net

How to detect

✓Official SEBI-registered brokers: zerodha.com, groww.in, upstox.com
✓Verify broker registration at sebi.gov.in before depositing
✓If you cannot withdraw your balance, stop depositing immediately

Official domains

Zerodha: zerodha.comGroww: groww.inUpstox: upstox.com

9 Red Flags of a Fake Website

Check for these before clicking, signing up, or paying on any unfamiliar site.

Suspicious URL Structure

Misspellings (amaz0n.in), hyphens (sbi-bank.com), extra words (amazon-india-deals.in), or wrong TLD (flipkart.net instead of .com).

Missing or Invalid SSL

No padlock in browser address bar, or browser shows "Not Secure" warning. Legitimate banking and payment sites always use valid HTTPS.

Domain Registered Recently

Check domain age at rakshaai.co/check. Most phishing sites are created within days of their attack. Genuine company websites are years old.

Received via WhatsApp or SMS

Banks, IRCTC, and legitimate services do not send their login URLs via WhatsApp or SMS messages to customers proactively.

Requests OTP or Full Card Details

Any site asking for your UPI PIN, debit card CVV, or banking OTP on a form field is attempting fraud. These are never entered on websites.

No Contact Information

Genuine businesses display a physical address, support phone number, and registered email. Fake sites have no verifiable contact details.

Prices Too Good to Be True

Fake shopping sites often list popular items at 50–90% below market price to attract victims who prioritise deals over verification.

Low Trust Score on RakshaAI

Check any URL at rakshaai.co/check. A Trust Score below 40 means multiple risk signals detected — domain age, blacklist matches, and more.

Poor Grammar and Design Quality

Many fake sites have inconsistent fonts, broken images, spelling errors, or layouts that look "slightly off" compared to the original.

Common Questions

How can I tell if a website is fake?▾

Nine key signals: (1) URL misspellings or wrong domain. (2) Missing or invalid SSL certificate. (3) Domain registered very recently. (4) Received via WhatsApp/SMS link. (5) Asks for OTP or CVV. (6) No contact information. (7) Prices unrealistically low. (8) Low Trust Score at rakshaai.co/check. (9) Poor grammar or design quality. Check any suspicious URL instantly at rakshaai.co/check for an AI-powered safety analysis.

How do I check if a website is safe before buying?▾

Go to rakshaai.co/website-safety-checker and paste the website URL. You will receive a Trust Score (0–100) with detailed analysis covering domain age, SSL certificate, blacklist checks, and community reports — in under 5 seconds. Score above 70 = generally safe. Below 40 = high risk.

What is a fake SBI or HDFC banking website?▾

A fake banking website is a cloned version of SBI YONO, HDFC NetBanking, or another bank's portal that captures your login credentials when you enter them. The real SBI internet banking URL is onlinesbi.sbi.co.in. The real HDFC URL is netbanking.hdfcbank.com. Any other URL claiming to be these banks is a phishing site.

Is it safe to shop on new websites in India?▾

Check them first at rakshaai.co/check. New websites (registered under 30 days) are higher risk because most phishing sites are brand new. Additionally: look for GST number on the website, read reviews on Google and Trustpilot, verify payment options (avoid sites that only accept bank transfer), and check return/refund policy.

What should I do if I entered my bank details on a fake website?▾

Act immediately: (1) Change your internet banking password and MPIN right now. (2) Call your bank's 24/7 helpline and request an account block or card block. (3) If OTP was also shared, report immediately to bank for transaction reversal. (4) Call 1930 — cybercrime helpline. (5) File complaint at cybercrime.gov.in. Time is critical.

Verify Any Website in 5 Seconds

AI-powered Trust Score — domain age, SSL, blacklists, community reports. Free, no account.

Check Website Safety →

Major Fake Website Types in India

These categories account for over 90% of fake website fraud in India.

Fake Bank & NetBanking Portals

Critical

Cloned versions of SBI YONO, HDFC NetBanking, ICICI Bank, Axis Bank, and Kotak login pages. Victims enter credentials which are captured instantly, leading to account takeover and fund transfers.

Fake domain examples

sbi-banking.in
hdfcbankonline.com
icicibanklogin.net

How to detect

✓Genuine URL: onlinesbi.sbi.co.in — not "sbi-banking.in" or "sbibank.com"
✓Official bank sites always use the bank's own domain (hdfc.com, not hdfcbanklogin.net)
✓Real bank sites enforce strict HTTPS with a verified organization certificate (click the padlock)

Official domains

SBI: onlinesbi.sbi.co.inHDFC: netbanking.hdfcbank.comICICI: www.icicibank.comAxis: retail.axisbank.co.in

Fake Shopping & E-commerce Sites

High

Fake domain examples

amazon-india-deals.in
flipkart-bigsale.com
meesho-outlet.shop

How to detect

✓Always access Amazon/Flipkart only from their official apps or by typing the URL directly
✓Prices dramatically below market value are a scam signal
✓Check payment acceptance — fake sites often only accept bank transfer or UPI to personal IDs

Official domains

Amazon India: www.amazon.inFlipkart: www.flipkart.comMeesho: www.meesho.com

Fake Government & Scheme Portals

Critical

Fake domain examples

pmkisan-registration.in
ayushman-card-apply.com
irctc-refund.net

How to detect

✓Official government sites end in .gov.in — never .in, .com, .net, or .org
✓Example: incometax.gov.in (official) vs incometax-refund.com (fake)
✓Government portals do not charge registration fees for public schemes

Official domains

IRCTC: www.irctc.co.inIncome Tax: www.incometax.gov.inPM Kisan: pmkisan.gov.inAadhaar: uidai.gov.in

Fake Investment & Trading Platforms

Critical

Sites mimicking Zerodha, Groww, Upstox, and Paytm Money. Show fake portfolio gains to encourage more deposits, then block withdrawals when victims try to cash out.

Fake domain examples

zerodha-pro.in
groww-trade.com
upstox-premium.net

How to detect

✓Official SEBI-registered brokers: zerodha.com, groww.in, upstox.com
✓Verify broker registration at sebi.gov.in before depositing
✓If you cannot withdraw your balance, stop depositing immediately

Official domains

Zerodha: zerodha.comGroww: groww.inUpstox: upstox.com

9 Red Flags of a Fake Website

Check for these before clicking, signing up, or paying on any unfamiliar site.

Suspicious URL Structure

Misspellings (amaz0n.in), hyphens (sbi-bank.com), extra words (amazon-india-deals.in), or wrong TLD (flipkart.net instead of .com).

Missing or Invalid SSL

No padlock in browser address bar, or browser shows "Not Secure" warning. Legitimate banking and payment sites always use valid HTTPS.

Domain Registered Recently

Check domain age at rakshaai.co/check. Most phishing sites are created within days of their attack. Genuine company websites are years old.

Received via WhatsApp or SMS

Banks, IRCTC, and legitimate services do not send their login URLs via WhatsApp or SMS messages to customers proactively.

Requests OTP or Full Card Details

Any site asking for your UPI PIN, debit card CVV, or banking OTP on a form field is attempting fraud. These are never entered on websites.

No Contact Information

Genuine businesses display a physical address, support phone number, and registered email. Fake sites have no verifiable contact details.

Prices Too Good to Be True

Fake shopping sites often list popular items at 50–90% below market price to attract victims who prioritise deals over verification.

Low Trust Score on RakshaAI

Check any URL at rakshaai.co/check. A Trust Score below 40 means multiple risk signals detected — domain age, blacklist matches, and more.

Poor Grammar and Design Quality

Many fake sites have inconsistent fonts, broken images, spelling errors, or layouts that look "slightly off" compared to the original.

Common Questions

How can I tell if a website is fake?▾

How do I check if a website is safe before buying?▾

What is a fake SBI or HDFC banking website?▾

Is it safe to shop on new websites in India?▾

What should I do if I entered my bank details on a fake website?▾