Fake government portals turn routine document applications into identity-theft traps

Fraudulent websites mimicking official Indian services are harvesting personal and banking details, prompting warnings to verify web addresses and avoid unsolicited links.

Fake websites posing as government portals are putting people at risk of identity theft and financial fraud as more routine services move online. The warning matters in India, where people increasingly use the internet to apply for or update documents such as PAN cards, Aadhaar records, passports, driving licences and voter IDs. The safest approach is to begin only through the relevant official portal or an authorised service provider, rather than links found through search engines, messages or social media.

These bogus sites can look convincing at first glance. According to guidance from the Better Business Bureau, scammers often rely on small changes in domain names, copied branding and low-quality pages that may only reveal themselves on closer inspection. The US General Services Administration’s inspector general has also warned that fraudulent government lookalikes are often pushed through search results or ads, making a careful check of the web address essential before any login or payment.

Indian cyber-safety alerts have drawn similar conclusions. Business Standard reported that fraudulent domains have been used to create fake identity documents, citing cybersecurity firm CloudSEK, which said more than 167,000 fake documents had been generated through such websites since 2021. The Times of India has also described a phishing campaign involving fake “PAN 2.0” emails that tried to lure recipients into handing over personal and banking details by creating a sense of urgency. In both cases, the method is the same: imitate an official service closely enough to lower suspicion and then harvest sensitive data.

Users are advised to treat unsolicited links with caution, especially those sent through WhatsApp, SMS, email or social media. Personal details such as Aadhaar numbers, PAN information, passwords and one-time passwords should never be entered on unfamiliar sites, and payment requests should be treated sceptically if they involve strange links or demands for money to be transferred to a personal account. If a site looks doubtful, the safest move is to stop immediately and report it through India’s cybercrime portal. Public awareness remains one of the simplest defences: a polished design does not prove a site is genuine.

Disclaimer: This article is intended to inform and educate, not to recommend or endorse any financial product, investment or strategy. Please consider your own financial circumstances and seek professional advice where appropriate before making financial decisions.