All patternsScam pattern 06 of 08
The address that is almost right
A web address one or two characters away from your bank's real one.
A message of this kind
Unusual login detected1. Secure your account now at https://hdfcbnk-secure.com2/login
What each part is doing
“Unusual login detected”
Alarming and vague. A real alert says what was detected and where.
“hdfcbnk-secure.com”
Read it letter by letter. The real one is hdfcbank.com. One missing letter is the whole scam.
What happens if someone acts on it
The page is a copy of the real login screen, often pixel for pixel, sometimes even forwarding your OTP to the real bank while capturing it.
Got a message that looks like this?
Check a messageIt runs on your phone. Nothing is sent anywhere, and nothing is kept.