Disclaimer : Please do not share your PI account password and any other confidential information with anyone even if he/she claims to be from PI. We advise our customers to completely ignore such communications & report to us at cybercell@pi.com

Phishing Fraud

1. What is Phishing?

1. Phishing is an act undertaken by fraudsters to gain your private and sensitive information through emails that appear to be sent by PI. Such fake emails encourage you to click on a link in the email which leads you to a fake website with a similar look and feel as that of PI's authentic website. It is designed to capture your personal confidential account information such as your username password & OTP authentic website. It is designed to capture your personal confidential account information such as your username password & OTP.
2. Customers' email addresses are obtained/purchased by the fraudster through non-trusted sites where the customer would have revealed his email ID by means of casual browsing or shared it on chat rooms, blogs or mailing lists, etc.

2. How do the fraudsters operate?

1. Fraudsters send spoofed emails, appearing to be sent by PI, to large number of recipients with an urgent tone that calls for quick action to verify, update or reveal your confidential account information by clicking onto a link in the email .Once the recipient clicks on the link in the email, she is diverted to a fake website with a similar look and feel of PI's original website. The customer is presented a web form to divulge his confidential account information i.e. OTP, Username, Password, Mobile Number.
2. Once the unaware customer reveals his confidential account information on the fake website he may be directed to the authentic website of PI to suppress any suspicion arising in the customer's mind. This is how the customer's identity is compromised .
3. The customer's confidential account information or identity credentials are then used by the fraudster to gain access to the customer's account to commit fraudulent transactions.

3. How do you identify a fake / phishing email?

1. The fraudster may use PI's email address, domain name, logo, etc to give an authentic look to the fake email.
2. Do not rely on the name and source in the "From" field of the email address as it may be easily manipulated by the fraudster to a valid email account of PI.
3. Very often, such fake emails are poorly drafted and may have spelling or grammatical mistakes. Such fake emails will always encourage you to click on to a link to verify or update your confidential account information.
4. The links embedded in such fake emails may sometimes look authentic but when you move the cursor/pointer over the link, there may be an underlying link/url to a fake website.

4. How do you identify a counterfeit / fake website?

1. Verify the URL of the webpage (web page address):
2. Most of the counterfeit / fake webpage addresses start with "http://" unlike PI that would start with "https://" and not http://
3. While using PI App or PI Website, always make sure that the domain name starts from:
4. Also verify the end letter "s" that ensures the security of communication by means of encryption between webpage and the visitor accessing it.

Report a fraud or phishing

1. If you receive an e-mail claiming to be from PI regarding updating sensitive account information like OTP, password, mobile number, let us know by forwarding the e-mail to cybercell@pi.com
2. Never provide sensitive account information like OTP, password,Mobile Number or personal details in response to an e-mail. If you have entered such information, report it to us immediately.
3. If you notice any spoofed (duplicate/unofficial) PI website, let us know by writing at cybercell@pi.com
4. Be it any channel, on social media/ via telephone/email/written correspondence, PI will never ask you to disclose your confidential details (Net-Banking/Credit/Debit card details)
5. So, we would request all our customers to not fall prey to any such offer/schemes where you're asked to give any of your confidential details! Please don't trust or transact on offers listed on unofficial web-pages/apps.
6. If you come across such spoof links (especially on social media platforms like Facebook), please report it to us and we will take necessary action.
7. We hope that this helps all PI users to conduct transactions safely all across the web.
8. In case of any concerns or queries to just get more information, we are always listening at cybercell@pi.com
9. Feel free to write in anytime.