Omozing Answers › Scams and fraud

How do I spot a phishing email?

In short: Slow down and check three things before you click anything: who really sent it (the full address, not the display name), what it wants you to do (click, download, pay or share a code), and how hard it is pushing you to do it now. Phishing emails pretend to be a bank, lender or credit bureau so you hand over an OTP, password or fee. A genuine bank, lender or bureau never asks for your OTP, PIN, CVV or password, and no one can sell you a higher credit score.

Written by the Omozing Credit Team · Reviewed for accuracy by our credit and compliance team · Updated October 2026

A phishing email, taken apart

Most phishing emails are built from the same few parts. Here is a made-up example with the seven giveaways numbered. The sender, company and links are invented; none of them belong to a real business.

A made-up phishing email, annotated

A MADE-UP EXAMPLE · NOT A REAL SENDER From: ScoreBoost Pro <scoreboost.offers@gmail-mail.co> To: you@example.com URGENT: Your credit score will be frozen in 24 hours Dear Costumer, We have detected unusual activity on you’re account. Your score will drop by 150 points unless you act today. GUARANTEED +120 point boost for just ₹1,999! VERIFY NOW Link goes to: http://scoreboost-verify.xyz/login On the next page, enter the OTP sent to your phone and pay the ₹1,999 fee to confirm your boost. Regards, Score Team Attachment: Credit_Report_Update.zip (2 MB) 1 2 3 4 5 6 7 1 · Look-alike addressFriendly name, but thedomain is a lookalike 2 · A panic deadlinePressure to act beforeyou stop and think 3 · Spelling slipsCostumer, you’re account 4 · A guaranteed boostNo one can sell youa higher score 5 · A hidden linkThe button leads to a siteyou have never heard of 6 · Asks for OTP and feeGenuine firms never askfor either 7 · Surprise attachmentA .zip can hide malware;don’t open it

A made-up example. ScoreBoost Pro and every address shown are invented. Real phishing emails change their wording all the time, so learn the pattern rather than the exact words.

The seven signs, and what a genuine email looks like instead

Warning signWhat the scammer is doingWhat a genuine sender does
1. Look-alike senderPuts a trusted-sounding name in front of a free-mail or misspelt domainWrites from its own domain. Tap the name to see the full address
2. Panic deadline“Blocked in 24 hours”, “last warning”, so you act before checkingGives you time and a way to check independently
3. Spelling and grammarRushed, mass-produced textIs usually proofread, though a clean email isn’t proof on its own
4. Guaranteed boostSells something that can’t be soldNo lender or bureau charges to raise a score
5. Hidden linkThe button text and the real address don’t matchLinks go to its own website; you can also type the address yourself
6. OTP, PIN or feeNeeds the code to move your money, or the fee to pocketNever asks for OTP, PIN, CVV or password
7. Surprise attachmentHides malware in a .zip, .apk or “invoice”Rarely sends files you didn’t request

Look out for bank emails too. Indian banks have moved their websites to addresses ending in .bank.in, so a “bank” link that ends in anything else deserves a second look. That rule is about banks only; for any other company, type its address yourself instead of trusting the link.

What most people get wrong: they check whether the email looks professional. Scammers copy logos and layouts easily. What they can’t fake as easily is the sender’s real domain and where the link actually goes. Check those two things, and ignore how polished it looks.

A 30-second check before you click

  1. Read the full sender address

    Tap or hover over the name. A free-mail account or an odd domain claiming to be a bank, lender or bureau is a red flag.

  2. Hover before you tap

    On a computer, rest the pointer on the button to see the real link. On a phone, press and hold. If it doesn’t match the company, close the email.

  3. Go the long way round

    Open the company’s website or app yourself and log in there. If something really needs your attention, you will see it.

  4. Report and delete

    Mark it as phishing in your email app. If it also reached you by call, SMS or WhatsApp, report it under “Chakshu” on the Sanchar Saathi portal (sancharsaathi.gov.in).

If you have already clicked

For the full first-hour plan, see what to do after clicking a phishing link or sharing an OTP.

Need a loan? Apply only on the official site

Omozing’s website is www.omozing.com and our email is info@omozing.com. We never ask for upfront fees before approval, and we pay only into your own bank account.

Think you can spot a scam?

Try our free 2-minute test: 12 real-style messages. How many can you catch?

Frequently asked questions

What is a phishing email?

It is an email that pretends to come from someone you trust, such as a bank, lender or credit bureau, to trick you into sharing codes, passwords or money, or into installing harmful software.

Is it dangerous just to open a phishing email?

Opening it is usually low risk. The danger comes from clicking its links, opening its attachments, replying with details or paying what it asks.

Will my bank or lender ever ask for my OTP by email?

No. Genuine banks, lenders and credit bureaus never ask for your OTP, PIN, CVV or password, by email or any other way.

Can someone really boost my credit score for a fee?

No. Accurate negative entries can’t be removed for a fee, and errors are corrected free through a dispute. See why fee-based score repair doesn’t work.

Where do I report a phishing email in India?

Report fraud attempts on Sanchar Saathi under “Chakshu”, and if you lost money or shared an OTP, call 1930 or file at cybercrime.gov.in at once.

Next questions people ask:

I clicked a phishing link or shared my OTP. What do I do now? Is a “KYC update” or “account blocked” SMS genuine? Is this call or message really from CIBIL or Experian?

Omozing is the digital lending brand of Aparampaar Finance Private Limited, an RBI-registered non-deposit-taking NBFC. Loans are subject to credit assessment. See our regulatory disclosures and grievance redressal process.