IRCTC warns users of fake IRCTC apps and websites, details and how to stay safe

The Indian Railway Catering and Tourism Corporation (IRCTC) has recently issued a warning to all its users about a fake Android app and a website that has been created by scammers in attempts to steal sensitive information from users. The fake app and website closely resemble the original IRCTC app and website, making it difficult for users to distinguish between the two and has

The fake IRCTC app is with the name 'irctcconnect.apk' and is being circulated via messaging platforms such as WhatsApp and Telegram. Scammers are sending messages with the link of the fake website or APK file of the fake app saying that this is the real website or app to book train tickets from IRCTC.

Fraudsters are using the fake app and website to obtain sensitive net banking credentials, including UPI details and credit/debit card information from unsuspecting victims. IRCTC has urged its users to remain cautious and not to download any suspicious apps or visit any suspicious websites.

As for the viral fake website and app, the Railways has blocked the fraudulent website -https://irctc.creditmobile.site. However, users are still advised not to download this app or fall for any similar website or app in future.

Here's the full warning from the IRCTC-

IRCTC issues warning for fake website and app

Dear Customers,

It has been reported that a malicious Android application (irctcconnect.apk) hosted on a phishing website (https://irctc.creditmobile.site) is being circulated over instant messaging platforms e.g. WhatsApp, Telegram, etc. This android app (APK file) is malicious and infects the mobile device. These fraudsters are sending phishing links at mass level and insisting users to download this android application, impersonating IRCTC officials to trick victims into revealing their sensitive net banking credentials like UPI details, credit/debit card information etc.

In view of this, you are advised that please do not install this application and keep yourself safe from such fraudsters. Always download IRCTC's authorized 'IRCTC Rail Connect' mobile app from Google Play Store or Apple Store.

Please note that IRCTC does not call its users/customers for their PIN, OTP, Password, Credit/Debit Card Details, Net Banking password or UPI details.

Warm Regards,

IRCTC

Notably, this is not the first time that scammers have created fake websites or apps of prominent companies to trick people. Earlier, SBI had also advised users not to fall for any fake website or Yono app as scammers were reportedly creating fake SBI website and app to steal money from account holders.

There have been cases of online fraud too, where people fell for similar-looking websites or apps and ended up losing money to scammers. To save yourself from such scams it is highly advisable to take caution online and differentiate between real and fake websites or apps.

Let's take a look on how to be safe online and avoid falling for fake website or app sams.

How to avoid fake apps and website scam

• Trusted app stores: Always download app from trusted apps stores like Google Play in Android and Apple App Store in iPhones.
• Use a secure connection: When browsing the internet, always use a secure connection. Look for the padlock icon in the address bar, which indicates that the website is using a secure connection. This ensures that your information is encrypted and cannot be intercepted by hackers.
• Verify the URL: Before entering any personal or financial information on a website, verify the URL to ensure it matches the website you intend to visit. Cybercriminals may create fake websites with URLs similar to legitimate ones in an attempt to trick users into entering their information.
• Update device OS and browser: Always keep your device OS and browser up-to-date and companies timely release security updates to secure devices.
• Be cautious when using Google to find websites: While people often use Google to find website links, it's important to carefully check the link and authenticity before trusting the site for any online transaction. Fraudsters may manipulate Google search results to rank their fake websites higher.
• Check for misspellings and grammar errors: Fake websites may have misspellings and grammar errors, while legitimate websites are usually professionally designed and free of such errors. If you notice any spelling or grammar mistakes on a website, it may be a red flag that the website is fake.
• Look for contact information: Legitimate websites will typically have contact information such as an email address, phone number, or physical address. If you cannot find any contact information on a website, it may be a red flag that the website is fake.
• Most importantly, never fall for messages you receive on social media. Government organisations like SBI or IRCTC never asks its users to click on any link or share details though a link shared via SMS or messages.