{"success":true,"data":{"id":"in-sbi-hdfc-imps-neft-lure","label":"Fake Indian bank transfer-order phishing — SBI / HDFC / ICICI / Axis Bank brand + IMPS / NEFT / RTGS payment-rail + urgency / cancel-CTA (Hindi / English). \"An NEFT order was initiated from your account — click to cancel.\" Harvests OTP via fake verify / cancel page. Source: Red-Team R8 multi-agent council C3 (IN payment-rail specialist); NPCI IMPS spec; RBI Advisory 2025.","description":"Fake Indian bank transfer-order phishing targeting SBI, HDFC, ICICI, Axis, and other major Indian bank customers. The phish narrative arrives in Hindi/English mixed format: \"SBI Alert: An NEFT transfer of ₹XX,XXX was initiated from your account on [date]. If not done by you, click here to cancel immediately,\" or \"HDFC Bank IMPS Order: आपके खाते से ₹XX,XXX का IMPS आदेश किया गया है। यदि आपने नहीं किया, तो यहाँ क्लिक करें\" (An IMPS order of ₹XX,XXX was made from your account. If not done by you, click here). The fake cancel / verify CTA links to an attacker page that harvests OTP. Three national-bank brands (SBI, HDFC, ICICI) + three payment-rail acronyms (IMPS, NEFT, RTGS) constitute the signal gate. Detection: SBI / HDFC Bank / ICICI Bank / Axis Bank / Kotak Bank / PNB brand AND IMPS / NEFT / RTGS / \"transfer order\" / \"fund transfer\" / \"IMPS आदेश\" / \"NEFT आदेश\" rail AND \"click to cancel/verify\" / \"if not done/initiated by you\" / unauthorized / \"क्लिक करें\" CTA. Source: Red-Team R8 multi-agent council C3 (IN payment-rail specialist); NPCI IMPS spec; RBI Advisory 2025; CERT-In phishing report.","tier":"danger","category":"other","isThin":false}}