‘Phishing’ is:

Phishing is the most prevalent cyber threat targeting bank customers.  Types of Phishing:  • Email phishing (fake "your account will be blocked" emails with malicious links) • Spear phishing (targeted attacks using customer's name and account details) • Smishing (SMS — "Your SBI account is blocked, click here") • Vishing (voice calls impersonating bank officials asking for OTP/CVV) • Whaling (targeting senior bank executives) Technical countermeasures used are SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), DMARC (Domain-based Message Authentication. These prevent email spoofing of bank domains. MFA ensures stolen passwords alone are useless.  RBI has issued multiple customer awareness directives such as banks must never ask for OTP/CVV/PIN over calls. The "Never share OTP" campaign is a direct response to phishing/vishing attacks.