Sale ka naam sunte hi hum jaldi mein aa jaate hain, aur nakli shopping site yahi jaldi chahti hai. Is guide mein ek banaya hua example shop dekhte hain aur paanch checks karte hain: kya ye site asli lag rahi hai ya nakli. Jo baatein sarkari ya official pages par likhi hain, wo wahi se hain, aur uska source saath mein likha hai. Jo meri apni salah hai, uspe saaf likha hai "meri salah". Ye guide advice hai, guarantee nahi.
Pehle ek baat: nakli site asli jaisi dikh sakti hai
I4C (Indian Cybercrime Coordination Centre, MHA) ki ek advisory (fake restaurant websites ke baare mein) mein likha hai ki cybercriminals genuine website ka design copy karke aisi fake websites banate hain jo authentic lagti hain. Ye bhi likha hai ki jab pehli websites report ho jaati hain, to fraudster aksar website ka naam (URL) badal kar usi tarah ki trick doosre naam se chalate hain. Isliye sirf design ya photos dekh ke bharosa mat karo. Ye advisory restaurant sites ke baare mein hai, par design copy karne wali baat kisi bhi shop site par laagu ho sakti hai (ye meri samajh hai, advisory ka sentence nahi).
Banaya hua example: ek asli aur ek nakli shop
ASLI shop: meri-dukaan.example NAKLI shop: meri-dukan.example <- ek letter kam Dono pages ek jaise dikhte hain: "MERI DUKAAN", do products, BUY NOW button. NAKLI page par: - bahut bada discount (jaise 90% OFF) - payment sirf ek personal UPI / QR par (Pay to: Rahul K., personal) - footer mein na contact, na address, na return policy
Five checks, ek ek karke
| Check | Kya dekho | Official source ya meri salah |
|---|---|---|
| 1. URL ki spelling | Address bar mein shop ka naam akshar-akshar padho. Look-alike naam: ek letter kam ya zyada. Example: meri-dukaan vs meri-dukan. | RBI: "Check URLs and domain names received in emails / SMSs for spelling errors." I4C advisory: "Make sure the company is who they say they are by checking the spelling and checking the domain name." |
| 2. Bahut bada discount | "90% OFF" jaisi deal jo itni sasti lage ki yakeen na ho. Ruko, baaki checks karo. | MERI SALAH (official list mein nahi mila). Ye red flag hai, saboot nahi: baaki checks bhi dekho. |
| 3. Payment kahan ja raha hai | Agar site sirf kisi personal UPI ID ya QR par payment maange (card, net banking ya cash on delivery ka koi option na ho), to ruko. UPI app mein receiver ka naam padho. | "Sirf personal UPI / QR = ruko" MERI SALAH hai. Receiver ka naam: MHA / PIB release (I4C): "Verify the name of receiver mentioned in UPI App. If receiver is any random person, it may be a mule account and scheme may be fraudulent." |
| 4. Contact, address, return policy | Site par contact details, poora address aur return policy dhundo. Kuch bhi na mile, to site shaayad nakli hai. | MERI SALAH (official list mein nahi mila). Mile bhi, to khud verify karo: number par call karo, address search karo. |
| 5. Google Safe Browsing aur ICANN Lookup | Dono official public pages kholo (neeche step by step). Ye ek signal dete hain. | Google Safe Browsing site status page aur ICANN Lookup page ke apne shabd neeche diye hain. I4C advisory: "Check the age of a website's domain ... whether a website was established recently (as fraudulent websites are short living)." |
Tool 1: Google Safe Browsing site status (step by step)
- Browser mein Google Transparency Report ka "Safe Browsing site status" page kholo (link neeche official links mein hai).
- "Check site status" ke search box ("Search by URL") mein us site ka naam daalo jise check karna hai.
- Result padho. Reel mein humne IANA ke reserved example domain "example.com" ka result dikhaya, kyunki wo koi dukaan nahi hai. Us par page ne likha: "Current status: No unsafe content found" aur neeche "Site safety can change over time. Check back for updates."
- Page par ek line us din ki bhi hoti hai jab info last update hui. Reel mein wo line dikhayi nahi gayi.
- Page ke apne shabd: "You can search to see whether a website is currently dangerous to visit." Yaani ye sirf dangerous ya unsafe content ka status batata hai.
- Ye NAHI batata ki dukaan asli hai, maal asli hai, ya delivery milegi. Ek nakli shop bina malware ke bhi paise le sakti hai, isliye "No unsafe content found" ka matlab "dukaan bharosemand" nahi hai (ye meri salah / reading hai).
- Page khud kehta hai ki site safety badalti rehti hai, to kuch din baad wapas check karo.
Tool 2: ICANN Lookup (step by step)
- Browser mein ICANN Lookup ("Registration data lookup tool") kholo (link neeche).
- Box ke upar likha hai: "Enter a domain name or an Internet number resource (IP Network or ASN)". Yahan us site ka naam (domain) daalo, aur "Lookup" dabao. Reel mein humne ye box khali dikhaya hai (kuch type nahi kiya), kyunki ye page URL se domain nahi leta.
- Result mein ICANN ke FAQ ke hisaab se Domain Information (naam, status, nameservers), "Dates" (registration kab create hui, kab expire hogi, kab update hui, "as applicable"), registrar ki information jaise sections aa sakte hain.
- Naya bana domain ek signal hai: nakli sites aksar short-living hoti hain (I4C advisory). Par ye sirf signal hai: purana domain bhi nakli ho sakta hai, naya domain bhi asli ho sakta hai.
- Page ke apne shabd: "gives you the ability to look up the current registration data for domain names and Internet number resources."
- ICANN ke FAQ ke hisaab se har domain ka poora data dikhna zaroori nahi: kuch data privacy ke liye redacted ho sakta hai, aur alag registrars aur registries ke result mein farak ho sakta hai. Result khali ya adhoora ho, to wo bhi proof nahi.
- Ye tool domain ka registration data dikhata hai (jo public ho), par ye nahi batata ki dukaan ka maal ya seller imaandaar hai ya nahi.
Bonus (official): I4C ka "Check Suspect (Website / App)"
National Cyber Crime Reporting Portal par "Report & Check Suspect" ke andar "Check Suspect (Website/App)" naam ki suspect search hai, jahan Suspect Type mein "Website Url" chun kar search kar sakte ho. Is page ka apna disclaimer: ye database citizens ki cybercrime complaints par bana hai, I4C complaints ki authenticity certify nahi karta, aur "This database is not complete as cybercriminals are known to rapidly create, change and dispose such identifiers." Matlab site us list mein na mile, to bhi wo safe hone ka saboot nahi hai.
Ye paanchon checks kya prove nahi karte
- Paanchon checks pass ho jaayein, to bhi site asli hone ka saboot nahi hai.
- Ek check fail ho to bhi seedha ilzaam mat lagao: ye signals hain, rukne aur sochne ka mauka hain.
- Meri salah: jis shop ko jaante ho aur bharosa karte ho, wahin se kharido. Anjaan site par payment se pehle jitne check ho sakein karo, ya chhod do.
Sale wali site par paise daalne se pehle: step by step
- Paanch second ruko. Ye koi timer ya naap nahi hai, bas ek advice hai ki jaldi mein click mat karo. Paanchon checks mein jitna time lage, lene do.
- Address bar mein shop ka naam akshar-akshar padho (check 1). Google ya kisi link se aaye ho, to bhi.
- Discount dekho: itna bada ki yakeen na ho? To ruko (check 2).
- Payment page kholo (par abhi pay mat karo): kya sirf personal UPI ya QR ka option hai? Receiver ka naam kya dikh raha hai? (check 3). I4C ki QR advisory: jab QR se payment maanga jaaye, to company se unke official website ke contact se verify karo; aur QR se khule kisi site par payment karne ke bajaay known aur trusted URL khud type karke pay karo.
- Contact, address aur return policy dhundo (check 4). Phone number ho to call karke dekho, address ho to search karke dekho.
- Google Safe Browsing aur ICANN Lookup kholo (check 5), aur I4C ke Check Suspect (Website/App) mein bhi site ka naam dekh lo.
- Ek bhi cheez ajeeb lage, to payment mat karo. Kisi bharosemand dost ya ghar waale ko site dikhao (meri salah).
Agar paise de diye
- Turant report karo: National Cyber Crime Reporting Portal ka "Report Suspect" page kehta hai ki jo cybercrime ka victim ban gaya ho, wo turant cybercrime.gov.in par ya National Helpline (helpline 1930) par report kare. Matlab helpline 1930 par call karo, ya cybercrime.gov.in par complaint darj karo (complaint ke categories mein Financial Fraud hai).
- Us shop ka website address bhi "Report Suspect" se report kar sakte ho: portal ke hisaab se suspicious Website URLs report ki ja sakti hain.
- Apne bank ya UPI app ke customer care ko jaldi se jaldi batao (meri salah). RBI ka sentence unauthorised transaction ke liye hai: "Report any un-authorized transaction observed to your bank / NBFC / Service provider immediately for blocking the card / account / wallet, so as to prevent any further losses."
- Screenshot, order page, payment ka receipt aur UPI transaction ID sambhal ke rakho (meri salah), complaint mein kaam aayega.
- RBI: account number, login ID, password, PIN, UPI PIN, OTP, ATM / debit / credit card details kisi ke saath share mat karo, chahe wo kitna bhi genuine lage. Koi "refund dilwa dunga" keh kar ye maange, to bhi mat do (ye line meri salah hai).
Aam galtiyan
- Sirf design, photos ya reviews dekh ke bharosa karna (I4C: nakli sites genuine ka design copy karti hain).
- URL ki spelling ko jaldi mein padhna: look-alike naam mein ek letter hi ka farak hota hai.
- Sirf ek check karke ruk jaana, ya ek check pass hone par bharosa kar lena.
- Domain naya hai to nakli hi hai, ya purana hai to asli hi hai, aisa maan lena. Dono galat ho sakte hain: ye signal hai, guarantee nahi.
- Personal UPI ya QR par "abhi pay karo, offer khatam ho raha hai" wali jaldi mein pay kar dena.
- Report karne mein der karna.
Meri checklist (pay karne se pehle tick karo)
- ☐ 1. URL ki spelling akshar-akshar padhi? Look-alike naam to nahi?
- ☐ 2. Itna bada discount to nahi ki yakeen na ho? (meri salah: ruko)
- ☐ 3. Payment sirf personal UPI / QR par to nahi maanga? Receiver ka naam dekha? (meri salah: ruko)
- ☐ 4. Contact, address aur return policy mili? Kuch na mile = shaayad nakli.
- ☐ 5. Google Safe Browsing site status aur ICANN Lookup dekha? Naya domain = signal, guarantee nahi.
- ☐ Yaad hai: paanchon pass bhi hon, to ye advice hai, guarantee nahi.
- ☐ Shak ya dhokha ho to helpline 1930 ya cybercrime.gov.in.
Ye guide jaankari ke liye hai, guarantee ya legal advice nahi. Koi bhi checklist har nakli site nahi pakad sakti: shak ho to paise ya details dene se pehle ruk jao.