Students today spend hours online every day: attending classes, submitting assignments, making UPI payments, chatting with friends and searching for jobs and internships. That makes students an easy target for scammers, hackers and online bullies. The good news is that most cyber problems can be prevented with a few simple habits. This guide gives you practical cyber safety tips, explains common scams in India, and tells you exactly what to do if something goes wrong.
Why students are a common target
Scammers do not target students because students are careless. They target them because of the situation students are in:
- Students are often looking for jobs, internships, scholarships or part-time income, which fake offers exploit.
- Many are handling money online for the first time through UPI and wallets.
- They share a lot on social media, which gives scammers personal details to use.
- They may hesitate to tell parents or teachers when something goes wrong, out of fear or embarrassment.
Knowing these weak points is the first step to protecting yourself.
Protect your accounts with strong passwords and 2FA
Your email account is the key to almost everything else, because password resets for other apps usually go there. Protect it first, then your social media, banking and college accounts.
Create strong, unique passwords
- Use long passphrases, for example three or four random words with numbers and symbols, rather than short passwords.
- Never use your name, date of birth, mobile number or “123456”-type patterns.
- Use a different password for every important account. If one site is breached, the others stay safe.
- Consider a reputable password manager so you do not have to remember everything.
Turn on two-factor authentication (2FA)
2FA adds a second check, such as a code from an authenticator app or an SMS, when someone logs in. Even if your password is stolen, the attacker cannot easily get in. Enable it on your email, Instagram, Facebook, WhatsApp (two-step verification PIN) and any account that offers it.
Never share OTPs
An OTP is like a key to your account or bank. No genuine bank, company, delivery service or government office needs you to read out an OTP over a phone call. If someone asks for it, treat it as a scam.
Recognise phishing and fake links
Phishing means tricking you into clicking a link, opening a file or sharing details by pretending to be someone trustworthy. It can come by SMS, email, WhatsApp, Instagram DM or even a phone call.
Watch for these warning signs:
- Urgency or fear: “Your account will be blocked today”, “Your electricity will be cut tonight”, “Last chance to claim your scholarship”.
- Too good to be true: lottery wins, free recharges, expensive gifts, very high pay for very simple work.
- Odd links: misspelled website names, extra words or unusual domain endings, or shortened links you cannot verify.
- Requests for sensitive details: passwords, OTP, UPI PIN, card number, CVV or Aadhaar copies.
- Unexpected attachments or APK files: never install apps from links sent in chats. Use only the official app store.
Practical tip: When a message says there is a problem with your bank, college or any account, do not use the link or number in the message. Close it, open the official app or type the official website yourself, and check from there. This one habit blocks most phishing attempts.
Common online scams students face in India
Scam methods keep changing, but many follow familiar patterns. Here are some you should recognise immediately.
| Scam type | How it usually works | Red flag |
|---|---|---|
| Fake job or internship offer | An “HR” contacts you with an easy job and asks for a registration, training or security fee | Any request to pay money to get a job |
| Part-time task scam | You are paid small amounts for liking videos or giving reviews, then asked to “invest” for bigger tasks | Being asked to deposit money to unlock earnings |
| UPI collect request or QR scam | A “buyer” sends a request or QR code to “pay you” for something you are selling | Being asked to enter your UPI PIN to receive money |
| Fake customer care | You search for a helpline online and call a fake number that asks you to install a screen-sharing app | Requests to install remote access apps or share OTPs |
| KYC or account block message | SMS says your bank account, SIM or wallet will be blocked unless you update KYC via a link | Links in SMS asking for login or card details |
| “Digital arrest” or fake police call | Callers pretending to be police or officials claim you are involved in a crime and demand money on a video call | Threats, secrecy and demands for immediate payment |
| Sextortion | A stranger befriends you, records or morphs a video call, then threatens to leak it unless you pay | Fast-moving friendship and requests for video calls or private photos |
Remember this simple rule for UPI: you never need to enter your UPI PIN to receive money. The PIN is only for sending money or checking your balance. Government agencies have also warned publicly that there is no such thing as a “digital arrest” in which you must stay on a video call and pay to clear your name.
Use UPI and online payments safely
- Always check the name that appears before you confirm a UPI payment.
- Do not accept unknown collect requests. Decline them.
- Keep your UPI PIN, ATM PIN and card CVV completely private, even from friends.
- Set sensible transaction limits in your banking app if it allows this.
- Check your bank SMS alerts regularly and report any transaction you do not recognise immediately.
- When selling something online, verify payment in your own bank app, not through a screenshot sent by the buyer.
Understanding digital payments is also part of computer literacy courses. For example, the NIELIT CCC course includes a unit on digital financial services, and our CCC exam preparation guide covers how to prepare for it.
Keep your social media private and safe
What you share online stays online for a long time and can be misused. A few simple settings and habits go a long way.
- Make your accounts private if you do not need public visibility, and review who can message or tag you.
- Do not post your phone number, home address, college ID, boarding pass or exam admit card.
- Avoid sharing live location and turn off location tagging on photos.
- Accept friend or follow requests only from people you actually know.
- Be careful with “fun” quizzes and apps that ask for access to your account or contacts.
- Think before posting: would you be comfortable if a future employer saw it?
Secure your devices and Wi-Fi
- Lock screens: use a PIN, pattern or fingerprint on your phone and a password on your laptop.
- Update regularly: install operating system and app updates, because they often fix security holes.
- Install apps carefully: download only from official app stores and check permissions before allowing them.
- Be careful on public Wi-Fi: avoid logging in to banking apps on open networks in cafes, stations or hostels; use mobile data for sensitive work.
- Log out on shared computers: in cyber cafes, labs and libraries, always log out and avoid saving passwords in the browser.
- Back up important files: keep copies of assignments and documents in cloud storage or an external drive.
Good device habits are also a core part of basic computer skills for jobs, because employers expect staff to handle office systems safely.
Dealing with cyberbullying and harassment
Cyberbullying includes threatening messages, spreading rumours, sharing someone’s photos without consent, creating fake profiles and repeated harassment. If it happens to you or a friend:
- Do not respond angrily or try to take revenge.
- Save evidence: take screenshots with dates, usernames and profile links.
- Block and report the account using the platform’s reporting tools.
- Tell someone you trust: a parent, teacher, counsellor or senior. You are not at fault.
- Report serious cases such as threats, sextortion or sharing of private images on the National Cyber Crime Reporting Portal.
If someone is threatening to leak private photos or videos, do not pay. Paying usually leads to more demands. Stop contact, save evidence and report it.
What to do if you are scammed or hacked
Act quickly. Speed can make a real difference, especially in financial fraud.
- Call 1930, the national cybercrime helpline, to report financial fraud as soon as possible.
- Report online at https://cybercrime.gov.in, the National Cyber Crime Reporting Portal.
- Inform your bank through its official helpline or app and ask them to block your card, UPI or account if needed.
- Change passwords of affected accounts, starting with your email, and log out of all other sessions.
- Keep all evidence: transaction IDs, screenshots, phone numbers, emails and chat history.
- Warn your contacts if your social media or WhatsApp was hacked, so they do not fall for messages sent in your name.
You may also visit your nearest police station or cyber cell. Procedures and timelines can vary, so follow the guidance given by the helpline or the officials handling your complaint.
Key takeaways
- Use strong, unique passwords and turn on two-factor authentication, especially for email.
- Never share OTPs, UPI PINs or card details, and remember you never need a PIN to receive money.
- Any job or internship that asks you to pay a fee is a major red flag.
- Check suspicious messages through official apps and websites, never through links in the message.
- If you are scammed, call 1930 and report at cybercrime.gov.in without delay.
Cyber safety is part of being digitally literate. Our Basic Computer and CCC courses help you use computers, the internet and digital payments confidently and safely. Contact NETWORK NET to know more about upcoming batches.
Frequently asked questions
What is the cybercrime helpline number in India?
The national cybercrime helpline number is 1930. You can also file a complaint online on the National Cyber Crime Reporting Portal at https://cybercrime.gov.in. For financial fraud, report as quickly as possible.
Do I need to enter my UPI PIN to receive money?
No. You never need to enter your UPI PIN to receive money. The PIN is only used to send money or check your balance. If anyone asks you to enter it to receive a payment, it is a scam.
How can I tell if a job or internship offer is fake?
Be careful if the offer asks for a registration, training or security fee, promises very high pay for simple work, comes from a personal email or messaging account, or pressures you to decide quickly. Verify the company through its official website.
What should I do if my social media account is hacked?
Try to recover it through the platform’s official recovery process, change your email password, enable two-factor authentication, warn your friends about messages sent in your name, and report the hack to the platform. Report serious misuse on cybercrime.gov.in.
Is it safe to use public Wi-Fi for online classes?
Public Wi-Fi is generally fine for browsing and online classes, but avoid logging in to banking or payment apps on open networks. Use mobile data for sensitive work and log out of accounts on shared devices.