The Employees’ Provident Fund Organisation (EPFO) has issued a cybersecurity advisory urging members to protect their personal and financial information from online fraud. Through a post on its official social media account on X, the organisation highlighted several precautions that members should follow while accessing their provident fund accounts online.
The advisory warns users against clicking suspicious links and sharing sensitive information, including their Universal Account Number (UAN), passwords, one-time passwords (OTPs), Aadhaar details, PAN information and bank account details. Following these basic security measures can help members reduce the risk of falling victim to online scams.
EPFO Cybersecurity Advisory: Use Only Official Websites
EPFO has advised members to access its services only through authorised websites. Users should avoid suspicious links received through messages, emails or social media and should verify the authenticity of a website before entering their login credentials.
The following are the official EPFO website addresses listed in the advisory:
- https://www.epfindia.gov.in
- https://www.epfo.gov.in
- https://www.unifiedportal-mem.epfindia.gov.in/memberinterface/
Members should carefully check the website address before logging in. Even a small variation in a domain name could indicate that a website is not genuine.
Never Share Your UAN, OTP or Bank Details
The organisation has cautioned members against entering confidential information on unofficial websites. Details such as UAN, Pension Payment Order (PPO) number, password, Aadhaar number, PAN details, bank information and OTPs should not be shared with unauthorised parties.
Members should also avoid opening unverified links, even when they appear to come from a familiar source. Before clicking a link, it is important to confirm that it leads to an authentic website or service.
How to Report Suspicious Websites and Phishing Attempts
If members come across a suspicious website or receive a suspected phishing message, they should report the matter through the official EPFO website or the appropriate cybercrime reporting channel.
Prompt reporting can help bring potentially fraudulent activity to the attention of the relevant authorities. Members should remain cautious when receiving unexpected messages requesting personal information or account verification.
EPFO Will Not Ask for Confidential Login Details
According to the advisory, EPFO does not request members’ personal information, OTPs or login credentials through phone calls, WhatsApp messages or emails.
Members should therefore be wary of anyone claiming to represent EPFO and asking for such details. They should never disclose confidential information in response to unsolicited requests and should use official channels whenever they need to access their provident fund services.
Disclaimer: This article is intended for general informational purposes only. Readers should refer to EPFO’s official website and verified communications for the latest cybersecurity guidance. Website addresses and reporting procedures should be checked through official sources before sharing personal information or reporting suspected fraud.