Supreme Court: Registry flags another fake website, phishing risk

The Supreme Court of India Registry warned on 3 November 2026 that a newly identified fraudulent website was impersonating the court’s official online presence and could be used to obtain personal information and confidential credentials. Its public notice cautioned stakeholders against sharing personal or financial information through the site, saying such disclosures could enable data theft.

The warning is the latest in a sequence of alerts about websites designed to clone the Supreme Court’s official website. The Registry’s notice expressly follows earlier advisories dated 16 July 2025, 28 April 2026 and 13 August 2026. The new development is the identification of another impersonating domain, rather than the first discovery of this type of fraud.

Titled “Advisory concerning fake websites impersonating the official website of the Supreme Court of India”, the notice was signed by the Deputy Registrar (Computer Cell). It is a public cybersecurity advisory from the Registry, not a judicial ruling on a fraud prosecution.

What the Registry warned could happen

The Registry described the deceptive websites as attempts to defraud the public through “targeted phishing mechanisms”. Phishing involves tricking people into interacting with a deceptive link or website, including one that appears to belong to a trusted institution. ANI’s reporting on an earlier Supreme Court alert explained that such links can direct users to fake websites or lead them to download malicious software.

In the latest notice, the specific risk identified is the solicitation of sensitive personal data and confidential credentials. The Registry said cybercriminals operating through the identified website “may attempt” to obtain that information. The warning therefore describes a potential route to theft; it does not establish that every visitor has lost data or money.

The Registry advised stakeholders to verify the authenticity of electronic communications. It identified the court’s registered domain and encouraged users to check website addresses by hovering over links before engaging with them. The advisory’s emphasis is on checking the destination of a link, rather than accepting its apparent association with the court.

For individuals who suspect that the phishing attempt has compromised their information, the Registry advised immediately changing passwords for all online accounts and notifying their banks to report unauthorised access. These are the response measures set out in the notice; it does not announce compensation or a process for recovering losses.

Earlier alerts involved other impersonating websites

The Supreme Court’s public notice dated 13 August 2026, available in a copy carried by MediaNama, identified a different fraudulent domain impersonating the court. That notice also warned that cybercriminals could solicit sensitive personal information and confidential credentials, and cautioned stakeholders against disclosing personal or financial information.

The August notice referred back to the alerts of 16 July 2025 and 28 April 2026. It contained the same measures concerning the verification of electronic communications, checking links, changing passwords after suspected compromise and notifying banks. The November notice continues that approach while identifying another website.

The history extends further back. According to SCC Online, the Registry has issued public notices about fraudulent websites impersonating its official portal since August 2023. Verdictum also reported that the Registry raised an alarm about a counterfeit Supreme Court website in 2023.

India Today’s reporting on an earlier alert described a fraudulent page carrying the heading “Offence of Money-Laundering”. According to that report, the Registry warned that the page sought personal and confidential information while falsely presenting itself as connected with the court.

India Today and ANI reported that the Registry had informed law enforcement agencies about that earlier phishing incident. That reported referral concerns the earlier alert: the 3 November 2026 notice does not state whether the newly identified website has been referred for investigation.

What the court’s website policy says about personal data

The Supreme Court’s own Website Policies provide a separate account of how its legitimate website handles visitor information. The policy states that the National Informatics Centre designed and developed the website, while the Supreme Court provides and processes its content.

According to the policy, the website does not automatically capture specific personal information, such as a visitor’s name or email address, that would identify that person individually. People can generally visit without revealing personal information unless they choose to provide it.

That does not mean the website records no information. The policy says it logs technical details for statistical purposes, including browser type, access dates and times, and pages visited. Where other personal information is requested, the policy says users will be informed how it will be used if they choose to provide it.

The latest Registry notice does not identify the operators of the fraudulent website, give a count of affected users or quantify any financial losses. It also does not report a takedown, an arrest or an investigation outcome. What it establishes is the Registry’s identification of another impersonating website and its warning about the risk of disclosing information through it.