EPFO Security Alert: 5 things EPF members must know to protect their account from online fraud

The Employees’ Provident Fund Organisation (EPFO) has warned EPF members to be careful while accessing their accounts online, especially as fake websites and phishing messages can be used to steal personal and financial information. Here are the key precautions EPF members should keep in mind before accessing their EPF credentials, as suggested by the EPFO.

The EPFO has suggested visiting only official EPFO websites such as:
https://www.epfindia.gov.in
https://www.epfo.gov.in
https://unifiedportal-mem.epfindia.gov.in/memberinterface/

The EPFO says in its tweet that EPF members should avoid clicking on unverified web links shared via an SMS, email, or social media as they may contain a phishing risk, malware, or fraudulent trap designed to steal your credentials.

The EPFO says EPF members should not provide details such as Universal Account Number (UAN), Pension Payment Order (PPO), password, Aadhaar, Permanent Account Number (PAN), bank details, or one-time password (OTP) on any website other than the official EPFO portals.

The EPFO suggests verifying URLs carefully before logging in, especially noting spelling variations or unusual domains. Look for fake spellings, strange domain names, and missing security locks since fake websites copy real pages to steal your private passwords, suggests the EPFO.

The EPFO suggests reporting suspicious websites, messages, or phishing attempts to the EPFO’s official helpdesk or cybersecurity reporting channels.

@officialepfo
@socialepfo

Note that the EPFO does not ask for personal details, OTPs, or login credentials through phone calls, WhatsApp, SMS, social media or email, says the EPFO.