Cyber safety guides
Practical, plain-English guides for Indian businesses and families, written by the Secuvexa team at I.T. Experts, Gujarat. No jargon, no fear-selling.
For businesses & website owners
Website security, email spoofing, VAPT and compliance, explained for Indian business owners.
Is my website hacked? How to check and what to do next
Your website is probably hacked if visitors get redirected to spam or betting sites, Google shows a "This site may be hacked" warning, strange pages appear in a site: search, or you find admin users you never created. Confirm it with Google Search Console's Security Issues report, then take a backup, change all passwords and clean the site from a known-good copy.
Read guide →Free SPF, DKIM and DMARC checker and setup guide for Indian domains
SPF, DKIM and DMARC are three DNS records that prove emails from your domain are really from you, so scammers can't easily send fake invoices in your name and Gmail doesn't send your mail to spam. You can check all three for free with our website scanner, then add the missing records in your domain's DNS panel using the examples below.
Read guide →Website security audit and VAPT cost in India (2026)
In India, a basic automated website scan can be free or cost a few hundred rupees, a small-business website audit with manual checks typically costs a few thousand to tens of thousands of rupees, and a full VAPT of a web application commonly runs from about ₹35,000 to several lakh. The price depends mostly on scope: how many pages, user roles, APIs and apps must be tested, and how much manual testing is included.
Read guide →VAPT and website security audit in Gujarat (Ahmedabad, Surat, Vadodara, Rajkot, Bhavnagar)
VAPT (Vulnerability Assessment and Penetration Testing) is a written-permission security test where experts find weaknesses in your website, app or network and safely try to exploit them, then give you a report with fixes. Secuvexa does VAPT and website security audits for businesses across Gujarat from our base in Bhavnagar, mostly remotely and on-site where needed (we are not CERT-In empanelled, and will tell you if your audit needs an empanelled auditor).
Read guide →DPDP Act website security checklist for small businesses
The DPDP Act 2023 and the DPDP Rules 2025 require any business that collects personal data, including through website forms, to protect it with reasonable security safeguards, show a clear notice when asking for consent, and report data breaches to the Data Protection Board and affected people. Most of these duties apply from 13 May 2027, so small businesses should use the time now to fix the basics: HTTPS, collecting less data, access control, logs, backups and vendor contracts.
Read guide →For you and your family
Spot and stop the scams Indians face most: fake links, KYC messages, UPI fraud and digital arrest calls.
How to check if a website is safe before you pay
To check if a website is safe, look at the exact domain name, how old the domain is, whether Google Safe Browsing flags it, what people say about it on other sites, and how it wants you to pay. A padlock (HTTPS) alone does not prove a shop is genuine.
Read guide →Digital arrest scam: what it is and what to do
"Digital arrest" is a scam, not a legal procedure: no police, CBI, ED, customs officer or judge in India arrests anyone over a video call or asks for money to "verify" your account. If you get such a call, hang up, do not pay, and report it on 1930 or cybercrime.gov.in.
Read guide →UPI fraud? What to do in the first hour (1930 and complaint steps)
If money has gone from your account through a UPI fraud, call the national cyber fraud helpline 1930 immediately, then complete a complaint on cybercrime.gov.in and report the transaction to your bank. Reporting within the first hour gives the best chance that the money is frozen before the fraudster moves it.
Read guide →KYC update fraud message: how to spot it (with examples)
A message that says your bank account, YONO, PAN, wallet or electricity connection will be blocked unless you update KYC through a link or app is almost always a scam. Do not click it; check directly with your bank or provider through its official app, website or branch, and report the message on Chakshu (sancharsaathi.gov.in).
Read guide →How to check if a link is fake or safe (WhatsApp, SMS, email)
To check if a link is fake, find its real domain (the part just before the first single slash) and confirm it is exactly the official one; treat short links, odd spellings and APK files as warning signs. When in doubt, paste the link into a free checker before opening it, and remember that a padlock (https) does not mean a site is safe.
Read guide →WhatsApp security checklist: stop account takeover and scams
The most important WhatsApp security steps are: turn on two-step verification with a PIN, never share the 6-digit registration code with anyone, regularly check Linked devices, and never install APK files or modified apps like GB WhatsApp. If your account is taken over, re-register with your phone number and tell your contacts at once.
Read guide →Diwali and festive season scams 2026: fake offers, gifts and delivery links
During Diwali and the festive season, scammers send fake sale links, "free gift" and lucky-draw messages, fake courier address-update SMS, instant festive loan offers and greeting files that are really malicious apps. Shop only from sites and apps you open yourself, never install an APK from a message, and call 1930 at once if money is lost.
Read guide →Dangerous app permissions on Android: which ones scammers use
The Android permissions scammers abuse most are Accessibility, SMS, notification access, display over other apps, install unknown apps and device admin, along with remote-access apps like AnyDesk. Check them under Settings, remove access from any app you do not fully trust, and never grant them because a caller asked.
Read guide →How to identify a fraud call (fraud call kaise pehchane)
A fraud call usually creates panic or greed, asks you to act immediately, keep it secret, share an OTP or PIN, install an app, or pay money. Banks, TRAI, police and courier companies never do this. Hang up, verify through an official number, and report the call on Chakshu (Sanchar Saathi); if money is lost, call 1930.
Read guide →