Delhi HC orders Vercel, GitHub to remove fake IndiaMART sites
The Delhi High Court ordered Vercel, GitHub and Netlify to act against fake IndiaMART sites used in a phishing scam.
Intelligence analysis by GPT-5.4 Mini
The court found that fraudsters had built near-clone IndiaMART websites and used them with WhatsApp messages to steal OTPs and access seller accounts. It ordered fast takedowns, phone-number blocks, and disclosure steps, pushing cloud platforms deeper into anti-fraud enforcement.
Fraudsters built fake copies of IndiaMART like a costume that looked real enough to trick people. The court told the website hosts and message apps to help shut the scam down, like cutting the power to a fake shop.
Analysis
What the court said
The Delhi High Court acted against a fraud setup built around fake IndiaMART websites. According to the article, the perpetrators made 15 near-identical clones of IndiaMART pages, copying the look, layout, buttons, and search flow to fool sellers.
How the scam worked
The fake sites were paired with WhatsApp messages and emails. Sellers were lured to the cloned pages, asked to enter their registered phone numbers, and then tricked into sharing the OTP generated on the real IndiaMART site. That let the fraudsters capture the code in real time and get into accounts and financial information.
Why Vercel, GitHub, and Netlify were ordered to act
MediaNama says the court treated the hosting layer as part of the problem because the fake URLs remained live on those services. Vercel and Netlify were told to suspend or disable specific URLs within 36 hours. GitHub was ordered to block a repository that stored the source code for the fake sites.
Broader enforcement angle
The order also directed WhatsApp to block five phone numbers and disclose subscriber details. Punjab National Bank and Bharti Airtel were told to disclose KYC details tied to the relevant bank account and mobile number. The Department of Telecommunications and MeitY were asked to notify telecom and internet providers so the rogue sites could be blocked centrally.
Why the ruling stands out
The article says this may signal a stricter view of safe-harbor protections for infrastructure providers. The court appears to have drawn a line between ordinary hosting and infrastructure being used to run fraud, and it wants fast compliance windows rather than slow cleanup after the damage is done.
Key points
- The Delhi High Court ordered action against fake IndiaMART websites used in a phishing scam.
- The article says fraudsters created 15 near-identical clones and used WhatsApp messages to lure sellers.
- Vercel and Netlify were told to disable specific URLs within 36 hours, and GitHub was told to block a repository.
- WhatsApp was ordered to block five phone numbers and share subscriber information.
- The court also directed telecom and government agencies to help block access to the rogue sites.
If the orders are carried out quickly, the fake sites and linked phone numbers could be taken offline before more sellers are tricked. The case could also push platforms and telecom providers to respond faster when their services are used for impersonation scams.
If enforcement is slow or piecemeal, the scam can simply shift to new URLs, new phone numbers, or new hosting providers. The ruling could also lead to more disputes over how much responsibility infrastructure companies should bear for third-party fraud.
