IRDAI on September 4 2026 cautioned policyholders against igmsirdai.online and its complaint registration webpage, saying the site presents itself as an IRDA-related grievance platform but is not an official IRDAI website, is under investigation, and should not be accessed. The regulator said in a release reported by The Hindu BusinessLine at 08:20 PM IST on September 4: do not register complaints or submit any personal, policy, financial, banking, KYC, OTP, password or other sensitive information on it or on any other website claiming to represent IRDAI without verification, and do not make payments or share banking credentials in response to communications from such sites. The matter is being investigated and appropriate action will be taken, IRDAI said.
Context: Where Real Grievances Go and Why Fakes Now Proliferate
The official route is the Integrated Grievance Management System - Bima Bharosa. Track: bimabharosa.irdai.gov.in reachable via irdai.gov.in -> Consumer Complaints -> Bima Bharosa Grievance Management System, plus the toll-free 155255 and email complaints@irdai.gov.in / helpdesk as listed on IRDAI's Be Alert! and Complaint Channels pages. The consumer education site is policyholder.gov.in (not policyholdergov.org). This is not the first impersonation: in October 2025 IRDAI flagged policyholdergov.org misusing IRDAI, DFS and Government of India emblems to solicit premium payments and harvest details, as reported by Outlook Money - the regulator clarified it never collects premiums via its consumer site. The current warning lands alongside September 2026's other trust rails: the TRAI 1600-series mandate for verifiable service calls, the Information and Cybersecurity Guidelines 2026 ZIP, and the September 1 Public Insurance Registry consultation (comments due September 30), all of which tighten how consent and identity are proved. When the regulator itself must publish a scam URL, it is a signal that phishing is exploiting the same grievance anxiety that the September 28 IRDAI Health Sub-Committee said it wants to fix via NHCX adoption and simpler wording.
Implication: What a Fake Submission Costs You
Three harms arrive together. First, data harvesting: policy number plus KYC plus bank/OTP is enough for identity theft, account takeover, or creation of a spoof policy document that later enables a second fraud. Second, lost time on the regulatory clock: a complaint filed on a fake portal never reaches the insurer's Grievance Redressal Officer, the IRDAI Bima Bharosa queue, or the Ombudsman under the 2017 Rules - the 14-day insurer response and 30-day forum timelines never start, while your actual 14-day free-look or 30/45-day claim settlement clocks under the 2024 PPHI Master Circular keep running. Third, payment diversion: any premium or fee paid on a fake domain is not credited to an insurer; recovery is via cybercrime complaint and bank dispute, not via the insurance contract. IRDAI's own Be Alert! taxonomy calls this intermediation fraud - entities pretending to be insurers or the regulator - the hardest for a consumer to detect because the site copies logos, colours and language.
Action: How to Verify the Real Portal and What to Do If You Already Typed Data
Verify before you type: (1) type bimabharosa.irdai.gov.in directly or navigate from irdai.gov.in; bookmark it; (2) check the domain ends with .gov.in - IRDAI never uses .online or .com for grievances; (3) on irdai.gov.in the path is Home > Consumer Complaints > Integrated Grievance Management System > Bima Bharosa; (4) the official site never asks for premium payment, card CVV/password, or OTP for grievance registration; use 155255 if unsure. If you already submitted data on igmsirdai.online: (a) call your bank/insurer immediately, change passwords, block cards, enable transaction limits; (b) file a report on cybercrime.gov.in (1930) and preserve screenshots, URLs, emails, transaction IDs; (c) inform IRDAI via its official complaints email/phone and your insurer's GRO with the incident reference; (d) monitor CIBIL/other bureaus and bank statements for 90 days; (e) do not pay any follow-up demand from the fake site's callers even if they quote your policy number - re-verify via 1600-series callback where available. For a pending insurance grievance, re-file on the real Bima Bharosa and keep the new Acknowledgement/Ticket number to restart the statutory clock.