Heightened risk of online scams and phishing attacks amidst 2024 Diwali celebration

### Executive Summary — During the 2024 Diwali festival, CloudSEK observed a spike in online scams targeting Indian consumers, including fake e-commerce stores, fraudulent job portals, discounted firecracker sites, and brand-impersonation pages that collect personal data and request direct payments; the report lists example domains, describes payment traps and data-harvesting techniques, outlines impacts (financial loss, identity theft risk, device/IMEI misuse), and recommends verifying sites, avoiding direct transfers, limiting shared data, enabling 2FA, and reporting suspicious pages.