Skip to content
Scammers.com
ImpersonationReviewed

Fake ICICI Lombard insurance renewal sites icicilombardsrenewal.com collect UPI payments

Threat researcher @Malwarehunterr posted on X on 11 November 2026 that a suspicious website impersonating the insurance renewal portal of ICICI Lombard, the Indian general insurer, had been identified. According to th…

First reported
Reports
1

Source: x.com · published

Illustration: Impersonation scams

What happened

Threat researcher @Malwarehunterr posted on X on 11 November 2026 that a suspicious website impersonating the insurance renewal portal of ICICI Lombard, the Indian general insurer, had been identified. According to the post, the site collects policyholder information, includes UPI payment functionality, contains customer records and admin/advisor portals, and supports PDF document generation. The researcher listed the indicators icicilombardsrenewal[.]com and www[.]icici-lombardrenewal[.]com, and called it potential insurance phishing and payment fraud, noting that actual fraudulent transactions remain unverified. ICICI Lombard is impersonated and is not the operator. Renew policies only through the insurer's official website or app.

How the scam works

Insurance-renewal impersonation sites copy a familiar insurer's name and ask for policy details and a payment. Money sent through that form does not go to the real insurer, and personal details can be reused in further fraud. ICICI Lombard was impersonated and is not involved. The researcher flagged icicilombardsrenewal.com and icici-lombardrenewal.com; neither is an official ICICI Lombard address.

Renew a policy only by typing the insurer's official website or opening its official app. If you already submitted details or a payment, contact the real insurer through a number or site you already use, and tell your bank or UPI app.

A slightly altered domain is a common trick. Compare the address character by character with the official site, and be wary of any renewal page you reached from a search ad rather than from a bookmark you already use.

Source

Public post on X, 11 November 2026: https://x.com/Malwarehunterr/status/2120434261035737488

The indicators come from this source and have not been independently checked by scammers.com.

Red flags

  • An insurance-renewal site whose address is not ICICI Lombard's official domain.
  • A request for policyholder details and a payment on a page you reached from a message or search result.
  • A slight misspelling or extra letter in a domain that otherwise looks like ICICI Lombard.
  • Pressure to pay immediately to keep a policy from lapsing.

If you were targeted

  1. 1Do not enter policy details or make a payment on icicilombardsrenewal.com or icici-lombardrenewal.com.
  2. 2Renew only through the official ICICI Lombard site or app you type yourself.
  3. 3If you already paid or submitted details, contact the real insurer and your bank or UPI app at once.
  4. 4Report the sites to the insurer and to your national cyber-crime service.
ReportFraud.ftc.gov FBI IC3 More resources

Related reports

All impersonation reports