Rajasthan Police Advisory on Govt Email ID Security

UdaipurTimes, Oct 15, 2026 - The Rajasthan Police Cyber Branch, R4C, under the directions of Rajasthan Director General of Police (DGP) Rajeev Kumar Sharma, has issued an advisory urging officers and employees to safeguard their official email IDs and prevent unauthorised use.

Additional Director General of Police (Cyber Crime) VK Singh said government email IDs and passwords remain at risk of being stolen and misused by cybercriminals. The Security Operations Centre (SOC) has reportedly identified cases of government email login credentials being sold or leaked on the dark web.

ADG Singh cautioned that government email IDs are used not only for official correspondence but also to access Rajasthan SSO and other critical government services. Any leakage of email credentials could therefore expose departmental information, confidential documents and other important digital resources to unauthorised access.

Employees sometimes use their official government email IDs to create accounts on private services such as Amazon, Flipkart, Zomato, Facebook, cab-booking platforms and gaming Apps. If they use the same password for these platforms as they do for their government email accounts, a data breach on any of those platforms could also compromise their official accounts. This could put government digital resources such as SSO, SecLAN and RajSWAN, along with the sensitive information they contain, at risk.

Warning Signs

Government employees have been advised to watch out for the following suspicious activities:

• Receiving login alerts or OTPs without having requested them.
• Finding messages in the email’s Sent folder that they did not send.
• Being automatically logged out of their government email accounts or discovering that their passwords have changed.
• Finding emails marked as “Read” that they have not opened.
• Receiving unusual or suspicious messages from colleagues’ official email addresses.

Immediate Steps to Secure Government Email Accounts

If a government email ID has been used on a shopping or social media app, employees should remove it from the App’s profile and replace it with their personal email address. They should also:

• Immediately change the government email password using a secure device.
• Check whether their email address may have been exposed in a data breach at  haveibeenpwned.com 
• Report any suspicious activity immediately to their IT Helpdesk or the Security Operations Centre (SOC).

Dos and Don’ts for Government Email Security
What You Should Do

• Use government email accounts exclusively for official work.
• Use personal email IDs for private registrations and subscriptions.
• Set a strong, unique password of 12–14 characters for the government email account.
• Enable multi-factor authentication (MFA) or two-factor authentication (2FA) for official email and SSO accounts.
• Immediately report suspicious activity or a potential data breach to the relevant IT Helpdesk.

What You Should Not Do

• Do not create accounts using government email IDs on shopping, gaming, dating, cab-booking or loan Apps.
• Never reuse your government email password for another account.
• Do not use your government email ID to recover personal accounts.
• Do not forward government files or emails to personal email accounts or personal Google Drive accounts.
• Never share passwords or OTPs with anyone.
• Do not grant unauthorised third-party Apps access to government accounts.

Where to Report a Cybersecurity Incident
If government email account misuse or cyberfraud is suspected, employees should immediately notify their respective IT Helpdesk or SOC. In the event of a cybersecurity breach or online fraud, the incident should be reported immediately to the nearest police station, cyber police station or the National Cyber Crime Reporting Portal.

• National Cyber Crime Reporting Portal: https://cybercrime.gov.in 
• Cybercrime Helpline No. 1930
• Cyber Helpdesk Numbers 9256001930/9257510100

Rajasthan Police has urged all government employees to follow these precautions to protect official email accounts, safeguard sensitive government information and reduce the risk of cyberattacks on critical digital systems.