Cyber Swachhta Kendra is a free Government of India service that helps users detect and remove certain types of malware. Learn how to use its free security tools, and how they can help protect your phone or computer.
Your phone is using more data than usual. Your computer has slowed down, or you have found an app you do not remember installing. These changes can have several causes, including malware. A security scan can help you check.
You also may have received an SMS saying, “CSK, CERT-In advises you to keep your digital devices free from botnet and malware infections. Download the free bot removal tool from the website.”
Cyber Swachhta Kendra (CSK) is a free government service that helps people find and remove certain types of malware. It also publishes security alerts and links to tools that can help protect computers and mobile phones.
But why is the government asking people to keep their devices free from malware, and how can you use the free tools it offers?
What is Cyber Swachhta Kendra?
Cyber Swachhta Kendra, also called the Botnet Cleaning and Malware Analysis Centre, operates under the Indian Computer Emergency Response Team (CERT-In). CERT-In is part of the Ministry of Electronics and Information Technology (MeitY). The government launched CSK on 21 February 2017.
The centre helps detect botnet infections, alerts users and directs them to tools that can clean infected devices. It also publishes advice on securing computers, phones and home routers.
What is a botnet?
A botnet is a group of computers or other internet-connected devices that attackers control through malicious software. The owners may not know that their devices have become part of the network.
Attackers can use infected devices to send spam, spread malware or launch attacks on websites. Some malware can also steal personal information or install more harmful software.
An infected device may continue to work normally. You might not see a warning or notice any change in its performance. This makes security tools useful, although no scanner can detect every threat.
Cyber Swachhta Kendra helps users check for certain known threats and find tools to remove them. A scan that finds nothing does not guarantee that a device is safe.
What tools does Cyber Swachhta Kendra offer?
The Security Tools section lists tools for Windows computers and Android phones. These tools can scan for certain types of malware and remove threats they recognise.
The website has listed tools from security providers such as K7 Security, Quick Heal and eScan. It has also listed M-Kavach 2, a mobile security tool developed by C-DAC Hyderabad with support from MeitY.
CSK also publishes security alerts and advice about known threats. Users can read these updates to understand particular risks and learn how to respond.
The list of tools may change. Check the official website for the current options, then confirm the developer’s name and device compatibility before downloading anything.
How to use Cyber Swachhta Kendra
Visit www.csk.gov.in and open the Security Tools section. Choose a tool that supports your device and follow the link to the official provider or app store listing.
Before installing it, check the developer’s name and read the permissions it requests. Do not install a file sent by someone who claims to represent CERT-In, your bank or a security company.
Open the tool and follow its instructions to scan your device. If it finds malware, read the result and follow the removal steps. Back up important files before making major changes to your system.
After the scan, install pending security updates and remove apps or programmes you cannot verify. If the problem continues, ask a qualified technician to check the device.
When might you need it?
Suppose your computer starts sending spam emails to people in your contact list. Malware could be responsible, but someone may also have stolen your email password. Run a scan to check the computer. Then change your password from a trusted device, review active account sessions and enable two-factor authentication.
You may also need a scan after opening a suspicious attachment. The file might claim to be a bank statement, a delivery receipt or a job application. If your computer starts behaving strangely afterwards, use a trusted security tool to check for malware. If you entered a password or banking details, change the affected password from a safe device and contact your bank if your financial information may have been exposed.
On an Android phone, check unfamiliar apps that ask for access to SMS messages, contacts or Accessibility settings. A security tool may detect some harmful apps. You can also review permissions in your phone settings and remove access that an app does not need. Do not assume every unfamiliar app is malicious. Some phones come with pre-installed apps that you may not recognise.
Your internet service provider may also warn you about possible botnet activity linked to your connection. CSK works with service providers to alert users about suspected infections. Follow the guidance in the alert and scan the relevant devices.
An IP address does not always identify one particular device. If you cannot work out which device may be infected, ask your internet service provider for help.
What Cyber Swachhta Kendra cannot do
CSK focuses on malware and related security threats. It cannot prevent every online scam or fix every account security problem.
Consider a caller who pretends to work for your bank and asks you to share an OTP. This scam relies on deception, not necessarily malware. A security scan will not stop the caller from trying to trick you.
The same applies to fake investment schemes, fraudulent websites and UPI scams. If you transfer money to a scammer, a malware removal tool will not recover it.
If you suspect financial cybercrime in India, call 1930 as soon as possible and file a report through the National Cyber Crime Reporting Portal. Do not wait for a device scan before reporting an unauthorised transaction.
A clean scan also does not mean that your accounts are safe. Malware may have stolen your passwords before the tool removed it. Change any exposed passwords, review recent account activity and check your bank statements.
How can you use the service safely?
Start at the official CSK website. Follow its links to the tool provider rather than downloading software from a random website or message.
Check the developer’s name and the app’s permissions before installing it. Do not share your OTP, banking password or remote-access code with anyone who offers to clean your device.
Be wary of callers who threaten to arrest you, block your bank account or take legal action unless you pay for a security service. These threats may be part of a scam.
Keep your operating system and apps updated. Use genuine software and a trusted security tool. If you suspect a serious infection, avoid banking on the affected device until you have checked it.
What should you do after a scan?
If the tool finds and removes malware, check whether your personal information may have been exposed. Change passwords that may have been compromised, using a device you trust. Review your email and social media accounts for unfamiliar activity. Check recent bank transactions if you used banking services on the affected device.
Contact your bank immediately if you find an unauthorised transaction. Report suspected financial cybercrime through the official channels. If malware returns or your device continues to behave strangely, seek help from a qualified technician.
Do not reset your phone or format your computer without checking what you may lose. Back up important files first, but avoid copying suspicious files that could reinfect the device.
What should you remember?
Cyber Swachhta Kendra gives users a free way to find malware removal tools and security advice from a government-backed service. It can help when you suspect an infection, but it cannot guarantee that your device is free from every threat.
Keep your software updated, check app permissions and protect your online accounts. If you suspect malware, visit csk.gov.in and follow the guidance for your device. If you have lost money to a scam, contact your bank and report it through the official cybercrime channels. A malware scan will not resolve a fraudulent transaction.