Sri Vijaya Puram, Oct. 19: The Andaman and Nicobar Administration’s online electricity bill payment portal, UrjaPay, has come under a security cloud after Google displayed a “This site may be hacked” warning associated with the website, raising concerns for consumers who rely on the platform to access electricity bills and make online payments.
The portal, operated by the Electricity Department of the Andaman and Nicobar Administration, provides online services including quick bill payments, bill viewing, payment receipts, payment history and consumer account management. The warning could undermine public confidence in a digital service used by electricity consumers across the islands.
Google’s warning is a security alert indicating that its systems believe a website may have been compromised. According to Google’s guidance, such a warning may appear when existing webpages have been altered without authorisation or new spam pages have been added. However, the warning alone does not establish the nature or extent of any security breach, and no confirmed details of a cyberattack on the UrjaPay portal were available at the time of reporting.
The issue assumes significance because the portal facilitates transactions and handles consumer-related information. Its quick payment service asks users to enter their consumer number and mobile number, while registered account services require login credentials. The website also provides access to bills, payment records and other consumer services.
The appearance of a security warning on an official government portal raises questions about whether the website has undergone a security assessment, whether any unauthorised changes have been detected and whether corrective measures have been initiated.
Google advises users not to visit a website carrying the “This site may be hacked” notification until the warning disappears from search results. The company’s guidance states that website administrators must investigate and address the underlying security issue before requesting a review through Google Search Console.
For the Electricity Department, addressing the warning and communicating the portal’s verified security status would be important to maintaining public confidence in online bill payment services. Consumers also need clarity on whether the portal is safe to use while the alert remains visible.
The department’s official website lists alternative channels for paying electricity bills, including e-Dweep Kendras, or Common Service Centres, and payment counters at Electricity Department site offices. These options may be considered by consumers who are uncertain about using the online portal until its security status is clarified.
The department’s portal also advises consumers to check their payment history if a transaction does not return a success or failure status, rather than immediately initiating another payment. This is particularly relevant when consumers are uncertain about the outcome of an online transaction.
The immediate priority is for the administration and the department responsible for maintaining the portal to verify the cause of the warning, examine any potential security issues and provide clear guidance to electricity consumers. If a compromise is confirmed, the affected systems and any unauthorised content would need to be addressed before the warning can be expected to be lifted.
As of publication, no official statement confirming a breach, detailing its cause or outlining remedial action was available for this report. The appearance of the warning should therefore not be treated as conclusive proof that consumer data or payment information has been stolen.
The incident highlights the importance of maintaining robust cybersecurity measures for government websites that handle public services and financial transactions, alongside timely communication when security concerns arise.
