Cyber Crime Laws in India: Reporting, Investigation, and Legal Remedies

Online fraud, data theft, and digital harassment are rising. Learn about India's cyber crime laws, how to report incidents, and the legal protections available.

7 February 2026

By Law Saral Editorial Team — Legal Research & Content Review

Reviewed by Adv. Harvijaysinh H. Gohil, Advocate — Bar Council of Gujarat · G/954/1994

Introduction

As India's digital economy expands rapidly, cyber crimes have grown in both frequency and sophistication. From online financial fraud and identity theft to cyberstalking and data breaches, digital crimes affect millions of Indians each year. Understanding the legal framework helps individuals protect themselves and seek appropriate remedies when incidents occur.

What Constitutes Cyber Crime?

Cyber crime broadly refers to any criminal activity that involves computers, networks, or digital devices. In India, these offenses are primarily governed by:

Information Technology Act, 2000 (IT Act) and its amendments Bharatiya Nyaya Sanhita (BNS), 2023 — for traditional crimes committed using digital means Various special laws addressing specific cyber offenses

Common Types of Cyber Crime in India

Financial Fraud UPI fraud and phishing attacks Credit/debit card skimming Fake e-commerce websites Investment scams and Ponzi schemes online Loan app fraud and harassment

Identity Crimes Identity theft and impersonation Fake social media profiles Aadhaar or PAN misuse Email account hacking

Content-Related Offenses Cyberstalking and online harassment Publishing obscene material Defamation through social media Spreading fake news or misinformation Non-consensual sharing of intimate images

System-Related Offenses Unauthorized access to computer systems (hacking) Data theft and espionage Virus and malware distribution Denial of service attacks Website defacement

Key Legal Provisions

Under the IT Act, 2000

Section 43 — Unauthorized access, data theft, introduction of viruses: Compensation up to Rs. 5 crore.

Section 66 — Computer-related offenses (dishonestly or fraudulently): Imprisonment up to 3 years and/or fine up to Rs. 5 lakh.

Section 66B — Receiving stolen computer resources: Imprisonment up to 3 years and/or fine up to Rs. 1 lakh.

Section 66C — Identity theft: Imprisonment up to 3 years and fine up to Rs. 1 lakh.

Section 66D — Cheating by personation using computer resources: Imprisonment up to 3 years and fine up to Rs. 1 lakh.

Section 66E — Violation of privacy (capturing and publishing private images): Imprisonment up to 3 years and/or fine up to Rs. 2 lakh.

Section 67 — Publishing obscene material electronically: First conviction: imprisonment up to 3 years and fine up to Rs. 5 lakh.

Section 72 — Breach of confidentiality and privacy by officials: Imprisonment up to 2 years and/or fine up to Rs. 1 lakh.

Under BNS, 2023

Traditional offenses committed using digital means — such as cheating, fraud, defamation, extortion, and criminal intimidation — are prosecuted under relevant BNS provisions with digital evidence supporting the case.

How to Report Cyber Crime

Step 1: National Cyber Crime Reporting Portal The Government of India operates cybercrime.gov.in — a centralized portal for reporting cyber crimes:

File complaints for financial fraud, women/child-related cyber crimes, and other cyber offenses Track complaint status online Available in multiple languages Reports are forwarded to the relevant state police for investigation

Step 2: Helpline Call the Cyber Crime Helpline: 1930 for immediate assistance, especially for financial fraud where quick action may help freeze fraudulent transactions.

Step 3: Local Police / Cyber Cell File an FIR at your nearest police station For specialized handling, approach the Cyber Crime Cell in your city Under BNSS, you can file a Zero FIR at any police station regardless of jurisdiction

Step 4: Preserve Evidence Before reporting, document and preserve: Screenshots of messages, posts, or transactions Email headers and full conversation threads Transaction records and bank statements URLs of offending websites or profiles Device logs if systems were compromised Any communication from the offender

Investigation Process

Once a complaint is filed:

Registration: Police register the complaint (FIR for cognizable offenses) Technical Investigation: Cyber forensic teams may analyze devices, trace IP addresses, examine digital footprints Coordination: May involve RBI, banks, telecom companies, social media platforms Evidence Collection: Digital forensic evidence is collected following legal procedures for admissibility Arrest and Prosecution: If the offender is identified, arrest and prosecution follow standard criminal procedure

Protecting Yourself: Preventive Measures

For Financial Safety: Never share OTPs, PINs, or passwords with anyone Verify UPI payment requests before accepting Use official apps from trusted app stores only Enable two-factor authentication on all accounts Regularly monitor bank and credit card statements

For Online Safety: Use strong, unique passwords for different accounts Be cautious of unsolicited links in emails and messages Verify the identity of people you interact with online Review privacy settings on social media regularly Keep devices and software updated

For Businesses: Implement robust cybersecurity policies Train employees on recognizing phishing and social engineering Regular security audits and vulnerability assessments Incident response plans for data breaches Compliance with IT Act data protection obligations

Compensation and Remedies

Victims of cyber crime may seek:

Criminal prosecution of the offender under IT Act and BNS Compensation from the offender through criminal courts Civil damages through separate civil proceedings Banking remedies — banks may reverse fraudulent transactions if reported within specific timeframes (RBI guidelines require banks to address complaints within defined periods) Platform action — social media platforms and e-commerce sites have grievance officers who can remove offensive content or suspend fraudulent accounts

Emerging Challenges

AI-Generated Fraud: Deepfakes and AI-generated content create new challenges for detection and prosecution.

Cross-Border Crimes: Many cyber criminals operate from outside India, making investigation and prosecution difficult.

Cryptocurrency: Digital currency-related fraud is increasing, with evolving regulatory frameworks.

Data Protection: The Digital Personal Data Protection Act, 2023 introduces new obligations for organizations handling personal data.

Conclusion

Cyber crime is an evolving challenge that requires awareness, preventive measures, and knowledge of legal remedies. India's legal framework provides multiple avenues for reporting and seeking redress. Acting quickly — especially in financial fraud cases — significantly improves the chances of recovery and resolution.

*This article is for educational purposes and general awareness. It does not constitute legal advice. Law Saral is an AI-powered technology platform — not a law firm or legal advisor. AI-generated outputs are probabilistic and may contain errors. No accuracy or outcome is guaranteed. Cyber crime investigation involves specialized technical and legal considerations. All information must be independently verified by a qualified advocate.*