Cyber Crime Act in India

The rapid growth of digital payments, smartphones, social media, online banking, and e-commerce has created many opportunities for criminals to misuse technology. Cybercrime can affect individuals, businesses, government organisations, and financial institutions.

India does not have one single law called the “Cyber Crime Act.” The primary legislation dealing with cyber offences and electronic activities is the Information Technology Act, 2000 (IT Act), supported by other criminal, evidence, financial, and data-related laws. The IT Act provides a legal framework for electronic records and electronic transactions and contains provisions dealing with various computer-related offences. (indiacode.nic.in)

What Is Cybercrime?

Cybercrime generally refers to unlawful activities involving computers, computer resources, communication devices, networks, or digital technology.

Examples include:

• Online financial fraud

• Phishing and fake websites

• Identity theft

• Hacking and unauthorised access

• Online impersonation

• Cyberstalking and harassment

• Data theft

• Malware and ransomware attacks

• Unauthorised publication or transmission of certain prohibited material

• Attacks against computer systems or networks

The exact offence and applicable law depend on the facts of the incident.

Information Technology Act, 2000

The Information Technology Act, 2000 is India’s principal legislation specifically dealing with information technology and several cyber offences.

The Act contains provisions relating to unauthorised access and damage to computer systems, identity theft, cheating by personation using computer resources, violation of privacy, cyber terrorism, and certain offences involving electronic material. (indiacode.nic.in)

Important Sections

Some commonly discussed provisions include:

Section 43 – Deals with certain unauthorised acts involving computer systems and data, including damage, downloading, disruption, or unauthorised access, with liability subject to the statutory requirements.

Section 66 – Provides for punishment where certain acts referred to in Section 43 are done dishonestly or fraudulently.

Section 66C – Deals with identity theft, including fraudulent or dishonest use of specified electronic signatures, passwords, or unique identification features.

Section 66D – Deals with cheating by personation using a communication device or computer resource.

Section 66E – Deals with violation of privacy in specified circumstances.

Section 66F – Deals with cyber terrorism.

The IT Act also contains provisions concerning intermediaries, blocking of information in specified circumstances, and other matters related to electronic activity. (indiacode.nic.in)

Cybercrime and the Bharatiya Nyaya Sanhita

Cybercrime is not limited to offences under the IT Act. Depending on the circumstances, conduct involving digital technology may also constitute offences under the Bharatiya Nyaya Sanhita, 2023 (BNS).

For example, online impersonation, cheating, threats, extortion, stalking, forgery, or other offences may attract provisions of general criminal law in addition to provisions under technology-related legislation.

The BNS replaced the Indian Penal Code, 1860 from 1 July 2024. (indiacode.nic.in)

Common Types of Cyber Fraud

Online Banking and UPI Fraud

Criminals may trick victims into revealing OTPs, PINs, passwords, card information, or into approving fraudulent transactions.

Phishing

Fraudsters may send fake emails, SMS messages, or links designed to steal passwords, banking information, or other sensitive data.

Fake Customer-Care Scams

Fraudsters may pretend to be customer-care representatives and ask victims to install applications, share credentials, or make payments.

Investment and Job Scams

Victims may be promised unrealistic returns, employment, commissions, or other benefits and then asked to transfer money or provide personal information.

Social-Media Impersonation

Criminals may create fake accounts using another person’s identity to deceive contacts, demand money, or damage the person’s reputation.

What Should You Do After Cyber Fraud?

Act immediately.

Step 1: Contact Your Bank

Immediately inform your bank or financial institution if an unauthorised financial transaction has occurred. Ask the institution to secure the affected account, card, or payment instrument and provide a complaint/reference number.

Step 2: Call 1930

For financial cyber fraud in India, victims can report the incident through the National Cyber Crime Helpline 1930.

Step 3: Report Online

Use the Government of India’s National Cyber Crime Reporting Portal:

National Cyber Crime Reporting Portal

The portal provides facilities for reporting different categories of cybercrime, including financial fraud and crimes against women and children. (cybercrime.gov.in)

Step 4: Preserve Evidence

Keep:

• Transaction details

• UTR/reference numbers

• Screenshots

• Emails

• Phone numbers

• WhatsApp/Telegram conversations

• Website addresses

• Social-media profiles

• Payment receipts

• Relevant files and documents

Do not delete or modify relevant evidence.

Precautions Against Cybercrime

• Never share your OTP, UPI PIN, CVV, password, or banking credentials.

• Do not click suspicious links.

• Verify websites before entering sensitive information.

• Do not install unknown applications at the request of strangers.

• Be cautious of urgent calls claiming to be from banks, police, courts, courier companies, or government departments.

• Use strong passwords and two-factor authentication.

• Keep your operating system and applications updated.

• Regularly monitor bank and payment-account activity.

• Do not allow unknown persons remote access to your computer or phone.

• Be particularly careful with “investment”, “job”, “KYC”, “loan”, and “customer-care” offers received unexpectedly.

Protection of Women and Children Online

Online sexual harassment, stalking, exploitation, and publication or transmission of unlawful material may involve serious criminal offences. Women and children facing online abuse should preserve evidence and report the matter through appropriate law-enforcement and cybercrime channels.

Special legal protections may apply in cases involving children, including under the Protection of Children from Sexual Offences Act, 2012 (POCSO).

Why Cybercrime Awareness Is Important

Technology is changing rapidly, and criminals continuously develop new methods of deception. Legal awareness should therefore be combined with basic digital security practices.

Citizens should remember that banks, government departments, and legitimate organisations generally do not require customers to disclose confidential passwords, PINs, or OTPs to unknown callers.

Remember

Cybercrime should be reported quickly and handled through lawful channels.

Secure your account → Contact your bank → Call 1930 for financial cyber fraud → Report at cybercrime.gov.in → Preserve evidence → Cooperate with the authorities.

India’s cybercrime framework includes the Information Technology Act, 2000, the Bharatiya Nyaya Sanhita, 2023, the Bharatiya Nagarik Suraksha Sanhita, 2023, the Bharatiya Sakshya Adhiniyam, 2023, and other specialised laws and regulations depending on the circumstances.

This article is intended for general public awareness and is not a substitute for case-specific legal advice. The applicable legal provisions depend on the nature of the cyber incident and the facts of the case.