Cyber Crimes in India: Legal Framework, Emerging Threats and Remedies for Victims

By: CA Anil K.
Jain

Chartered Accountant | Economist | Policy Researcher |
Author
President – Ahimsa Foundation India

Introduction:

India has
emerged as one of the world’s fastest-growing digital economies. With more than
a billion mobile connections, widespread internet access, UPI-based digital
payments, e-commerce, social media, artificial intelligence, and cloud
computing, digital technology has become an integral part of everyday life.
Unfortunately, this rapid digital transformation has also resulted in a sharp
increase in cybercrimes.

Cyber criminals
today target individuals, businesses, financial institutions, educational
institutions, hospitals and even government departments. Their primary
objectives include stealing money, personal information, confidential business
data, intellectual property, and sensitive government information. Cyber crime
has therefore become one of the biggest challenges before law enforcement
agencies in India.

What is Cyber Crime?

Cyber crime
refers to any unlawful activity in which a computer, mobile phone, digital
device, internet, or computer network is used either:

·
as the tool for committing a crime,

·
as the target of the crime, or

·
both.

Cyber crimes may
be committed by individuals, organized criminal gangs, terrorist organizations,
or even state-sponsored hackers.

Present Cyber Law in India

India has
developed a comprehensive legal framework to deal with cyber offences.

1. Information Technology Act, 2000

The Information
Technology Act, 2000 (IT Act), as amended in 2008, is India’s principal cyber
law. It provides legal recognition to electronic records and digital signatures
and prescribes offences and penalties for a wide range of cyber
crimes. Some important provisions include:

·
Unauthorised access to computer systems

·
Hacking

·
Identity theft

·
Cheating by personation using computer resources

·
Data theft

·
Cyber terrorism

·
Publishing obscene electronic material

·
Breach of confidentiality

·
Damage to computer systems

Some commonly
invoked sections include:

·
Section 43 – Unauthorised access and damage to computer resources.

·
Section 66 – Computer-related offences.

·
Section 66C – Identity theft.

·
Section 66D – Cheating by personation through computer resources.

·
Section 66E – Violation of privacy.

·
Section 66F – Cyber terrorism.

·
Sections 67, 67A and 67B – Publication or transmission of obscene, sexually explicit and child
sexual abuse material.

2. Bharatiya Nyaya Sanhita, 2023 (BNS)

With the
replacement of the Indian Penal Code by the Bharatiya Nyaya Sanhita (BNS), many
cyber offences involving cheating, forgery, extortion, criminal intimidation,
stalking, defamation and other related crimes are now prosecuted under relevant
BNS provisions alongside the IT Act, depending on the facts of the case.

3. Digital Personal Data Protection Act, 2023

The Digital
Personal Data Protection Act, 2023 seeks to protect personal digital data by
regulating how organisations collect, process, store and share personal
information. It imposes obligations on data fiduciaries and provides rights to
individuals over their personal data.

4. Other Relevant Laws

Depending upon
the nature of the offence, additional laws may also apply:

·
Indian Evidence Act (electronic evidence
provisions)

·
Copyright Act

·
Companies Act

·
Banking Regulations

·
Reserve Bank of India directions

·
CERT-In Rules

·
Telecommunications laws

Major Types of Cyber Crimes in India

1. Online Financial Fraud

The most common
cyber crime today. Examples:

·
UPI fraud

·
Internet banking fraud

·
Debit/Credit card fraud

·
Fake QR codes

·
Fake payment links

·
OTP fraud

·
SIM swap fraud

2. Phishing

Fraudsters send
fake emails, SMS messages or websites that appear to belong to banks,
government departments or reputed companies to steal passwords, OTPs and
banking credentials.

3. Vishing

Voice phishing
through telephone calls. Fraudsters impersonate:

·
Bank officers

·
RBI officials

·
Income Tax officers

·
Police officers

·
CBI officers

·
Telecom companies

4. Smishing

Fraud through
SMS messages containing malicious links.

5. Identity Theft

Stealing:

·
Aadhaar

·
PAN

·
Passport

·
Driving Licence

·
Mobile number

·
Banking credentials

The stolen
identity is then used to commit fraud.

6. Social Media Fraud

Includes:

·
Fake Facebook profiles

·
Fake Instagram accounts

·
Fake WhatsApp accounts

·
Fake LinkedIn profiles

·
Fake X (Twitter) accounts

Used for
cheating, impersonation, blackmail and extortion.

7. Online Investment Scams

Promises of:

·
Cryptocurrency profits

·
Forex trading

·
Share market returns

·
IPO allotments

·
Mutual fund schemes

·
AI trading platforms

Victims are
persuaded to invest large amounts with promises of unrealistic returns.

8. Online Job Frauds

Fraudsters offer
fake jobs requiring payment for:

·
Registration

·
Training

·
Security deposits

·
Visa processing

9. Matrimonial Frauds

Criminals create
fake matrimonial profiles and exploit victims emotionally before demanding
money.

10. Romance Scams

Criminals
develop online relationships over weeks or months before seeking financial
assistance.

11. Sextortion

Victims are
trapped through video calls or intimate content and later blackmailed with
threats to circulate compromising material unless money is paid.

12. Cyber Bullying

Common among
students and teenagers. Includes:

·
Abusive messages,

·
Online harassment,

·
Public humiliation,

·
Fake rumours,

·
Trolling.

13. Cyber Stalking

Continuous
monitoring, harassment or intimidation through electronic communication.

14. Ransomware Attacks

Hackers encrypt
computer systems and demand ransom for restoring access. Hospitals,
corporations and government agencies are frequent targets.

15. Data Theft

Theft of:

·
Customer databases,

·
Trade secrets,

·
Research data,

·
Confidential business information.

16. Email Hacking

Unauthorised
access to email accounts used for financial fraud, identity theft or espionage.

17. Website Hacking

Attackers gain unauthorised
access to websites to alter, deface or steal information.

18. Malware and Spyware

Malicious
software is secretly installed on devices to:

·
Monitor activity,

·
Steal passwords,

·
Capture banking credentials,

·
Access confidential files.

19. Deepfake Crimes

Artificial
intelligence is increasingly used to create fake audio, video and images that
can facilitate fraud, impersonation, defamation or extortion.

20. Cyber Terrorism

Attacks
targeting:

·
Defence establishments,

·
Power grids,

·
Airports,

·
Railways,

·
Communication infrastructure,

·
Financial systems.

Why Cyber Crimes are Increasing

Major reasons
include:

·
Massive internet penetration

·
Digital payments

·
Online banking

·
Social media addiction

·
Artificial Intelligence misuse

·
Lack of cyber awareness

·
Weak passwords

·
Data sharing on social media

·
Remote working

·
Cheap smartphones

·
Increasing digital dependence

Remedies Available to Victims

If a person
becomes a victim of cyber crime, immediate action is essential.

Step 1 – Report Financial Fraud Immediately

In case of
online financial fraud:

·
Call 1930, the national cyber financial
fraud helpline, immediately.

·
Report the incident through the official National
Cyber Crime Reporting Portal. Prompt reporting increases the chances of
freezing fraudulent transactions.

Step 2 – Lodge an Online Complaint

The Government
of India provides the National Cyber Crime Reporting Portal for reporting
online financial fraud, hacking, identity theft, cyber stalking, social media
offences and crimes against women and children.

Step 3 – File an FIR

Victims may also
file an FIR at:

·
The local police station, or

·
The cybercrime police station having jurisdiction.

Step 4 – Preserve Evidence

Do not delete:

·
SMS messages

·
Emails

·
Screenshots

·
Transaction receipts

·
Chat history

·
Urls

·
Mobile numbers

·
Bank statements

·
Call recordings

Digital evidence
is crucial for investigation.

Step 5 – Inform the Bank Immediately

Immediately:

·
Block debit/credit cards,

·
Freeze affected accounts,

·
Change internet banking passwords,

·
Disable UPI if necessary.

Step 6 – Change Passwords

Immediately
change passwords for:

·
Email

·
Banking

·
Social media

·
Cloud storage

·
UPI applications

Enable
two-factor authentication wherever possible.

Step 7 – Inform Social Media Platforms

If fake accounts
or impersonation are involved, report them directly to the concerned platform
and request removal.

Step 8 – Seek Legal Assistance

Where
substantial financial loss, identity theft, blackmail or privacy violations are
involved, consulting a legal practitioner experienced in cyber law can help in
pursuing criminal proceedings and any available civil remedies.

Preventive Measures

Every citizen
should:

·
Never share OTPs or banking PINs.

·
Verify payment requests independently.

·
Use strong, unique passwords.

·
Enable two-factor authentication.

·
Keep operating systems and antivirus software
updated.

·
Download apps only from trusted sources.

·
Avoid clicking suspicious links or QR codes.

·
Limit personal information shared on social media.

·
Monitor bank statements regularly.

·
Educate family members, especially children and
senior citizens, about common online scams.

Conclusion

Cybercrime is
one of the fastest-growing forms of crime in India. As digital transactions,
artificial intelligence and online services continue to expand, cyber criminals
are adopting increasingly sophisticated methods to exploit individuals and organisations.
India’s legal framework—including the Information Technology Act, 2000, the
Bharatiya Nyaya Sanhita, 2023 and the Digital Personal Data Protection Act,
2023—provides important mechanisms for investigation, prosecution and
protection. However, laws alone are not sufficient. Public awareness,
responsible online behaviour, strong cybersecurity practices and prompt
reporting are equally essential. Every citizen should understand common cyber
threats, know the available legal remedies, and report incidents immediately to
the authorities. A combination of robust legal enforcement, technological
safeguards and informed citizens is the most effective defence against cybercrime
in the digital age.