Cyber Crimes in India: Legal Framework, Emerging Threats and Remedies for Victims

 

By: CA  Anil K. Jain         

Chartered Accountant | Economist | Policy Researcher | Author      
President – Ahimsa Foundation India

 

Introduction:

India has emerged as one of the world's fastest-growing digital economies. With more than a billion mobile connections, widespread internet access, UPI-based digital payments, e-commerce, social media, artificial intelligence, and cloud computing, digital technology has become an integral part of everyday life. Unfortunately, this rapid digital transformation has also resulted in a sharp increase in cybercrimes.

Cyber criminals today target individuals, businesses, financial institutions, educational institutions, hospitals and even government departments. Their primary objectives include stealing money, personal information, confidential business data, intellectual property, and sensitive government information. Cyber crime has therefore become one of the biggest challenges before law enforcement agencies in India.

What is Cyber Crime?

Cyber crime refers to any unlawful activity in which a computer, mobile phone, digital device, internet, or computer network is used either:

·         as the tool for committing a crime,

·         as the target of the crime, or

·         both.

Cyber crimes may be committed by individuals, organized criminal gangs, terrorist organizations, or even state-sponsored hackers.

Present Cyber Law in India

India has developed a comprehensive legal framework to deal with cyber offences.

1. Information Technology Act, 2000

The Information Technology Act, 2000 (IT Act), as amended in 2008, is India's principal cyber law. It provides legal recognition to electronic records and digital signatures and prescribes offences and penalties for a wide range of cyber crimes. Some important provisions include:

·         Unauthorised access to computer systems

·         Hacking

·         Identity theft

·         Cheating by personation using computer resources

·         Data theft

·         Cyber terrorism

·         Publishing obscene electronic material

·         Breach of confidentiality

·         Damage to computer systems

Some commonly invoked sections include:

·         Section 43 – Unauthorised access and damage to computer resources.

·         Section 66 – Computer-related offences.

·         Section 66C – Identity theft.

·         Section 66D – Cheating by personation through computer resources.

·         Section 66E – Violation of privacy.

·         Section 66F – Cyber terrorism.

·         Sections 67, 67A and 67B – Publication or transmission of obscene, sexually explicit and child sexual abuse material.


2. Bharatiya Nyaya Sanhita, 2023 (BNS)

With the replacement of the Indian Penal Code by the Bharatiya Nyaya Sanhita (BNS), many cyber offences involving cheating, forgery, extortion, criminal intimidation, stalking, defamation and other related crimes are now prosecuted under relevant BNS provisions alongside the IT Act, depending on the facts of the case. 

3. Digital Personal Data Protection Act, 2023

The Digital Personal Data Protection Act, 2023 seeks to protect personal digital data by regulating how organisations collect, process, store and share personal information. It imposes obligations on data fiduciaries and provides rights to individuals over their personal data.

4. Other Relevant Laws

Depending upon the nature of the offence, additional laws may also apply:

·         Indian Evidence Act (electronic evidence provisions)

·         Copyright Act

·         Companies Act

·         Banking Regulations

·         Reserve Bank of India directions

·         CERT-In Rules

·         Telecommunications laws

Major Types of Cyber Crimes in India

1. Online Financial Fraud

The most common cyber crime today. Examples:

·         UPI fraud

·         Internet banking fraud

·         Debit/Credit card fraud

·         Fake QR codes

·         Fake payment links

·         OTP fraud

·         SIM swap fraud

2. Phishing

Fraudsters send fake emails, SMS messages or websites that appear to belong to banks, government departments or reputed companies to steal passwords, OTPs and banking credentials.

3. Vishing

Voice phishing through telephone calls. Fraudsters impersonate:

·         Bank officers

·         RBI officials

·         Income Tax officers

·         Police officers

·         CBI officers

·         Telecom companies

4. Smishing

Fraud through SMS messages containing malicious links.

5. Identity Theft

Stealing:

·         Aadhaar

·         PAN

·         Passport

·         Driving Licence

·         Mobile number

·         Banking credentials

The stolen identity is then used to commit fraud.

6. Social Media Fraud

Includes:

·         Fake Facebook profiles

·         Fake Instagram accounts

·         Fake WhatsApp accounts

·         Fake LinkedIn profiles

·         Fake X (Twitter) accounts

Used for cheating, impersonation, blackmail and extortion.

7. Online Investment Scams

Promises of:

·         Cryptocurrency profits

·         Forex trading

·         Share market returns

·         IPO allotments

·         Mutual fund schemes

·         AI trading platforms

Victims are persuaded to invest large amounts with promises of unrealistic returns.

8. Online Job Frauds

Fraudsters offer fake jobs requiring payment for:

·         Registration

·         Training

·         Security deposits

·         Visa processing

9. Matrimonial Frauds

Criminals create fake matrimonial profiles and exploit victims emotionally before demanding money.

10. Romance Scams

Criminals develop online relationships over weeks or months before seeking financial assistance.

11. Sextortion

Victims are trapped through video calls or intimate content and later blackmailed with threats to circulate compromising material unless money is paid.

12. Cyber Bullying

Common among students and teenagers. Includes:

·         Abusive messages,

·         Online harassment,

·         Public humiliation,

·         Fake rumours,

·         Trolling.

13. Cyber Stalking

Continuous monitoring, harassment or intimidation through electronic communication.

14. Ransomware Attacks

Hackers encrypt computer systems and demand ransom for restoring access. Hospitals, corporations and government agencies are frequent targets.

15. Data Theft

Theft of:

·         Customer databases,

·         Trade secrets,

·         Research data,

·         Confidential business information.

16. Email Hacking

Unauthorised access to email accounts used for financial fraud, identity theft or espionage.

17. Website Hacking

Attackers gain unauthorised access to websites to alter, deface or steal information.

18. Malware and Spyware

Malicious software is secretly installed on devices to:

·         Monitor activity,

·         Steal passwords,

·         Capture banking credentials,

·         Access confidential files.

19. Deepfake Crimes

Artificial intelligence is increasingly used to create fake audio, video and images that can facilitate fraud, impersonation, defamation or extortion.

20. Cyber Terrorism

Attacks targeting:

·         Defence establishments,

·         Power grids,

·         Airports,

·         Railways,

·         Communication infrastructure,

·         Financial systems.

Why Cyber Crimes are Increasing

Major reasons include:

·         Massive internet penetration

·         Digital payments

·         Online banking

·         Social media addiction

·         Artificial Intelligence misuse

·         Lack of cyber awareness

·         Weak passwords

·         Data sharing on social media

·         Remote working

·         Cheap smartphones

·         Increasing digital dependence

Remedies Available to Victims

If a person becomes a victim of cyber crime, immediate action is essential.

Step 1 – Report Financial Fraud Immediately

In case of online financial fraud:

·         Call 1930, the national cyber financial fraud helpline, immediately.

·         Report the incident through the official National Cyber Crime Reporting Portal. Prompt reporting increases the chances of freezing fraudulent transactions. 

Step 2 – Lodge an Online Complaint

The Government of India provides the National Cyber Crime Reporting Portal for reporting online financial fraud, hacking, identity theft, cyber stalking, social media offences and crimes against women and children. 

Step 3 – File an FIR

Victims may also file an FIR at:

·         The local police station, or

·         The cybercrime police station having jurisdiction.

Step 4 – Preserve Evidence

Do not delete:

·         SMS messages

·         Emails

·         Screenshots

·         Transaction receipts

·         Chat history

·         Urls

·         Mobile numbers

·         Bank statements

·         Call recordings

Digital evidence is crucial for investigation.

Step 5 – Inform the Bank Immediately

Immediately:

·         Block debit/credit cards,

·         Freeze affected accounts,

·         Change internet banking passwords,

·         Disable UPI if necessary.

Step 6 – Change Passwords

Immediately change passwords for:

·         Email

·         Banking

·         Social media

·         Cloud storage

·         UPI applications

Enable two-factor authentication wherever possible.

Step 7 – Inform Social Media Platforms

If fake accounts or impersonation are involved, report them directly to the concerned platform and request removal.

Step 8 – Seek Legal Assistance

Where substantial financial loss, identity theft, blackmail or privacy violations are involved, consulting a legal practitioner experienced in cyber law can help in pursuing criminal proceedings and any available civil remedies.

Preventive Measures

Every citizen should:

·         Never share OTPs or banking PINs.

·         Verify payment requests independently.

·         Use strong, unique passwords.

·         Enable two-factor authentication.

·         Keep operating systems and antivirus software updated.

·         Download apps only from trusted sources.

·         Avoid clicking suspicious links or QR codes.

·         Limit personal information shared on social media.

·         Monitor bank statements regularly.

·         Educate family members, especially children and senior citizens, about common online scams.


Conclusion

Cybercrime is one of the fastest-growing forms of crime in India. As digital transactions, artificial intelligence and online services continue to expand, cyber criminals are adopting increasingly sophisticated methods to exploit individuals and organisations. India's legal framework—including the Information Technology Act, 2000, the Bharatiya Nyaya Sanhita, 2023 and the Digital Personal Data Protection Act, 2023—provides important mechanisms for investigation, prosecution and protection. However, laws alone are not sufficient. Public awareness, responsible online behaviour, strong cybersecurity practices and prompt reporting are equally essential. Every citizen should understand common cyber threats, know the available legal remedies, and report incidents immediately to the authorities. A combination of robust legal enforcement, technological safeguards and informed citizens is the most effective defence against cybercrime in the digital age.

  

By:CA Anil K. Jain         
Chartered Accountant | Economist | Policy Researcher | Author      
President – Ahimsa Foundation India

Cell: +91 9810046108, email:caindia@hotmail.com





 


 

 

 


No comments:

Post a Comment