Online fraud, identity theft, cyberbullying, and data breaches are surging in India. This guide explains how to report cybercrime, what evidence to collect, and how to recover lost money.
Cybercrime in India: A Growing Threat
India reported over 14 lakh cybercrime cases in 2024. Common cybercrimes include:
- UPI / banking fraud — phishing, fake customer care, OTP theft
- Online investment fraud — fake trading apps, Ponzi schemes
- Identity theft — using someone's personal data to apply for loans or credit cards
- Sextortion — threatening to release private images
- Cyberbullying and stalking — especially targeting women and children
- Data breaches — corporate or personal data stolen
Laws Governing Cybercrime in India
- Information Technology Act, 2000 (IT Act) — primary legislation
- IT (Amendment) Act, 2008 — added provisions for data protection and intermediary liability
- Bharatiya Nyaya Sanhita, 2023 (BNS) — replaced IPC, has provisions for cheating, extortion, forgery
- Digital Personal Data Protection Act, 2023 — data breach liability
Key Cybercrime Offences and Penalties
| Offence | Section | Penalty |
|---|
| Hacking / unauthorised access | IT Act S.66 | Up to 3 years, ₹5 lakh fine |
| Identity theft | IT Act S.66C | Up to 3 years, ₹1 lakh fine |
| Online fraud / cheating | BNS S.318 | Up to 7 years |
| Publishing obscene material | IT Act S.67 | Up to 3 years (first offence) |
| Cyberstalking | BNS S.78 | Up to 3 years |
| Data theft | IT Act S.43A | Compensation (no limit) |
Step-by-Step: How to Report a Cybercrime
Immediate Action (Within 1 Hour for Financial Fraud)
If you have been defrauded financially:
- 1Call 1930 (National Cyber Crime Helpline) — available 24/7
- 2Block your debit/credit card immediately
- 3Freeze your account — call your bank's customer care
- 4Preserve all evidence (screenshots, transaction IDs)
The first hour is critical for fund recovery. Once money is transferred out, recovery becomes extremely difficult.
File Online at cybercrime.gov.in
- 1Go to www.cybercrime.gov.in
- 2Click "Report Other Cyber Crime"
- 3Register with mobile number
- 4Select category and fill complaint details
- 5Upload evidence
- 6Note the complaint acknowledgement number
File an FIR at the Police Cyber Cell
For serious crimes (extortion, identity theft, large financial fraud):
- 1Visit your local police station or dedicated cyber cell
- 2Carry: printouts of evidence, transaction details, bank statements, screenshots
- 3Insist on a written acknowledgement even if they don't immediately file an FIR
- 4If police refuse to file FIR, file a complaint with the Superintendent of Police or approach the Magistrate under Section 156(3) CrPC
Evidence to Collect Before Reporting
- Screenshots of all suspicious messages, calls, websites
- Transaction IDs, UTR numbers, bank statements
- Email headers (right-click → "View Source" or "View Original")
- Device information (your phone/computer details)
- Names, phone numbers, UPI IDs used by fraudsters
- Social media profile links
UPI Fraud: Specific Steps
If you were defrauded via UPI:
- 1Immediately call 1930 or visit cybercrime.gov.in
- 2File a dispute through your UPI app
- 3Contact NPCI grievance cell: npci.org.in
- 4File complaint with your bank's nodal officer
- 5Provide the exact transaction time, UTR number, and fraudster's UPI ID
Banks are required to acknowledge payment disputes within 24 hours and resolve within 45 days under RBI guidelines.
Protecting Yourself from Cybercrime
- Never share OTPs, PINs, CVV numbers — not even with "bank employees"
- Enable two-factor authentication on all accounts
- Use unique passwords for each account (password manager recommended)
- Verify investment apps on SEBI's registered intermediary list
- Check website URLs carefully before entering payment details
Conclusion
Cyber fraud is traumatic and the perpetrators are often untraceable — but filing a prompt complaint maximises your chance of fund recovery. Use Kanoonseva to generate a professional cybercrime complaint letter that you can submit to courts, regulators, and your bank.