India's cyber crime framework combines the Information Technology Act, 2000 with the Bharatiya Nyaya Sanhita, 2023 and data protection law. This guide explains key offences, common scams including fake 'digital arrest' calls, how to report on 1930 and cybercrime.gov.in, and what to do immediately after fraud.
As digital payments and online services expand, cyber crime has become one of India's fastest-growing categories of offence. From UPI fraud and phishing to sextortion and fake "digital arrest" calls, criminals exploit trust, urgency and fear. Knowing the law and the reporting process can make the difference between recovering money and losing it.
This article is general legal information, not legal advice. In an emergency, contact the police.
The Legal Framework
India's primary cyber law. Key provisions include:
| Section | Offence |
|---|
| 43 | Unauthorised access, data damage (civil liability) |
| 66 | Computer-related offences (hacking with dishonest intent) |
| 66B | Receiving stolen computer resources |
| 66C | Identity theft (misusing passwords, digital signatures) |
| 66D | Cheating by personation using computer resources |
| 66E | Violation of privacy (capturing or sharing private images) |
| 66F | Cyber terrorism |
| 67, 67A, 67B | Publishing obscene or sexually explicit material, including child sexual abuse material |
2. Bharatiya Nyaya Sanhita, 2023 (BNS)
The BNS replaced the Indian Penal Code from July 1, 2024. Provisions relevant to cyber crime include:
- Cheating and cheating by personation
- Extortion, including sextortion
- Criminal intimidation and defamation
- Organised crime, which explicitly includes cyber crimes carried out by organised groups
- Stalking, including monitoring a woman's online activity
The Bharatiya Nagarik Suraksha Sanhita, 2023 and Bharatiya Sakshya Adhiniyam, 2023 govern procedure and electronic evidence.
3. Data Protection
The Digital Personal Data Protection Act, 2023 sets obligations for organisations handling personal data and penalties for breaches.
4. Sector Rules
- CERT-In directions require organisations to report specified cyber incidents within six hours.
- RBI rules limit customer liability for unauthorised electronic banking transactions if reported promptly, generally within three working days for zero liability in qualifying cases.
Common Cyber Frauds in India
- UPI and QR code scams: Fraudsters send "collect" requests or QR codes claiming you will receive money. You never need to enter your UPI PIN to receive money.
- "Digital arrest" scams: Callers pose as police, CBI, customs or courier officials, claim you are implicated in a crime and demand money via video call. There is no legal procedure called "digital arrest"; real agencies do not arrest people over video calls or demand payment.
- Phishing and fake KYC updates: Messages threatening to block bank accounts or SIM cards unless you click a link.
- Investment and task scams: Promises of high returns or paid "likes" and reviews that end in large losses.
- Sextortion: Recorded video calls used for blackmail.
- Fake customer care numbers found through search results.
- Loan app harassment and data misuse.
How to Report Cyber Crime
Act Fast: The Golden Hour
If money has been lost, report immediately. The sooner a complaint is registered, the better the chance banks can freeze funds.
- Call 1930, the national cyber crime helpline, run under the Indian Cyber Crime Coordination Centre (I4C).
- File a complaint at cybercrime.gov.in, the National Cyber Crime Reporting Portal. Women and children-related complaints can be filed anonymously.
- Inform your bank or payment app and request blocking of cards or accounts.
- Report suspected fraud calls and messages through the Chakshu facility on the Sanchar Saathi portal.
- Visit the local police station or cyber cell for an FIR where required.
Preserve Evidence
- Screenshots of messages, profiles, transaction IDs and call logs
- Bank statements showing the transaction
- URLs, phone numbers and email addresses used by fraudsters
Prevention Checklist
- Never share OTP, UPI PIN, CVV or passwords with anyone.
- Verify customer care numbers only from official websites or apps.
- Enable two-factor authentication or passkeys on important accounts.
- Keep phones and apps updated; install apps only from official stores.
- Be sceptical of urgency, fear and unbelievable offers.
- Talk to elderly family members about common scams.
Frequently Asked Questions
What is the cyber crime helpline number in India?
1930, along with the portal cybercrime.gov.in.
Is "digital arrest" real?
No. It is a scam. Indian law has no procedure for arresting someone over a video call.
Can I get my money back after UPI fraud?
Recovery is possible if funds are frozen before being withdrawn, which is why immediate reporting to 1930 matters.
The Bharatiya Nyaya Sanhita, 2023, in force since July 1, 2024, alongside the IT Act.
Conclusion
India's cyber laws provide strong tools, but speed is decisive. Recognise common scams, protect your credentials, and if fraud happens, call 1930 and file a complaint immediately.
