Introduction: Understanding Cyber Law in India
The internet has become an essential part of everyday life. People use digital platforms for banking, shopping, communication, education, business transactions and accessing government services. However, the increasing use of technology has also resulted in a rise in cybercrime, online fraud, identity theft, hacking, data breaches and digital privacy violations.
Cyber Law in India provides a legal framework to regulate activities involving computers, electronic communication, digital transactions and online platforms.
The Information Technology Act, 2000 is the primary legislation dealing with various cyber offences and electronic transactions. Other important laws include the Bharatiya Nyaya Sanhita, 2023, Bharatiya Sakshya Adhiniyam, 2023 and Digital Personal Data Protection Act, 2023.
This Cyber Law FAQs guide answers common questions about cybercrime laws, legal rights, punishments, online complaints, digital evidence and data protection in India.
Frequently Asked Questions About Cyber Law in India
1. What is Cyber Law?
Cyber Law refers to the legal rules and regulations governing the use of computers, the internet, electronic communication, digital transactions and online platforms.
It covers activities such as:
Hacking and unauthorised access.
Online banking and UPI fraud.
Identity theft and impersonation.
Cyberstalking and online harassment.
Data theft and privacy violations.
Publishing unlawful content online.
Electronic contracts and digital signatures.
2. Which law governs cybercrime in India?
The Information Technology Act, 2000 is the primary legislation governing cyber offences in India.
Other applicable laws include:
Bharatiya Nyaya Sanhita, 2023.
Bharatiya Nagarik Suraksha Sanhita, 2023.
Bharatiya Sakshya Adhiniyam, 2023.
Digital Personal Data Protection Act, 2023.
Relevant rules and regulations issued by the Government of India.
Depending on the nature of the offence, multiple legal provisions may apply.
3. What are the most common types of cybercrime in India?
Common cybercrimes include:
Phishing and email scams.
UPI and online banking fraud.
Credit card and debit card fraud.
Identity theft.
Hacking and unauthorised access.
Social media account hacking.
Cyberstalking and online harassment.
Fake websites and shopping scams.
Online investment fraud.
Ransomware and malware attacks.
Deepfake impersonation.
Data theft and unauthorised disclosure.
4. What is Section 66 of the Information Technology Act, 2000?
Section 66 deals with computer-related offences.
It applies when a person dishonestly or fraudulently commits an act referred to in Section 43 of the IT Act.
The punishment may extend to imprisonment of three years, a fine of up to ₹5 lakh, or both.
5. What is Section 66C of the IT Act?
Section 66C deals with identity theft.
It applies when a person fraudulently or dishonestly uses another person's electronic signature, password or other unique identification feature.
Punishment: Imprisonment up to three years and a fine up to ₹1 lakh.
6. What is Section 66D of the IT Act?
Section 66D deals with cheating by personation using computer resources.
Examples include:
Fake customer-care representatives.
Online banking impersonation.
Fraudulent social media profiles.
Fake job offers.
Impersonation through digital communication.
Punishment: Imprisonment up to three years and a fine up to ₹1 lakh.
7. What is Section 66E of the IT Act?
Section 66E deals with the violation of privacy.
It applies to intentionally or knowingly capturing, publishing or transmitting images of a person's private area without consent, under the circumstances specified in the provision.
Punishment: Imprisonment up to three years, a fine up to ₹2 lakh, or both.
8. What is Section 67 of the IT Act?
Section 67 deals with publishing or transmitting obscene material in electronic form.
It provides criminal punishment for the publication or transmission of material meeting the statutory definition of obscenity.
The punishment varies depending on whether it is a first or subsequent conviction.
9. What is the punishment for cybercrime in India?
The punishment depends on the nature and seriousness of the offence.
Some important examples under the IT Act are:
| Offence | Relevant Section | Maximum punishment |
|---|---|---|
| Computer-related offences | Section 66 | 3 years and/or ₹5 lakh fine |
| Receiving stolen computer resources | Section 66B | 3 years and/or ₹1 lakh fine |
| Identity theft | Section 66C | 3 years and/or ₹1 lakh fine |
| Cheating by personation | Section 66D | 3 years and/or ₹1 lakh fine |
| Violation of privacy | Section 66E | 3 years and/or ₹2 lakh fine |
| Cyber terrorism | Section 66F | Imprisonment which may extend to life |
| Obscene electronic material | Section 67 | Up to 3 years and ₹5 lakh fine for first conviction |
The applicable punishment depends on the statutory ingredients, evidence, previous convictions and other relevant circumstances.
10. How can I file a cybercrime complaint in India?
A cybercrime complaint can be submitted through the National Cyber Crime Reporting Portal.
Follow these steps:
Select the appropriate complaint category.
Provide the required personal and incident details.
Upload supporting evidence.
Submit the complaint.
Save the acknowledgement number for future reference.
You can also approach the nearest police station or cybercrime police station.
11. What is the cybercrime helpline number in India?
The national cybercrime helpline number is 1930.
It is particularly important for reporting financial cyber fraud, including unauthorised UPI transactions, online banking fraud and other digital payment scams.
Victims should report the incident immediately and also contact their bank or payment service provider.
12. What should I do if money is stolen through UPI fraud?
If you become a victim of UPI fraud:
Immediately call 1930.
Register a complaint at cybercrime.gov.in.
Inform your bank and request appropriate action.
Save transaction IDs and bank statements.
Preserve screenshots, messages and phone numbers.
Keep the complaint acknowledgement number.
Prompt reporting may help authorities and banks take timely steps to trace or prevent further loss. Recovery is not guaranteed.
13. Is hacking a computer or mobile phone illegal in India?
Yes. Unauthorised access to computer systems, mobile devices, networks or digital accounts can attract legal consequences.
Depending on the facts, Sections 43 and 66 of the Information Technology Act, 2000 may apply.
Other provisions may also apply if hacking involves identity theft, fraud, data theft or unauthorised disclosure.
14. Is creating a fake social media account a cybercrime?
Creating a fake account is not automatically a criminal offence in every situation.
However, if a fake account is used for cheating, impersonation, identity theft, harassment, defamation or other unlawful activities, relevant provisions of the IT Act and other applicable laws may apply.
Section 66D is particularly relevant where cheating by personation is committed using computer resources.
15. Is sharing someone's private photographs without consent illegal?
Sharing private or intimate photographs without consent may attract criminal provisions depending on the content, circumstances and manner of publication.
Relevant provisions may include Sections 66E, 67 and 67A of the IT Act, along with applicable provisions of other criminal laws.
The legal consequences depend on the nature of the material and the conduct involved.
16. What is cyberstalking?
Cyberstalking refers to repeated unwanted online conduct involving monitoring, harassment, intimidation or unwanted communication through digital platforms.
It may involve:
Repeated unwanted messages.
Online threats.
Monitoring someone's online activities.
Creating fake profiles.
Publishing private information.
Persistent harassment through social media.
Depending on the facts, relevant provisions of the Bharatiya Nyaya Sanhita and the IT Act may apply.
17. Can WhatsApp messages be used as evidence in court?
Yes. WhatsApp messages can be produced as electronic evidence in court, subject to applicable evidentiary requirements.
Section 63 of the Bharatiya Sakshya Adhiniyam, 2023 is important for the admissibility of electronic and digital records.
Proper preservation, authentication and compliance with applicable certificate requirements are important.
18. What is electronic evidence under Indian law?
Electronic evidence refers to information stored, generated, transmitted or received in electronic or digital form.
Examples include:
Emails.
WhatsApp conversations.
CCTV footage.
Audio and video recordings.
Digital photographs.
Computer files.
Server logs.
Online transaction records.
Social media communications.
The Bharatiya Sakshya Adhiniyam, 2023 governs the admissibility of electronic and digital records.
19. What is Section 63 of the Bharatiya Sakshya Adhiniyam, 2023?
Section 63 deals with the admissibility of electronic or digital records.
It prescribes conditions and certification requirements relevant to the production of electronic records as evidence.
It is particularly important in cases involving CCTV footage, electronic communications, digital banking records and computer-generated documents.
20. Is online defamation punishable in India?
Yes. Online defamation may attract legal consequences under Section 356 of the Bharatiya Nyaya Sanhita, 2023, subject to its ingredients and applicable exceptions.
Publishing false and defamatory statements about an individual or organisation through social media, websites or digital platforms may result in legal proceedings.
21. What is the Digital Personal Data Protection Act, 2023?
The Digital Personal Data Protection Act, 2023 establishes a legal framework for processing digital personal data in India.
It addresses:
Consent and lawful processing.
Responsibilities of Data Fiduciaries.
Rights of Data Principals.
Protection of children's personal data.
Personal data breach obligations.
Penalties for specified non-compliance.
The Digital Personal Data Protection Rules, 2025 were notified in November 2025. The Act has a phased commencement schedule, so the applicable provisions and effective dates must be checked before determining a particular obligation.
22. Can a website owner be held responsible for user-generated content?
A website owner or online intermediary may face legal consequences depending on the nature of the content, the role of the platform and compliance with applicable legal requirements.
Section 79 of the IT Act provides conditional safe-harbour protection to eligible intermediaries, subject to statutory conditions.
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 also prescribe due diligence obligations for covered intermediaries.
23. Is Section 66A of the IT Act still valid?
No. Section 66A of the Information Technology Act, 2000 was struck down by the Supreme Court of India in Shreya Singhal v. Union of India (2015).
The provision is unconstitutional and cannot be used as a valid offence provision.
This judgment is a landmark decision concerning freedom of speech and expression on the internet.
24. What is cyber terrorism under Indian law?
Section 66F of the Information Technology Act, 2000 deals with cyber terrorism.
It covers specified acts involving threats to the sovereignty, integrity or security of India, or other conduct meeting the statutory requirements.
The punishment may extend to imprisonment for life.
25. Can cybercrime be committed from another state or country?
Yes. Cybercrime can involve perpetrators, victims, servers and financial transactions located in different states or countries.
Section 75 of the IT Act provides for the Act's application to certain offences or contraventions committed outside India, subject to the conditions specified in that section, including involvement of a computer, computer system or network located in India.
Cross-border cybercrime investigations may require cooperation between law enforcement agencies and other authorities.
26. What is phishing in cyber law?
Phishing is a fraudulent technique used to obtain sensitive information such as passwords, banking details, OTPs and personal information by impersonating a trusted organisation or individual.
It may involve fake emails, SMS messages, websites or social media accounts.
Depending on the circumstances, Sections 66C and 66D of the IT Act and other applicable laws may be attracted.
27. Is cryptocurrency fraud covered under cyber law?
Fraud involving cryptocurrency or virtual digital assets may attract applicable provisions of the IT Act, BNS and other relevant financial laws, depending on the facts.
Examples include:
Fake cryptocurrency investment schemes.
Fraudulent trading platforms.
Wallet theft.
Phishing attacks.
Impersonation of cryptocurrency exchanges.
The legal treatment depends on the particular conduct and applicable legislation.
28. Can an employee be punished for stealing company data?
Yes. An employee who unlawfully accesses, copies, downloads, transfers or discloses confidential company information may face civil or criminal consequences depending on the facts.
Applicable provisions may include Sections 43, 66 and 72A of the IT Act, along with contractual, employment and other applicable laws.
29. What is the difference between cybercrime and cyber security?
Cybercrime refers to unlawful activities committed using computers, networks or digital technologies.
Cybersecurity refers to the practices, technologies and measures used to protect computers, networks, applications and information from cyber threats.
Cybersecurity helps prevent cybercrime and protect digital assets.
30. Where can I read important Cyber Law judgments in India?
You can research important cyber law judgments through the following platforms:
Supreme Court of India – https://www.sci.gov.in/
Indian Kanoon – https://indiankanoon.org/
High Court websites – Official websites of respective High Courts.
LiveLaw – https://www.livelaw.in/
Supreme Court Observer – https://www.scobserver.in/
Important judgments include Shreya Singhal v. Union of India (2015), Justice K.S. Puttaswamy v. Union of India (2017), Anvar P.V. v. P.K. Basheer (2014) and Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020).
Important Cyber Law Legislation in India
The following laws are important for students, advocates and legal professionals researching cyber law.
| Legislation | Main subject |
|---|---|
| Information Technology Act, 2000 | Cyber offences and electronic transactions |
| IT Rules, 2021 | Intermediary and digital media obligations |
| Digital Personal Data Protection Act, 2023 | Digital personal data protection |
| Digital Personal Data Protection Rules, 2025 | Rules under the DPDP Act |
| Bharatiya Nyaya Sanhita, 2023 | General criminal offences |
| Bharatiya Nagarik Suraksha Sanhita, 2023 | Criminal procedure |
| Bharatiya Sakshya Adhiniyam, 2023 | Electronic and other evidence |
Conclusion
Cyber Law plays an important role in protecting individuals, businesses and organisations in the digital environment. Understanding cybercrime provisions, online privacy rights, electronic evidence and digital data protection is essential in today's technology-driven society.
These Cyber Law FAQs provide a useful starting point for understanding Indian cyber legislation and common legal issues relating to online activities.
Whether you are a law student, advocate, business owner, website administrator or an individual affected by cybercrime, staying informed about cyber laws can help you understand your legal rights and responsibilities.
Stay informed, protect your digital identity and understand your legal rights in the online world.
Legal Disclaimer
This article is intended for general educational and informational purposes only. It does not constitute legal advice. The applicability of any legal provision depends on the facts and circumstances of each case. Readers should consult a qualified legal professional for advice concerning specific legal issues.
Suggested Further Reading:
Cyber Law Judgments 2026
Important Sections of the Information Technology Act, 2000
Digital Evidence Under Bharatiya Sakshya Adhiniyam, 2023
Online Banking Fraud: Legal Remedies in India
Digital Personal Data Protection Act, 2023: A Complete Guide
0 comments: