A call from a fake police officer, money gone through UPI in seconds, private photos posted by a stranger, or a bank account frozen because of someone else's fraud: cyber problems feel overwhelming because they move so fast. This guide explains, in plain words, what to do in the first hour, how to report and recover money, how to get content taken down, how to unfreeze an account, and which laws apply. When you are ready, describe your matter in the form and an enrolled advocate who handles cyber cases can call you. It is free for clients.
Need help with your cyber crime matters? Book a free call back from an enrolment-verified advocate.
Cyber crime in India is no longer a niche problem. In 2025 alone, more than 24 lakh financial fraud complaints were registered on the national cyber crime portal, with reported losses of over ₹22,000 crore, according to figures the Home Ministry gave Parliament in February 2026. Behind those numbers are retired teachers who lost their savings to a fake "investment group", students blackmailed with morphed photos, shopkeepers whose bank accounts were frozen because a stranger's stolen money passed through them, and small businesses whose email was hijacked to redirect a supplier's payment.
A cyber lawyer is an advocate who handles these matters. The work mixes criminal law, banking rules, technology and speed. The same case may need a police complaint, a request to a bank, a takedown notice to a platform, an application before a magistrate to release frozen money, and sometimes a bail application for someone wrongly caught up in an investigation.
Drafting complaints that police and banks act on, following up the money trail, and applying to the court to get recovered money released to you.
Getting intimate or morphed images taken down, stopping stalkers and blackmailers through the police, and protecting your privacy throughout.
Recovering accounts, reporting impersonation, and dealing with loans or SIMs taken in your name.
Notices, takedown requests and civil or criminal action against false posts, reviews and videos.
Getting wrongly frozen bank accounts released, answering police notices, and defending people accused of cyber offences, including anticipatory bail.
Responding to data breaches, reporting incidents to CERT-In, business email compromise, employee data theft and compliance with data protection law.
When money leaves your account through a scam, it is usually moved quickly through several "mule" accounts and withdrawn or converted. The national reporting system can freeze it at whichever account it has reached, but only if the alert reaches the banks in time. Speed is everything.
Do not pay anyone who promises to "recover" your money for a fee. Recovery scams target fraud victims precisely because they are desperate. Genuine recovery happens only through the police, banks and courts.
| Type | How it usually works | Warning sign |
|---|---|---|
| "Digital arrest" | Callers pose as police, CBI, customs or a court, claim your Aadhaar or parcel is linked to a crime, keep you on video and demand money to "clear" your name | Any demand for money to avoid arrest, or being told not to tell family |
| Investment and trading groups | WhatsApp or Telegram groups show fake profits on a trading app, let you withdraw a small amount, then take large deposits | Guaranteed high returns, pressure to invest more, an app not on any regulated list |
| Task and job scams | Paid "tasks" like liking videos or writing reviews, then deposits to unlock bigger tasks | Being asked to pay to earn |
| UPI and KYC fraud | Requests to "receive" money that are actually payment requests, fake KYC update links, screen-sharing apps | Entering your PIN to receive money, links in SMS, requests to install apps |
| Sextortion | A video call with a stranger is recorded or faked, then used to demand money | Unknown video calls, sudden threats to share videos with contacts |
| Loan app harassment | Unregistered apps give small loans, then harass borrowers and contacts with morphed images and abuse | Apps demanding access to contacts and photos, lenders not linked to a regulated bank or NBFC |
| Hacking and SIM swap | Accounts or SIM cards taken over to receive OTPs | Phone suddenly loses network, password reset emails you did not request |
| Impersonation and fake profiles | Fake accounts in your name or a relative's ask contacts for money | Friends report messages you never sent |
| Business email compromise | Hacked or look-alike email changes the bank details on an invoice | Last-minute changes to payment details by email |
| Online shopping fraud | Fake sites or social media sellers take payment and never deliver | Prices far below market, payment only by UPI to a personal account |
The Supreme Court took up the spread of digital arrest scams on its own motion in 2025 and, in December 2025, directed the CBI to investigate these cases across the country, a sign of how seriously courts now treat organised cyber fraud. You can report suspected fraud calls and messages, even if you lost nothing, on the government's Sanchar Saathi portal through its Chakshu facility.
Have a question about your own case? Talk to a lawyer who handles cyber crime matters. Asking is free.
India has a single national system for reporting cyber crime, run by the Indian Cyber Crime Coordination Centre under the Home Ministry. Complaints made on it are routed to the police of the state concerned.
| Route | Use it for | What happens |
|---|---|---|
| Helpline 1930 | Money lost recently through fraud | An alert goes to the banks and payment apps involved, which can put a hold on the money |
| cybercrime.gov.in, financial fraud | Fraud complaints with details and screenshots | Routed to the state police and the banks; you get a complaint number to track |
| cybercrime.gov.in, other cyber crime | Harassment, hacking, impersonation, threats | Routed to the state cyber police for action |
| Women and children section of the portal | Sexually explicit content, child sexual abuse material, rape or gang rape videos | Can be reported without giving your identity |
| Local or cyber police station | Any cognizable cyber offence | An FIR is registered; you can also file a zero FIR at any police station |
Under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023, information about a cognizable offence can be given at any police station regardless of where the crime happened, known as a zero FIR, and can also be given electronically, in which case you must sign it within three days. Online fraud, hacking, identity theft, sextortion and most other serious cyber offences are cognizable. Many states have dedicated cyber police stations with better technical support.
If the police refuse to register an FIR, write to the Superintendent of Police or Commissioner, and if that fails, apply to the magistrate under Section 175(3) of the BNSS for a direction to investigate. Our criminal lawyer guide explains this process in detail.
Recovery is possible more often than people think, especially when the fraud is reported quickly. The Home Ministry told Parliament in February 2026 that over ₹8,000 crore had been saved through the rapid reporting system since 2021. But recovery is rarely automatic, and it often needs persistent follow-up.
When banks put a hold on the stolen amount, it has to be released to you through the process the police and banks follow, or by an order of the magistrate on an application for return of property under the BNSS. You must show the money is yours, usually with bank statements and the complaint.
Under the RBI's framework on unauthorised electronic transactions, if you report within three working days and the fraud was not due to your negligence, your liability is zero, and the bank should credit the amount within ten working days while it investigates. This applies to transactions you did not authorise, not to payments you were tricked into making yourself.
If your bank fails to follow the rules, complain to the RBI Integrated Ombudsman or the consumer commission. Our consumer lawyer guide explains both routes.
Where you were persuaded to transfer money yourself, as in investment or task scams, the bank is usually not liable, and recovery depends on how much of the money the police can trace and freeze. Report immediately, keep pressing the investigating officer, and engage an advocate to apply to the magistrate for release once the money has been traced to accounts that have been held.
Every advocate on Mara Vakil has had their Bar Council enrolment checked before being listed.
The digital arrest scam deserves a section of its own because it has taken huge sums from educated, careful people, often senior citizens. It usually starts with a call claiming that a parcel in your name contained drugs, or that your Aadhaar was used to open an account for money laundering. The call is transferred to a "police officer" or "CBI officer" on video, sometimes in a room made to look like a police station, with fake warrants and court orders. You are told you are under arrest, must stay on camera, must not tell anyone, and must transfer money to a "verification" account to prove your innocence.
If you get such a call, disconnect, do not transfer anything, tell a family member, and report it on 1930 or cybercrime.gov.in. If you have already paid, follow the first-hour steps above without delay.
These usually involve apps or websites that are not registered with SEBI or any regulator. Check whether an entity is registered on SEBI's website before investing. Losses are pursued through the cyber police as cheating, and where the operators are traced, through freezing and attachment of their accounts. The RBI's Sachet portal lets you check and report entities illegally taking deposits.
Digital lending by RBI-regulated entities must follow the RBI's digital lending rules, which require loans to be disbursed and repaid through the regulated entity's own accounts and restrict access to a borrower's contacts and photos. Harassment, threats to contacts and morphed images are crimes. Report to the police and cyber portal, report the app on Sachet, and complain to the regulated lender if one is involved.
Do not pay. Payment almost always leads to more demands. Stop responding, keep the evidence, report to the cyber police, and ask the platforms to remove any content that is posted. Extortion is an offence under Section 308 of the BNS, and publishing intimate images attracts the IT Act. The international StopNCII tool lets adults create a digital fingerprint of an intimate image on their own device so participating platforms can block it without the image being uploaded.
If your phone suddenly loses network for no reason, contact your telecom provider at once, as someone may have obtained a duplicate SIM. Inform your bank to block transactions. Lost or stolen phones can be blocked through the government's CEIR system on the Sanchar Saathi portal, which also shows mobile connections taken in your name.
Report to the cyber portal and your bank. If you paid by card, ask your bank about a chargeback. Platforms that hosted the seller may be liable under the E-Commerce Rules, which the consumer commission can enforce.
Cyber offences in India are covered mainly by the Information Technology Act, 2000 and, since 1 July 2024, the Bharatiya Nyaya Sanhita, 2023, which replaced the Indian Penal Code. A single incident often attracts sections from both.
| Section | Covers | Maximum punishment |
|---|---|---|
| 43 and 66 | Unauthorised access, data theft, damage to computer systems; criminal when done dishonestly or fraudulently | Compensation under Section 43; up to 3 years and fine up to ₹5 lakh under Section 66 |
| 66C | Identity theft, such as using someone's password or digital signature | Up to 3 years and fine up to ₹1 lakh |
| 66D | Cheating by personation using a computer or phone | Up to 3 years and fine up to ₹1 lakh |
| 66E | Capturing or publishing images of a person's private area without consent | Up to 3 years or fine up to ₹2 lakh |
| 67 | Publishing obscene material electronically | Up to 3 years and fine up to ₹5 lakh on first conviction |
| 67A | Publishing sexually explicit material | Up to 5 years and fine up to ₹10 lakh on first conviction |
| 67B | Child sexual abuse material | Up to 5 years on first conviction, higher on repeat |
| 72A | Disclosing personal information in breach of a lawful contract | Up to 3 years or fine up to ₹5 lakh |
| 66F | Cyber terrorism | Up to life imprisonment |
Section 66A, which punished "offensive" messages, was struck down by the Supreme Court in Shreya Singhal v. Union of India (2015) as an unconstitutional restriction on speech. Police sometimes still cite it; no one can be prosecuted under it.
| Section | Offence |
|---|---|
| 318 | Cheating, the core section in most online fraud |
| 319 | Cheating by personation |
| 308 | Extortion, including sextortion |
| 78 | Stalking, which expressly includes monitoring a woman's use of the internet, email or electronic communication |
| 77 | Voyeurism |
| 351 | Criminal intimidation, with a higher punishment for anonymous threats |
| 356 | Defamation |
| 336 and 340 | Forgery, including of electronic records, and using forged documents |
| 111 | Organised crime, which expressly includes cyber crimes committed by organised groups |
Other laws apply in particular cases: the POCSO Act for sexual offences against children, the Prevention of Money Laundering Act, 2002 where the proceeds of large frauds are laundered, and the Digital Personal Data Protection Act, 2023 for misuse of personal data by businesses.
Not sure what applies to you? Describe your situation and a verified advocate can call you back.
Online harassment ranges from abusive messages to stalking across platforms, fake profiles, and the sharing of intimate or morphed images. Women and young people are the most frequent targets, but anyone can be affected.
Courts have also granted urgent injunctions directing platforms and search engines to remove intimate images and prevent them being reposted, including in cases brought by women whose images were circulated on many sites. An advocate can file for such orders in the High Court where speed is essential.
If the harasser is a former partner or family member, the Protection of Women from Domestic Violence Act may also apply, and our family lawyer guide explains protection orders.
Social media companies, messaging apps, marketplaces and other intermediaries are protected from liability for users' content under Section 79 of the IT Act only if they follow due diligence rules in the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended.
When a platform ignores you, keep a record of each report, its date and any reference number. That record is useful both for the Grievance Appellate Committee and for a court petition.
Clients never pay Mara Vakil. Posting your matter and the call back are free.
A false post, video or review that damages your reputation can be challenged like any other defamation. The remedies are a civil suit for damages and an injunction, a criminal complaint for defamation under Section 356 of the BNS, and requests to the platform to remove the content.
Online defamation raises a few special issues. The author may be anonymous, so the first step may be an application asking the court to direct the platform to disclose account details. Content spreads quickly, so interim injunctions matter, but courts weigh free speech carefully and do not restrain genuine criticism or opinion. And the limitation period for a civil defamation suit is one year from publication. Our civil lawyer guide explains the civil route, and a carefully drafted legal notice often gets content removed without litigation.
Businesses facing fake negative reviews, and consumers posting honest negative reviews, should both know that truth and fair comment on matters of public interest are defences. Posting fake reviews about a competitor is itself unlawful and can be an unfair trade practice under consumer law.
Children face online grooming, sextortion, cyberbullying and exposure to harmful content. The law treats offences against children with particular seriousness.
If a child is being blackmailed, reassure them that they are not in trouble, keep the evidence without forwarding it, and report it to the police immediately.
Some of the most painful frauds exploit trust rather than technology.
A profile on a matrimonial or dating site, often claiming to be a doctor abroad, an army officer or a businessperson, builds a relationship over weeks. Then come requests: a customs fee for a gift parcel, a medical emergency, an investment opportunity. Victims often feel too embarrassed to tell anyone, which the fraudster counts on. The same rules apply as for other frauds: report on 1930 and the portal, keep the chats and profile links, and report the profile to the site. Cheating by personation is an offence under the BNS and Section 66D of the IT Act.
Fraudsters post fake helpline numbers for banks, airlines, delivery companies and payment apps on search results and social media. When you call for help with a refund, they ask you to install a screen-sharing app or share an OTP. Always take customer care numbers from the company's official website or app, never from a search result, and remember that no genuine refund needs you to enter your PIN.
Messages saying a parcel is held for a small fee, or calls saying a parcel in your name contained illegal items, are common openings for phishing and digital arrest scams. Courier companies do not ask for payment through personal UPI IDs or links in SMS.
Your mobile number goes only to the advocate who accepts your request, not to everyone.
Parliament passed the Promotion and Regulation of Online Gaming Act, 2025, which prohibits offering online money games, advertising them, and banks or payment systems processing payments for them, while promoting e-sports and social games. With its rules, the framework has applied from 1 May 2026. People who lose money on illegal betting or "colour prediction" apps often find these apps were never lawful in the first place, and complaints are pursued as cheating and under the new law.
Crypto schemes promising fixed high returns, "mining" plans and token launches promoted through influencers are frequently frauds. Crypto assets are taxed in India, but trading platforms and schemes are not guaranteed by any regulator. Check whether a platform is registered with the Financial Intelligence Unit as a reporting entity, avoid schemes that pay returns for recruiting others, and report losses to the cyber police with wallet addresses and transaction hashes, which can sometimes be traced.
Group chats, anonymous pages and fake accounts make bullying constant, not just a school-hours problem. Educational institutions are expected to have anti-ragging and grievance mechanisms, and colleges regulated by the UGC must act on ragging complaints, which include harassment through electronic means. At work, online sexual harassment by colleagues, including messages and images, falls under the Sexual Harassment of Women at Workplace Act, 2013, and can be taken to the employer's Internal Committee as well as the police.
Parents of a child who is bullying others online should also take it seriously: the law applies to juveniles too, through the juvenile justice system, and platforms remove content and accounts that harass others.
One of the most common problems advocates now see is an innocent person whose bank account has been frozen. A shopkeeper receives a UPI payment for goods, a freelancer is paid for work, or someone sells crypto to a stranger, and the money turns out to be part of a fraud elsewhere. When the victim reports it, the alert travels down the chain, and every account the money touched can be put on hold. Sometimes the entire account is frozen, not just the disputed amount, cutting off a family's or a business's money for months.
High Courts across the country, including Delhi, Kerala, Allahabad and others, have repeatedly criticised blanket freezes and held that holds should generally be limited to the amount in dispute, with the account holder told and given a way to object. In January 2026, the Home Ministry issued a standard operating procedure for the national reporting system that addresses this directly.
| What the January 2026 SOP provides | What it means for you |
|---|---|
| A lien should normally be limited to the disputed sum | Ask the bank in writing to release the rest of your balance |
| A district-level police officer, of Deputy or Additional SP rank, is the first point for grievances | Write to that officer with your documents explaining the transaction |
| If the officer does not respond in 15 days, the grievance goes to a district grievance redressal officer | Keep dated copies of every letter |
| For amounts under ₹50,000, banks must lift a hold within 90 days if there is no court order | Follow up with the bank after 90 days |
| Larger holds can continue until the investigation ends or a court orders otherwise | An application to the magistrate or a writ petition may be needed |
Never "rent" your bank account or UPI to anyone for a commission. People who let their accounts be used as mule accounts are being prosecuted as part of the fraud, and the account will almost certainly be frozen.
Deadlines matter in cyber crime matters. Book a free call back today rather than waiting.
Cyber investigations sometimes catch people who had nothing to do with the crime: the owner of a SIM that was misused, the holder of a mule account who did not understand what was happening, or a person whose identity was stolen. Others face complaints that exaggerate a private dispute. Whatever the situation, take advice early.
Businesses face their own cyber risks: ransomware, theft of customer data, invoice fraud through hijacked email, and employees leaving with confidential information. The legal duties around these incidents have grown.
| Situation | Legal points |
|---|---|
| Cyber security incident | CERT-In's 2022 directions require specified incidents, including data breaches, ransomware and unauthorised access, to be reported to CERT-In within six hours of noticing them, and logs to be kept for 180 days |
| Personal data breach | Under the DPDP Act and the November 2025 rules, as their obligations come into force, a breach must be reported to the Data Protection Board and affected individuals; penalties can be very large |
| Payment diverted by email fraud | Report to 1930 and the banks at once; review contracts on who bears the loss; strengthen payment verification by phone |
| Employee takes data | Civil action for breach of confidentiality and copyright, Section 43 and 66 of the IT Act, and Section 72A for disclosure in breach of contract |
| Compensation for unauthorised access | Claims for damage under Section 43 can go to the adjudicating officer under the IT Act for claims up to ₹5 crore, with appeals to the Telecom Disputes Settlement and Appellate Tribunal; larger claims go to civil courts |
An incident response plan, written before anything goes wrong, saves the most time and money: who decides, who calls the bank, who reports to CERT-In, and which advocate and forensic firm to call. Our corporate lawyer guide covers data protection compliance more broadly.
Want a second opinion? Talk to another enrolment-verified advocate, free.
Cyber cases depend almost entirely on electronic evidence. Under the Bharatiya Sakshya Adhiniyam, 2023, electronic records are admissible, and copies are usually accompanied by a certificate under Section 63 describing the device and how the record was produced, in the form set out in the schedule to the Act.
In serious or business cases, a forensic copy of the device or system, made by a qualified examiner, gives the strongest evidence. The police can also seek data directly from platforms and telecom companies, which keep records for limited periods, so early reporting matters.
Many victims feel that nothing happens after they file. Understanding the process helps you push it forward at the right points.
| Stage | What usually happens | What you can do |
|---|---|---|
| Alert to banks | For 1930 and portal financial complaints, banks and wallets in the money trail are alerted and may hold funds | Report within minutes or hours, not days |
| Routing to police | The complaint goes to the cyber police of your district or state | Note the police station and the officer's name |
| FIR | Larger or serious complaints are registered as FIRs; smaller ones may be handled as complaints | Ask for the FIR copy; if refused, escalate to senior officers or the magistrate |
| Investigation | Police seek records from banks, telecom companies and platforms, trace accounts and devices, and may arrest suspects in other states | Give every detail promptly, respond to calls, and ask for updates in writing |
| Release of held money | Held amounts are released through the police process or on a magistrate's order | File an application with proof of your loss |
| Charge-sheet and trial | If accused persons are traced, the police file a charge-sheet and the case is tried | You may be called as a witness; keep your originals safe |
Investigations into organised fraud can take months because the accused are often in another state or abroad. Keep a file with every acknowledgment, letter and reply, and follow up politely but regularly. An advocate can write to senior officers or approach the court when an investigation stalls.
Identity misuse often surfaces months later: a recovery call for a loan you never took, a SIM registered on your Aadhaar, or a credit score suddenly ruined. Act on several fronts.
Recovery agents must follow RBI rules on fair conduct, and threats or abuse are not permitted. If a lender keeps pursuing you for a fraudulent loan despite your complaint, the RBI Ombudsman is available against regulated entities.
Fees are agreed directly between you and the advocate. Booking the call back costs nothing.
Older people are targeted heavily, especially by digital arrest, KYC update and fake relative-in-trouble calls, because fraudsters count on respect for authority, fear and isolation. A few family habits make a large difference.
If an elderly person has been defrauded, avoid blame. Shame makes victims delay reporting, and delay is what lets the money disappear.
None of this guarantees safety, because fraudsters adapt quickly. The single most useful habit is to pause: almost every scam depends on making you act within minutes, before you can check with anyone. A genuine bank, police officer or company will still be there after you hang up and call back on an official number.
Every case turns on its own facts. A verified advocate can tell you what applies to yours.
Many organised frauds are run from outside India, and many victims are NRIs targeted through Indian numbers or accounts. Cross-border cases are harder, but not hopeless. Money often still passes through Indian accounts, which Indian police can freeze, and Indian agencies cooperate with foreign authorities through formal channels, though these are slow. NRI victims can report on cybercrime.gov.in and authorise someone in India, through a power of attorney, to follow up with the police and the court. Report in the country where you live as well, since the platform or payment provider may be there.
These are composites of common matters, not real cases. Outcomes depend on how fast the crime is reported and how far the money or evidence can be traced.
A retired bank officer in Pune is told his Aadhaar is linked to a money laundering case and kept on video by a man in a police uniform. He transfers ₹18 lakh to a "safe account" for verification. His daughter learns of it that evening and calls 1930. Part of the money is held in two accounts it had reached. The cyber police register an FIR, and months later an advocate applies to the magistrate for release of the held amount, which is returned after the bank and police confirm the trail. The rest had already been withdrawn.
A mobile accessories shop in Lucknow finds its entire current account frozen because a customer's UPI payment was part of a fraud in another state. The advocate obtains the complaint details from the bank, writes to the investigating officer with the invoice and CCTV of the sale, and, when there is no response, files a writ petition. The High Court directs that the hold be limited to the disputed amount, and the rest of the account is released.
A college student discovers a fake account using her photos, edited to look explicit. She reports the account to the platform and files a complaint on the cyber portal. Her advocate sends a formal notice to the platform's grievance officer under the IT Rules. The content is removed within a day, and the police trace the account to a former classmate, who is charged with publishing sexually explicit material and stalking.
A small export firm pays ₹9 lakh to what looks like its regular supplier's new account, after an email from a look-alike address. When the supplier calls about non-payment, the firm reports to 1930 and its bank the same day. Part of the money is held at the receiving bank. The firm's advocate handles the police complaint and the release application, and the firm adds a phone verification step for any change in payment details.
A delivery worker receives a notice from police in another state. A SIM issued on his old Aadhaar was used by fraudsters. His advocate checks the notice is genuine, accompanies him to answer it with proof of his whereabouts and his complaint about the misused SIM, and he is treated as a witness rather than an accused.
Ready to take the next step? Book a free call back in under two minutes.
Reporting on 1930 and cybercrime.gov.in, registering an FIR and complaining to a platform cost nothing. Many people handle the first steps themselves. Advocates are most useful for drafting strong complaints, pursuing police and banks, applying to courts for release of money or accounts, getting urgent takedown orders, and defending accused persons. Advocates set their own fees, often per stage, such as a fixed fee for a release application, a writ petition or a bail application, and fees vary with the city, the court and the complexity. Forensic examination, where needed, is a separate cost.
Free legal aid is available to eligible people, including women, children and those under the income limit, through the District Legal Services Authority. Check with our legal aid eligibility checker, and see our legal fees guide.
Because the Bar Council of India Rules prevent advocates from advertising, rankings of "top cyber lawyers" have no official basis. What helps most in a cyber case is an advocate who understands both the criminal process and how banks, platforms and the reporting portal actually work.
Prefer to speak to a lawyer first? Talk to a verified advocate who handles cyber crime matters.
Mara Vakil is a technology platform, not a law firm, and does not investigate or handle cases. It lets you put your cyber matter before enrolled advocates who take such work, so one can contact you quickly. If you have just lost money, call 1930 first, then use the form.
Posting your matter and the call back cost nothing.
Enrolment details are verified before a profile appears.
Sensitive matters stay between you and the advocate who accepts.
No ratings or sponsored positions; profiles show courts, areas and languages.
Money reported quickly through 1930 is often held before it is withdrawn. Thousands of crores have been saved this way.
There is no such procedure. Anyone demanding money on a video call to avoid arrest is a fraudster.
Payment usually leads to more demands. Report and keep evidence instead.
The Supreme Court struck it down in 2015. Other sections may apply, but not 66A.
Mule account holders are being prosecuted, and their accounts frozen.
Have your documents ready? Book a free call back and share the details with the advocate.
Call the national cyber fraud helpline 1930 immediately, then register the complaint on cybercrime.gov.in and inform your bank in writing. Fast reporting gives the best chance that the money is held before it is withdrawn.
Often partly, sometimes fully, if it is reported quickly and the money is held in the accounts it reached. Release usually needs a request through the police or an order of the magistrate. For unauthorised transactions reported within three working days, the RBI framework can make your bank liable.
No. Indian law has no digital arrest. Police, CBI, customs and courts do not arrest people on video calls or demand money to clear their names. Disconnect and report such calls.
Go to cybercrime.gov.in, choose financial fraud or other cyber crime, fill in the details and upload evidence. You get a complaint number to track. You can also go to any police station or cyber police station to file an FIR.
Yes. Under the BNSS, a zero FIR can be registered at any police station for a cognizable offence regardless of where it happened, and transferred to the right station. You can also give information electronically and sign it within three days.
Ask the bank in writing for the complaint details, write to the investigating officer with proof of your genuine transaction, and use the grievance route in the January 2026 Home Ministry SOP. Holds should normally be limited to the disputed amount. If that fails, apply to the magistrate or file a writ petition in the High Court.
Report the content to the platform and its grievance officer, who must act very quickly on non-consensual intimate images, and complain on cybercrime.gov.in. An advocate can also seek an urgent court order directing removal across platforms.
Capturing or publishing images of a person's private areas without consent is punishable under Section 66E of the IT Act, and publishing sexually explicit material under Section 67A with up to five years on first conviction, besides voyeurism and other BNS offences.
No. Payment rarely ends the demands. Stop responding, keep the evidence, report to the cyber police and the platform, and consider using StopNCII to prevent the images being shared.
Report to the police and cybercrime.gov.in, report the app on the RBI's Sachet portal, and complain to the lender if it is a regulated bank or NBFC. Threats and morphed images are crimes regardless of any loan.
Defamation is both a civil wrong and an offence under Section 356 of the BNS. You can sue for damages and an injunction within one year of publication, file a criminal complaint, and ask the platform to remove the content.
For offences punishable with up to seven years, which include many IT Act offences, the police are generally expected to issue a notice to appear under Section 35 of the BNSS rather than arrest, unless specific conditions apply. Take advice and consider anticipatory bail if you fear arrest.
Letting your account be used to receive and pass on other people's money for a commission can make you part of a fraud. Mule account holders are being prosecuted and their accounts frozen.
Specified cyber security incidents must be reported to CERT-In within six hours of noticing them. As the DPDP rules come into force, personal data breaches must also be reported to the Data Protection Board and affected individuals.
Deepfakes used to defame, cheat, impersonate or create sexual content are punishable under existing laws. From February 2026, platforms must label AI-generated content that appears real and remove prohibited synthetic content, including non-consensual intimate imagery.
Keep the original chat and phone, export the chat, and provide printouts with a certificate under Section 63 of the Bharatiya Sakshya Adhiniyam. Screenshots should show dates and the number involved.
No. The Supreme Court struck it down in Shreya Singhal v. Union of India in 2015. No one can be prosecuted under it.
Online money games are prohibited under the Promotion and Regulation of Online Gaming Act, 2025, which, with its rules, has applied from 1 May 2026. Offering, advertising or processing payments for them is unlawful. Losses to betting apps can be reported to the cyber police.
File a police complaint for identity theft, write to the lender with the complaint and your identity proof, dispute the loan with the credit bureaus, check connections in your name on Sanchar Saathi and lock your Aadhaar biometrics.
Take it only from the company's official website or app, not from search results or social media. Genuine customer care never asks you to install screen-sharing apps or share your PIN or OTP.
Yes, for sexually explicit content, child sexual abuse material and rape or gang rape videos, through the women and children section of cybercrime.gov.in. Other complaints need your details so the police can contact you.
You can report at any time, but for money lost, every hour counts, because held funds are what make recovery possible. For unauthorised bank transactions, reporting within three working days protects you under the RBI rules.
No. Describing your cyber matter and getting a call from an enrolled advocate is free. Any fee is agreed directly with the advocate. Mara Vakil is a technology platform, not a law firm.
Local courts, forums and practice differ from city to city. Read the page for your city:
Related services:
Other practice areas:
If you have just lost money, call 1930 first. Then describe your matter in a few lines. Enrolled advocates who handle cyber cases in your city can see it, and the one who accepts will call you. It is free for clients.
Describe your matter, freeThis page gives general information about Indian law as of 15 October 2026. It is not legal advice and is not an advertisement or solicitation by any advocate, as restricted by Rule 36 of the Bar Council of India Rules. Laws and court practice change, and the right answer depends on your facts; confirm the position for your case with an advocate before acting. Mara Vakil is a technology platform, not a law firm. Read our disclaimer.
Join Mara Vakil as an advocate and receive cyber requests from clients near you. Free, enrolment-checked profile. Client requests in your practice area, no commission on your fees, a free case diary and your court group. Apply in about 10 minutes.