Cyber Awareness & Legal Information

Cyber Law in India

Know your digital rights. Understand cyber offences, legal protections and the steps you can take when you face an online crime. Awareness is the first step towards a safer digital India.

CRIAI • A Safer India Together   |   Information resource updated: 12 November 2026
Information Technology Act, 2000India's principal cyber law framework
Bharatiya Nyaya Sanhita, 2023General criminal offences can apply to digital conduct
Cyber Fraud Helpline: 1930Report financial cyber fraud immediately
01 / Understanding the law

What is Cyber Law?

Cyber law refers to the legal rules that regulate the use of computers, networks, digital platforms, electronic records and online communication.

Cyber Law in the Indian context

India's cyber-law framework addresses electronic records and signatures, online transactions, unauthorised access, identity theft, online impersonation, privacy violations, unlawful digital content and the responsibilities of certain online intermediaries.

The Information Technology Act, 2000 is a key legislation. Depending on the facts, other laws—including the Bharatiya Nyaya Sanhita, 2023 and applicable data-protection rules—may also be relevant.

Cyber offences may involve individuals, businesses, financial institutions, public bodies or digital service providers. The applicable offence and punishment depend on the conduct, evidence, intent and relevant statutory provision.

Why does Cyber Law matter?

  • Recognises electronic records and specified electronic signatures.
  • Provides legal provisions against several computer-related offences.
  • Addresses identity theft and cheating by online impersonation.
  • Provides safeguards relating to privacy and certain unlawful digital content.
  • Supports lawful investigation and preservation of relevant digital evidence.
  • Helps individuals and organisations understand responsibilities in the digital environment.
02 / Key legislation

Important Cyber Laws in India

The following laws and frameworks may apply to cyber incidents. Their application depends on the facts and the provisions in force on the relevant date.

01

Information Technology Act, 2000

The principal legislation dealing with electronic records, electronic signatures and several cyber-related offences.

  • Section 43: specified unauthorised acts involving computer resources and compensation.
  • Section 66: computer-related offences when the required dishonest or fraudulent intent is present.
  • Sections 66C and 66D: identity theft and cheating by personation using computer resources.
  • Sections 66E and 66F: violation of privacy and cyber terrorism.
  • Sections 67, 67A and 67B: specified unlawful obscene or sexually explicit electronic material, including material involving children.
02

Information Technology (Amendment) Act, 2008

The 2008 amendments expanded and updated the IT Act framework to address developments in digital technology and cyber offences.

  • Introduced or revised important provisions relating to identity theft, online impersonation and privacy.
  • Added provisions concerning cyber terrorism and certain electronic content.
  • Updated legal recognition and regulatory provisions for electronic authentication.
03

Bharatiya Nyaya Sanhita, 2023 (BNS)

In force from 1 July 2024, the BNS contains general criminal offences that may apply where the conduct involves digital tools or electronic records.

  • Section 318: cheating, where its ingredients are established.
  • Sections 335–336: making false documents or electronic records and forgery.
  • Other provisions may apply depending on threats, extortion, stalking, intimidation or other conduct.
04

Digital Personal Data Protection Act, 2023

The DPDP Act establishes a framework for processing digital personal data in India, including obligations and rights under the Act.

  • DPDP Rules, 2025 were notified in November 2025.
  • Commencement is phased under the Gazette notification dated 13 November 2025.
  • As of this page's update date, several substantive provisions are scheduled to commence 18 months after publication (May 2027); check the official notification for provision-wise dates.
05

IT Rules, 2021

The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended, prescribe due-diligence requirements for covered intermediaries and address grievance mechanisms and specified content-related obligations.

06

Indian Evidence Act / Bharatiya Sakshya Adhiniyam, 2023

The Bharatiya Sakshya Adhiniyam, 2023 came into force on 1 July 2024 and contains provisions for electronic and digital records as evidence, subject to applicable legal requirements.

Important: Section 66A of the IT Act was struck down by the Supreme Court in Shreya Singhal v. Union of India (2015). It should not be treated as a valid offence provision. Statutory text and later amendments should always be checked before relying on a section.
03 / Know the threats

Common Types of Cyber Crimes

Cyber crime can take many forms. The same incident may involve more than one legal provision.

01

Online Financial Fraud

Fraudulent UPI requests, fake payment links, investment scams, remote-access scams and unauthorised transactions.

02

Phishing & Smishing

Fake emails, SMS messages or websites designed to steal passwords, banking details or one-time passwords.

03

Hacking & Unauthorised Access

Accessing, damaging, disrupting or interfering with a computer system or account without lawful authority.

04

Identity Theft

Misusing another person's password, electronic signature or other unique identification feature.

05

Cyberstalking & Harassment

Repeated unwanted digital contact, threats, intimidation or misuse of online platforms. Applicable laws depend on the facts.

06

Impersonation & Fake Profiles

Creating or using deceptive identities to cheat, defraud, threaten or harm another person.

07

Data Theft & Privacy Breach

Unauthorised collection, disclosure, copying or misuse of personal, confidential or protected information.

08

Non-consensual Intimate Content

Capturing, publishing or sharing certain private or sexually explicit content without consent may attract serious legal consequences.

09

Child Sexual Abuse Material

Creating, possessing, publishing or transmitting prohibited sexual material involving children is a serious offence under applicable laws.

10

Ransomware & Malware

Malicious software used to lock, damage, spy on or steal data from devices and computer networks.

11

Business Email Compromise

Fraudsters impersonate executives, vendors or employees to divert payments or obtain confidential information.

12

Deepfake & Digital Manipulation

Manipulated audio, video or images used for deception, harassment, impersonation or other unlawful purposes.

04 / Legal provisions

Selected Offences & Punishments

This is a quick reference to selected provisions of the IT Act. It is not a complete list of cyber offences or penalties.

ProvisionSubjectBroad statutory punishment / consequence
Section 65Tampering with computer source documentsImprisonment up to 3 years, or fine up to ₹2 lakh, or both.
Section 66Computer-related offences (dishonest or fraudulent acts covered by Section 43)Imprisonment up to 3 years, or fine up to ₹5 lakh, or both.
Section 66BDishonestly receiving stolen computer resource or communication deviceImprisonment up to 3 years, or fine up to ₹1 lakh, or both.
Section 66CIdentity theftImprisonment up to 3 years and fine up to ₹1 lakh.
Section 66DCheating by personation using a computer resourceImprisonment up to 3 years and fine up to ₹1 lakh.
Section 66EViolation of privacyImprisonment up to 3 years, or fine up to ₹2 lakh, or both.
Section 66FCyber terrorismMay extend to imprisonment for life.
Section 67Publishing or transmitting obscene material electronicallyFirst conviction: up to 3 years and fine up to ₹5 lakh; subsequent conviction: up to 5 years and fine up to ₹10 lakh.
Section 67APublishing or transmitting material containing sexually explicit actsFirst conviction: up to 5 years and fine up to ₹10 lakh; subsequent conviction: up to 7 years and fine up to ₹10 lakh.
Section 67BSpecified electronic material depicting children in sexually explicit actsFirst conviction: up to 5 years and fine up to ₹10 lakh; subsequent conviction: up to 7 years and fine up to ₹10 lakh.

Punishment summaries are simplified. Statutory exceptions, ingredients of each offence, amendments, procedural rules and other applicable laws may affect the outcome. Do not use this table as legal advice.

05 / Take action

How to Report a Cyber Crime in India

If you are a victim of online fraud or another cyber offence, report it promptly through official channels.

Lost money in an online financial fraud?

Call the national cyber financial fraud helpline immediately and report the incident on the official portal.

1930

Call 1930 promptly

For financial cyber fraud, call the national helpline as soon as possible. Follow the instructions provided by the helpline.

File an online complaint

Visit the National Cyber Crime Reporting Portal at cybercrime.gov.in and submit the relevant complaint details.

Preserve evidence

Keep transaction IDs, bank messages, screenshots, URLs, phone numbers, emails and complaint acknowledgements. Do not edit original evidence.

Contact your bank / police

Inform your bank or payment provider immediately. Where appropriate, approach the nearest police station or cyber police station.

Official reporting links

National Cyber Crime Reporting Portal: https://cybercrime.gov.in/

Emergency response for financial cyber fraud: 1930

The 1930 helpline is for reporting cyber financial fraud. For immediate physical danger or other emergencies, contact the appropriate emergency service or local police.

06 / Digital protection

Essential Cyber Safety Practices

Simple precautions can reduce the risk of online fraud, account compromise and privacy violations.

✓
Never share OTP or PINDo not disclose OTPs, UPI PINs, passwords or card security details to callers or strangers.
✓
Verify payment requestsReceiving money through UPI generally does not require entering your UPI PIN. Check the request carefully.
✓
Use strong, unique passwordsEnable multi-factor authentication wherever available and avoid reusing passwords.
✓
Check links before openingVerify website addresses and avoid unknown attachments, QR codes and shortened links.
✓
Keep devices updatedInstall operating-system and application updates from trusted sources.
✓
Protect personal informationLimit public sharing of identity documents, location, contact details and sensitive photographs.
✓
Do not install unknown remote-access appsNever follow unsolicited instructions to share your screen or grant remote control of your device.
✓
Preserve evidence and report quicklySave relevant records and use official reporting channels when an incident occurs.
07 / Safer online spaces

Women & Child Online Safety

Online threats such as stalking, blackmail, impersonation, doxxing and non-consensual sharing of intimate material should be taken seriously.

For women and adults

  • Save screenshots, profile links, message details and relevant timestamps.
  • Report abusive accounts to the platform and preserve evidence before blocking where safe to do so.
  • Do not pay blackmailers or send additional private material.
  • Report threats, stalking, impersonation or intimate-image abuse to the police and the official cybercrime portal.
  • Seek urgent help if there is a credible threat to physical safety.

For parents and guardians

  • Talk regularly with children about safe and respectful online behaviour.
  • Use age-appropriate privacy and safety settings.
  • Encourage children to report suspicious contact without fear of punishment.
  • Do not download, forward or circulate suspected child sexual abuse material; report it through official channels.
  • Preserve relevant account details and contact law enforcement.
08 / Quick answers

Frequently Asked Questions

Which is the main cyber law in India?

The Information Technology Act, 2000 is India's principal legislation specifically dealing with electronic records, electronic signatures and several cyber-related offences. Other laws may also apply.

Where can I report an online financial fraud?

Call 1930 as soon as possible and submit a complaint through the official National Cyber Crime Reporting Portal: cybercrime.gov.in. Also inform your bank or payment provider immediately.

Is sharing an OTP a cyber safety risk?

Yes. Never share an OTP, UPI PIN, password or card security details with another person. Banks and legitimate support staff should not ask you to disclose your confidential authentication credentials.

Is Section 66A of the IT Act still valid?

No. The Supreme Court struck down Section 66A in Shreya Singhal v. Union of India (2015). It cannot be relied upon as a valid offence provision.

Can online cheating be prosecuted under more than one law?

Depending on the facts and legal ingredients, conduct may attract provisions of the IT Act and general criminal law, including relevant provisions of the Bharatiya Nyaya Sanhita, 2023. The investigating authority and court determine the applicable provisions.

Does the DPDP Act, 2023 apply in full already?

No. The commencement notification dated 13 November 2025 provides a phased timeline. Some provisions commenced on publication, while several substantive provisions are scheduled to commence 18 months later. Always check the Gazette for the provision and date relevant to your question.

Can CRIAI provide legal representation or register an FIR?

This page is an awareness resource. An FIR, investigation or legal proceeding is handled by the competent police authority, court or other statutory authority. For legal advice or representation, consult a qualified advocate.

09 / Verify from official sources

Official Legal References

For exact statutory wording, amendments, notifications and commencement dates, consult the original government publications.

Legal Disclaimer: This page is published for general public awareness and educational purposes only. It is not legal advice, does not create an advocate-client relationship and should not be treated as a substitute for the official text of any law, professional legal advice or directions from law-enforcement authorities. Laws, rules, penalties and commencement dates may change. Verify the latest official Gazette and consult a qualified legal professional for advice about a specific matter. CRIAI does not guarantee any particular investigation or legal outcome.
↑