Rising of Cyber Crime in India: Its Types, Laws, Remedies for Victims and How to Stay Protected

Introduction

The rise of the internet has transformed our lives, making communication, business and banking faster than ever. However, with this digital revolution comes a darker side: Cyber Crime. In India, cases of online fraud, identity theft, hacking and cyberbullying are increasing every year. According to NCRB data, Cyber Crime cases have risen drastically in recent years, highlighting the urgent need for awareness among individuals, businesses, and institutions alike.

In this article, we will explore what Cyber Crime is, the types most prevalent in India, the laws that govern them and practical steps you can take to protect yourself.

Legal Disclaimer: This article is for general informational purposes only and does not constitute legal advice. The law is stated as it stands following the commencement of the Bharatiya Nyaya Sanhita (BNS), Bharatiya Nagarik Suraksha Sanhita (BNSS) and Bharatiya Sakshya Adhiniyam (BSA) on 1 July 2024. For advice specific to your situation, please consult a qualified advocate or book consultation with our firm.

What Is Cyber Crime?

Cyber crime is any illegal activity carried out using computers, networks, or the internet. These crimes can target individuals, businesses, or even government systems. Unlike traditional crimes, Cyber crimes are often borderless and difficult to trace, making them a serious challenge for law enforcement agencies across India and Internationally.

Common Types of Cyber Crimes in India

1. Hacking - Unauthorised access to computer systems or networks to steal, alter, or destroy data.

2. Identity Theft - Stealing personal data such as Aadhaar number, PAN card details, or banking credentials to impersonate a victim/person or commit financial fraud.

3. Phishing and Online Fraud - Fake emails, websites or SMS messages designed to trick users into sharing sensitive personal or financial information.

4. Cyberstalking and Cyberbullying - Persistent online harassment of individuals through social media, email or messaging platforms.

5. Financial Fraud - Credit card scams, UPI fraud, SIM-swap attacks and online banking theft etc.

6. Ransomware Attacks - Malicious software that encrypts a victim's files and demands payment for their restoration.

7. Obscene or Offensive Content - Publishing or transmitting sexually explicit, offensive, or non-consensual intimate material in electronic form.

8. Cyber Terrorism - Attacks on critical infrastructure, government systems, or public utilities carried out with a terrorist motive.

Laws Governing Cyber Crimes in India

Cyber Crime in India is governed by an interlocking framework of legislation. Following the commencement of the three new criminal laws on 1 July 2024 , the framework now consists of the Information Technology Act, 2000 (as amended in 2008); the Bharatiya Nyaya Sanhita, 2023 (BNS), which has fully replaced the Indian Penal Code, 1860; the Digital Personal Data Protection Act, 2023 (DPDPA); and the rules and directions issued under each of these statutes.

Important Note on India's Reformed Criminal Law: From 1 July 2024, India's criminal justice system rests on three new statutes that replaced their colonial-era predecessors: the Bharatiya Nyaya Sanhita, 2023 or BNS (replacing the IPC), the Bharatiya Nagarik Suraksha Sanhita, 2023 or BNSS (replacing the CrPC), and the Bharatiya Sakshya Adhiniyam, 2023 or BSA (replacing the Indian Evidence Act). Any older court order or document referencing IPC, CrPC, or Evidence Act provisions should be read alongside their corresponding BNS, BNSS and BSA equivalents.

1. The Information Technology (IT) Act, 2000 (as amended in 2008).

This is the core legislation governing cyber offences. It gives legal recognition to electronic records and digital signatures and defines the principal Cyber Crimes. Key provisions include:

• Section 43 and Section 66: Penalties and punishment for hacking, unauthorised access, data theft, and causing damage to computer systems or data.

• Section 66C: Punishes identity theft, specifically the fraudulent use of electronic signatures, passwords, or other unique identification features of another person.

• Section 66D: Addresses cheating by personation using a computer resource, covering online impersonation and scams.

• Section 66E: Penalises violation of privacy by capturing or publishing private images of a person without their consent.

• Section 66F: Deals with cyber terrorism, which can carry a penalty of life imprisonment.

• Section 67, 67A, and 67B: Prohibit the publishing or transmitting of obscene material, sexually explicit content, and child sexual abuse material in electronic form.

2. The Bharatiya Nyaya Sanhita, 2023 (BNS) — in force from 1 July 2024.

The BNS has fully replaced the Indian Penal Code, 1860. Traditional criminal acts committed through digital means are prosecuted under the BNS in conjunction with the IT Act. The BNS expressly recognises cyber crimes and financial fraud as distinct offences. In most cyber crime cases, police register offences under both the IT Act and the relevant BNS provisions. Key sections include:

• Section 318 BNS (replacing Section 420 IPC): Cheating and online fraud, including all forms of digital deception. Serious cheating attracting the highest punishment falls under Section 318(4) BNS.

• Section 336 BNS (replacing Sections 463 to 471 IPC): Forgery, including forgery of electronic records and email spoofing.

• Section 356 BNS (replacing Sections 499 and 500 IPC): Defamation, including online defamation.

• Section 78 BNS (replacing Section 354D IPC): Stalking, including cyber-stalking — monitoring a woman online, tracking her social media activity, or sending repeated unwanted messages. First offence carries up to 3 years imprisonment; repeated offence up to 5 years.

• Section 79 BNS (replacing Section 509 IPC): Insulting the modesty of a woman, including through electronic communication.

• Section 75 BNS (replacing Section 354A IPC): Sexual harassment, including online sexual harassment.

• Section 111 BNS: Organised crime, which covers organised cyber crime operations.

3. The Digital Personal Data Protection Act, 2023 (DPDPA)

This legislation governs the collection, storage, and processing of personal data by organisations, referred to as Data Fiduciaries. It mandates robust data-security practices and prescribes significant financial penalties for data breaches. Implementing rules are being notified in phases; organisations handling personal data should monitor compliance requirements as they are introduced.

Institutional Framework

Several government bodies are responsible for cybersecurity and combating cyber crime in India:

• Ministry of Electronics and Information Technology (MeitY): The nodal ministry for cyber law policy and oversight of the IT Act.

• Indian Computer Emergency Response Team (CERT-In): The national nodal agency for responding to and coordinating action on cybersecurity incidents.

• Indian Cybercrime Coordination Centre (I4C): Coordinates law enforcement efforts across states to combat cyber crime systematically.

• National Cyber Crime Reporting Portal: The official platform for citizens to report all categories of cyber offences at www.cybercrime.gov.in. For serious offences, the police may ask you to visit the station after an initial online complaint.

How to Protect Yourself from Cyber Crime

• Use strong passwords that combine upper and lower case letters, numbers, and symbols. Consider using a password manager to maintain unique credentials for each account.

• Enable two-factor authentication (2FA) on all important accounts, including banking, email, and social media platforms.

• Verify links and URLs carefully before entering any credentials. Avoid clicking on links in unsolicited messages or emails.

• Keep your operating system, browser, and antivirus software updated regularly to patch known vulnerabilities.

• Limit the personal information you share publicly on social media. Never share OTPs, banking passwords, or card details with anyone.

• If you are a victim, report immediately at the National Cyber Crime Reporting Portal (www.cybercrime.gov.in) or call the national helpline at 1930 , or visit your nearest cyber crime police station.

Conclusion

Cyber crime in India is a growing threat, but with awareness and the right legal safeguards, you can protect yourself and those around you. The IT Act, the BNS, and the DPDPA together provide a robust framework that empowers victims to seek redress. As India advances its digital infrastructure, being cyber-aware is no longer optional — it is essential.