Digital fraud and cybercrime in India are addressed through the Information Technology Act, 2000's specific cyber offences -- hacking, identity theft, and online impersonation -- working alongside general Bharatiya Nyaya Sanhita offences like cheating and forgery, with the National Cyber Crime Reporting Portal and 1930 helpline as the practical route for victims, including NRIs, to report financial fraud.
Core statutory provisions
The Information Technology Act, 2000, as amended, remains India’s primary cyber-specific statute.
Section 43 provides civil compensation for unauthorized access to or damage of a computer system; Section 66
criminalizes the same conduct when done dishonestly or fraudulently; Section 66C covers identity theft;
Section 66D -- the primary provision used against online scams -- covers cheating by personation using a
computer resource; Section 66E covers privacy violations through capturing or publishing private images; and
Section 66F covers cyber terrorism. These work alongside the Bharatiya Nyaya Sanhita, 2023, whose general
offences -- cheating (Section 318), forgery (from Section 336 onward), and criminal breach of trust (Section
316) -- are frequently charged together with the IT Act’s cyber-specific provisions for the same online
conduct.
Investigation procedure
Cybercrime investigation procedure now follows the Bharatiya Nagarik Suraksha Sanhita, 2023, which replaced
the Code of Criminal Procedure, 1973 from 1 July 2024 -- including its provision for electronic filing of
information about a cognizable offence, relevant for reporting a cyber offence without needing to visit a
police station in person to lodge the initial complaint.
Reporting cybercrime -- the practical route
For individual victims, including NRIs targeted by cross-border financial fraud, romance scams, or fake
investment schemes involving India, the practical reporting channel is the National Cyber Crime Reporting
Portal (cybercrime.gov.in) and the associated 1930 helpline, both operated by the Indian Cyber Crime
Coordination Centre (I4C) under the Ministry of Home Affairs. Prompt reporting materially improves the chance
of freezing funds in a fraudulent account before they are moved further, which is especially relevant where a
fraud victim is calling in from a different time zone and every hour of delay matters. NRIs who cannot easily
reach an Indian police station in person can still file the initial complaint online through the portal from
abroad, and should preserve all transaction references, screenshots, and communication records with the
fraudster before those messages or accounts are deleted, since this evidence is often decisive when the bank
or I4C investigates the fraudulent transfer.
What is the difference between IT Act Section 66 and Section 66D for online fraud?
Section 66 covers computer-related offences generally, such as hacking done dishonestly or fraudulently.
Section 66D specifically targets cheating by personation using a computer resource -- the provision most
directly applicable to online impersonation scams, fake profiles, and phishing.
How quickly should an NRI report cyber fraud involving an Indian bank account?
As quickly as possible -- reporting through the National Cyber Crime Reporting Portal or the 1930 helpline
promptly after discovering the fraud materially improves the chance that the funds can be frozen before being
moved further, since delay generally reduces the odds of recovery.
Can online fraud be prosecuted under both the IT Act and the Bharatiya Nyaya Sanhita?
Yes -- it’s common practice for prosecutors to charge online fraud under both the IT Act’s
cyber-specific provisions (like Section 66D) and the corresponding general BNS offence (like Section 318
cheating), since the two statutes address overlapping but distinct aspects of the same conduct.
