Cyber Crime Fraud in India 2026 — Types, Laws & How to File a Complaint (Lucknow/UP)

This article is for educational and legal awareness purposes only. It does not constitute legal advice or solicitation. Please consult a qualified advocate for advice on specific legal matters.

Introduction

India has over 740 million internet users and growing digital payment adoption. Incidents of online fraud — ranging from UPI scams to identity theft — have risen sharply, with the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs recording a significant surge in complaints through the National Cyber Crime Reporting Portal. This article sets out the common types of cyber fraud, the applicable legal framework, and the procedure for filing complaints.

Common Types of Cyber Fraud in India

UPI and Digital Payment Fraud

UPI-related frauds have seen a steep increase in recent years. Common methods include:

Fake payment requests — Fraudsters send collect requests on UPI apps, tricking victims into approving payments
QR code scams — Victims are asked to scan a QR code “to receive money,” but the scan actually authorises a debit
Remote access fraud — Scammers convince victims to install apps like AnyDesk or TeamViewer, gaining control of the device
SIM swap fraud — Fraudsters obtain a duplicate SIM card to intercept OTPs and access banking apps

Fake emails and SMS — Messages impersonating banks, government agencies, or e-commerce platforms, containing malicious links
Fake customer care numbers — Fraudulent numbers appearing in search results, where callers are tricked into sharing credentials
Vishing (voice phishing) — Phone calls from persons impersonating bank officials or police officers

Identity Theft and Impersonation

Digital arrest scams — Fraudsters impersonate police, CBI, or customs officers on video calls, threatening victims with fabricated criminal cases and demanding money
Aadhaar/PAN misuse — Stolen identity documents used to obtain fraudulent loans or bank accounts
Deepfake and voice cloning — AI-generated audio or video used for impersonation

Banking and Card Fraud

ATM skimming and card cloning
Net banking credential theft via keyloggers or malware
Aadhaar-enabled Payment System (AePS) fraud using cloned biometrics

Other Prevalent Frauds

KYC update scams (fake links claiming KYC expiry)
Online job fraud and fake recruitment scams
Fake investment and stock trading platform scams
Android malware distributed via APK files on WhatsApp
Sextortion and online blackmail

Legal Framework — Applicable Laws

Information Technology Act, 2000 (as amended 2008)

The Information Technology Act, 2000 (IT Act) is the primary legislation governing cyber offences in India. Key provisions include:

Section 43 — Unauthorised access to computer systems, data theft, or introducing viruses. Attracts compensation (civil liability; the adjudicating officer has jurisdiction up to Rs 5 crore per the IT Act as amended).
Section 65 — Tampering with computer source documents. Punishable with imprisonment up to 3 years and/or fine up to Rs 2 lakh.
Section 66 — Computer-related offences committed dishonestly or fraudulently (hacking). Punishable with imprisonment up to 3 years and/or fine up to Rs 5 lakh.
Section 66C — Identity theft — fraudulent use of electronic signature, password, or unique identification feature. Punishable with imprisonment up to 3 years and fine up to Rs 1 lakh.
Section 66D — Cheating by personation using a computer resource or communication device. Punishable with imprisonment up to 3 years and fine up to Rs 1 lakh.
Section 66E — Violation of privacy — capturing or publishing private images without consent. Punishable with imprisonment up to 3 years and/or fine up to Rs 2 lakh.
Section 72 — Breach of confidentiality and privacy by a person who has secured access to electronic records under powers conferred by the IT Act. Punishable with imprisonment up to 2 years and/or fine up to Rs 1 lakh.

Bharatiya Nyaya Sanhita (BNS), 2023

The Bharatiya Nyaya Sanhita, 2023 (BNS), which replaced the Indian Penal Code with effect from 1 July 2024, contains provisions applicable to cyber fraud:

Section 318 — Cheating and dishonestly inducing delivery of property (replacing IPC Sections 415, 417, 420). Punishable with imprisonment up to 7 years and fine; up to 10 years for aggravated cheating.
Section 319 — Cheating by personation, including online impersonation (replacing IPC Section 419). Punishable with imprisonment up to 5 years and fine.
Section 336 — Forgery, including of electronic records (replacing IPC Sections 463, 465). Punishable with imprisonment up to 2 years and fine.
Section 338 — Forgery for the purpose of cheating (replacing IPC Section 468). Punishable with imprisonment up to 7 years and fine.
Section 351(2) — Criminal intimidation through electronic means (replacing IPC Section 506). Punishable with imprisonment up to 7 years.

RBI Circular on Customer Liability (2017)

The Reserve Bank of India’s circular dated 6 July 2017 (RBI/2017-18/15) limits customer liability for unauthorised electronic banking transactions:

Zero liability if the fraud is due to the bank’s negligence, or if reported within 3 working days of a third-party breach
Limited liability (Rs 5,000 to Rs 25,000 depending on account type) if reported within 4–7 days
Full liability as per bank policy if reported after 7 days
Banks must complete investigation within 90 days and refund within 10 working days if the bank is at fault

How to File a Cyber Crime Complaint

Method 1 — Online via National Cyber Crime Reporting Portal

Visit https://cybercrime.gov.in
Select the complaint type — “Report Other Cybercrimes” for financial fraud, or “Report Crime related to Women/Child” for harassment-related crimes
Register using a valid Indian mobile number and verify via OTP
Fill the complaint form with personal details, incident details (date, time, type of fraud), suspect information (if known), and supporting evidence (screenshots, transaction IDs, bank statements)
Submit and note the acknowledgement number received via SMS and email
Track the status by logging in and clicking “Check Status”

Method 2 — Call the 1930 Helpline

Dial 1930 (toll-free, available 24x7)
Provide details of the financial fraud immediately — the first hour after the fraud (the “golden hour”) is critical for freezing fraudulent transactions
The operator initiates a freeze on the fraudulent transaction across the banking chain
Follow up with a formal written complaint on the portal or at a police station

Method 3 — FIR at Police Station or Cyber Crime Cell

Gather evidence — screenshots, transaction receipts, bank statements, call logs, URLs, email headers
Visit the nearest police station or the dedicated Cyber Crime Police Station
File a written complaint describing the incident in detail
The police are obligated to register an FIR under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS) for cognizable offences
If the police refuse, an affected person may approach the Superintendent of Police under Section 173(4) BNSS or the Judicial Magistrate under Section 175(3) BNSS
Obtain a copy of the FIR, which must be provided free of cost

For a detailed explanation of FIR procedure, Zero FIR, e-FIR in UP, and your rights as a complainant, see our guide: How to File an FIR in India — Step-by-Step Guide (2026).

Important Tips

Report financial fraud within the first hour for the maximum chance of recovering funds
Preserve all digital evidence — do not delete messages, emails, or call logs
Immediately inform the bank to block compromised cards or accounts
All complaint services are free — never pay anyone claiming to file complaints on behalf of the victim

Key Case Law

Shreya Singhal v. Union of India (2015) 5 SCC 1

The Supreme Court struck down Section 66A of the IT Act as unconstitutional, holding that it violated Article 19(1)(a) of the Constitution (freedom of speech and expression). The Court observed that the provision was vague, overbroad, and permitted arbitrary arrests for online posts deemed “offensive.” This landmark judgment defined the limits of cyber law enforcement with respect to fundamental rights.

NASSCOM v. Ajay Sood & Others (2005) — Delhi High Court

The Delhi High Court declared phishing to be an illegal act in India and granted an injunction along with damages. The Court defined phishing as a form of internet fraud involving impersonation of legitimate entities to extract personal data. This was the first Indian judgment to explicitly address phishing as a cyber crime.

State of Tamil Nadu v. Suhas Katti (2004)

This was India’s first conviction under the IT Act, 2000. The Additional Chief Metropolitan Magistrate, Egmore, Chennai convicted the accused under Section 67 of the IT Act and Section 469 IPC for posting obscene and defamatory content using the victim’s identity on an online group. The accused was sentenced to 2 years’ imprisonment and a fine of Rs 10,000.

Important Points to Remember

Cyber fraud complaints can be filed regardless of where the offence occurred — the portal routes complaints to the relevant jurisdiction
The 1930 helpline is the fastest channel for financial fraud — it can freeze fraudulent transactions in real time
Under the RBI circular, customers have zero liability if fraud is reported within 3 working days of a third-party breach
Preserving digital evidence (screenshots, transaction IDs, URLs, email headers) is critical for investigation
Filing a false complaint is punishable under Section 199 of the BNS

Useful Resources

Helpline Numbers

Helpline	Number
National Cyber Crime Helpline	1930 (toll-free, 24x7)
Police Emergency	112
UP Cyber Crime Police Station, Lucknow	7839856831

Lucknow / Uttar Pradesh

The UP Cyber Crime Police Station, Lucknow is located near the Fire Station, Sri Balmiki Marg, Hazratganj, Lucknow — 226001. Complaints may also be filed at any police station in Lucknow, which is obligated to register the FIR and may transfer it to the Cyber Crime Police Station for investigation. Each of the 75 districts in Uttar Pradesh has a designated Cyber Police Station and a Cyber Crime nodal officer.

Disclaimer: The information provided on this website is for general legal awareness and educational purposes only. It does not constitute legal advice, advertisement, or solicitation. No reader should act or refrain from acting based on this information without seeking professional legal counsel. Advocate Akhil Singh and this website are not liable for any actions taken based on the content provided herein.