Cyber matters may involve the Information Technology Act, the BNS and financial regulations at once. In a case of online financial fraud, the first few hours are often critical, so report it immediately on the national helpline 1930 or at cybercrime.gov.in.
Data protection is also changing. The Digital Personal Data Protection Act, 2023 and its 2025 Rules are coming into force in phases through May 2027, so businesses should plan now.
What this covers
- Online financial fraud
- Hacking and identity theft
- Online harassment and defamation
- Takedown and intermediary requests
- Compensation under the IT Act
- Electronic evidence
- Data breach response
- Privacy policies and data compliance
Principal laws
| Law | Relevance |
|---|---|
| Information Technology Act, 2000 | Sections 43, 66, 66C, 66D and 67, plus intermediary liability under Section 79. |
| Bharatiya Nyaya Sanhita, 2023 | Cheating, defamation and related offences. |
| Bharatiya Sakshya Adhiniyam, 2023 | Section 63 on admissibility of electronic records. |
| Digital Personal Data Protection Act, 2023 | Personal data obligations, in phases. |
Where it is heard
Cyber crime police stations, the Adjudicating Officer under the IT Act, criminal courts, and the High Court in each State.
Usual steps
- Report urgently if money or safety is at risk
- Preserve the evidence
- Lodge the complaint or respond to one
- Seek takedown, compensation or court relief
- Follow up on the investigation or proceedings
Documents that are often relevant
- Screenshots with URLs and dates
- Bank messages and transaction IDs
- Device and account details
- Complaint acknowledgement number
Please keep these safe, but do not send confidential documents until we have confirmed that we will act for you.
Time limits and key points
| Item | Position |
|---|---|
| Online financial fraud | Report immediately on 1930 |
| DPDP Rules, next phases | 13 November 2026 and 13 May 2027 |
| Bank-reported fraud claims | Report to your bank immediately. Liability can depend on timing |
Common questions
What should I do first after an online fraud?
Call 1930 or use cybercrime.gov.in, and inform your bank at once. Keep all messages and transaction details. Do not delete anything from your device.
Is a screenshot enough as evidence?
It helps, but electronic records usually need to meet Section 63 of the BSA, including the required certificate. Preserve the original device and account data if possible.
This is general information, not legal advice. The law may have changed, and the answer may differ on your facts.