How to Register a Cyber Crime Complaint in India
Simple, step-by-step guidance to report UPI fraud, hacked accounts, cyber stalking, sextortion, identity theft and more – with a clear legal angle.
Victim of a cyber fraud or harassment?
Take action in the golden hour – quick reporting improves your chances of freezing funds and getting effective investigation.
Call Adv. Tarun Choudhury: 98912 44487 WhatsApp Your Cyber Case
Immediate legal help for cyber crime victims across India · Consultation by appointment
Common situations where you should not stay silent:
- UPI / net-banking / card frauds, fake investment links
- Blackmail over intimate photos, sextortion, revenge porn
- Hacked WhatsApp / Instagram / email accounts
- Cyber stalking, doxxing, online threats or abuse
- Data leak, identity theft, SIM-swap or OTP misuse
This guide explains what to do first, where to complain, what law applies and when to get an advocate involved.
Legal angle
Your rights under Indian cyber law
Cyber crimes in India are mainly dealt with under the Information Technology Act, 2000, the Indian Penal Code (IPC) and, for personal data, the Digital Personal Data Protection Act, 2023. Victims have a legal right to lodge a complaint, get an FIR registered and seek criminal action as well as compensation.
Laws and procedures in this article are updated as of November 2025 and are meant for informational purposes. For case-specific advice, consult an advocate.
1. When should you file a cyber complaint?
You should consider filing a formal cyber complaint whenever there is:
- Financial loss – UPI/IMPS/RTGS fraud, card skimming, phishing links, fake apps.
- Reputation or privacy harm – fake profiles, morphed photos, non-consensual sharing of images.
- Safety risk – cyber stalking, threats, doxxing, online harassment, child-related offences.
- Technical intrusion – hacked accounts, malware, data theft, ransomware.
Why speed matters In financial frauds, banks and law-enforcement can often freeze suspicious transactions only if you report quickly – preferably within hours, not days.
2. Step-by-step: How to register a cyber crime complaint
Secure yourself and stop the damage
- Immediately block your debit/credit card and freeze net-banking / UPI through your bank’s app or customer care.
- Change passwords for email, UPI apps, social media and enable two-factor authentication (2FA).
- Logout from all other devices and scan your phone/computer for malware or suspicious apps.
Bank liability tip RBI guidelines give customers zero or limited liability if unauthorised electronic transactions are reported promptly, usually within 3 days. Always obtain a written complaint number from your bank.
Collect and preserve all digital evidence
Never delete chats, emails or apps linked to the fraud. Preserve:
- Screenshots of messages, emails, social media chats, caller IDs.
- Fraudulent links, websites, fake profiles, UPI IDs, bank account numbers and phone numbers.
- Bank statements / SMS showing debits, OTPs, alert messages.
- Any recorded calls, voicemails or screen recordings that capture the scam.
This evidence can help the police trace IP addresses, devices and bank accounts used by the accused.
Call the national cyber fraud helpline – 1930
For online financial frauds, immediately call the National Cyber Crime Helpline: 1930. Your complaint goes into the Citizen Financial Cyber Fraud Reporting and Management System, which allows police and banks to try and freeze the money trail.
- Keep your transaction ID, bank name, amount and time ready.
- Ask for the acknowledgment / complaint ID and note it down.
Golden hour concept Statistics show that early reporting to 1930 significantly improves chances of freezing fraudulent transactions before the funds are withdrawn or layered.
File an online complaint on the National Cyber Crime Portal
Visit the official Government of India portal: www.cybercrime.gov.in.
This portal is managed by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs.
- Choose: “Report Women/Children Related Crime” (with option for anonymous reporting), or “Report Other Cyber Crime” for all other cases.
- Fill in accurate incident details – dates, times, platform, handles, phone numbers.
- Upload screenshots, PDFs, call recordings and any other evidence.
- Submit and save/print your complaint reference number.
Complaints are routed to the appropriate State/UT cyber police for further action.
Lodge an FIR at the nearest police station / cyber cell
For serious offences (threats, extortion, sexual offences, large fraud, organised scams), you should also insist on a formal FIR.
- Go to the nearest police station or dedicated cyber police station.
- Carry your ID proof, address proof, and a printed copy of your online complaint and evidence.
- Ask for registration of a Zero FIR if jurisdiction is unclear – they must forward it to the correct station.
Your legal right Under Section 154 CrPC, police are bound to register an FIR for cognisable offences. If they refuse, you may escalate to the Superintendent of Police, or file an application under Section 156(3) CrPC before the Magistrate.
Use a legally strong written complaint
Your written complaint should be addressed to the Station House Officer or the Cyber Crime Cell and include:
- Your full name, address, mobile number and email ID.
- Clear narrative – what happened, when, where, how, and on which device/platform.
- Details of suspects (if any), phone numbers, UPI IDs, email IDs, social media handles.
- List of annexures – screenshots, transaction receipts, chats and any expert reports.
- Specific request for registration of FIR, investigation and freezing of suspect accounts.
A well-drafted complaint often makes the difference between a passive and an active investigation.
Track your complaint and follow up
- Use the National Cyber Crime Portal to track status using your complaint ID.
- Maintain a diary of calls, visits to the police station and replies received.
- If there is unreasonable delay, send a written reminder or legal notice.
- Escalate to higher police authorities, State cyber cell or file an appropriate application in court if required.
Many States are now introducing e-FIR and automatic Zero FIR systems for cyber frauds, so track any SMS/email you receive from the police after filing your complaint.
Not comfortable drafting the complaint yourself?
Get a cyber-law-oriented complaint drafted with correct sections, annexures and follow-up strategy.
Speak to Adv. Tarun Choudhury Share screenshots on WhatsApp
3. Important laws commonly used in cyber complaints
The exact sections depend on the facts of your case. Some commonly invoked provisions are:
| Type of cyber incident | IT Act (examples) | IPC / Other law (examples) |
|---|---|---|
| Online financial fraud, UPI/OTP scams, phishing | Sec. 66C (identity theft), 66D (cheating by personation) | Sec. 420 IPC (cheating), conspiracy / forgery provisions |
| Hacking, unauthorised access, data theft | Sec. 43 & 66 (unauthorised access, damage to computer system) | Sec. 379 IPC (theft), 406 IPC (criminal breach of trust) depending on facts |
| Obscene/morphed images, sextortion, revenge porn | Sec. 67, 67A IT Act (publishing / transmitting obscene or sexually explicit material) | Sec. 354A, 354C, 354D, 509 IPC; POCSO Act if minor involved |
| Cyber stalking, threats, online abuse | Can combine with IT Act if electronic transmission is involved | Sec. 354D IPC (stalking), 506 IPC (criminal intimidation), 507 IPC (anonymous communication) |
| Deepfakes, synthetic media, misinformation | IT Rules 2021 (as amended) – due diligence, takedown, labelling obligations for platforms | Defamation, cheating, obscenity or other sections depending on content |
| Online gaming fraud / illegal money-gaming | IT Act + platform liability under intermediary rules | Promotion and Regulation of Online Gaming Act, 2025 (ban on online money games), IPC cheating, PMLA etc. |
4. 2025 legal updates every cyber victim should know
Cyber law in India is evolving quickly. A few recent developments are particularly relevant to victims filing complaints in 2025:
Data protection
Digital Personal Data Protection Act, 2023 fully operationalised
With the notification of the DPDP Rules, 2025, India’s data-protection law is now fully in force. If your personal data has been leaked, sold, or misused by a company or platform, you may:
- Demand information on how your data was processed and with whom it was shared.
- Seek correction, deletion and restriction of processing.
- Request the company to report the breach and cooperate with investigation.
- Trigger proceedings before the Data Protection Board of India which can impose penalties on violators.
For large breaches (e-commerce portals, fintech apps, social media), a cyber complaint can be combined with a DPDP-based strategy.
Deepfakes & social media
Stronger obligations on platforms for synthetic / AI-generated content
Draft and notified amendments to the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 tighten due-diligence obligations of platforms regarding deepfakes and “synthetically generated information”. Intermediaries are required to:
- Identify and act against patently false or misleading content when reported.
- Label or embed identifiers on AI-generated media as per future rules.
- Remove such content within the prescribed timelines once notified.
If your complaint involves morphed videos, AI-generated nude images or impersonation, your advocate can specifically refer to these obligations while sending notices to the platform.
Online gaming
Promotion and Regulation of Online Gaming Act, 2025
The Promotion and Regulation of Online Gaming Act, 2025 has introduced a nationwide ban on online money games (real-money gaming) while regulating e-sports and social games. For victims, this means:
- Platforms running money-based fantasy leagues, betting or casino-style games may be acting illegally.
- Advertising and promotion of such games can also attract penalties.
- Your complaint can target not just the fraudster, but also the unlawful platform facilitating the game.
Enforcement & investigation
Stronger cyber-crime infrastructure and specialised training
The Indian Cyber Crime Coordination Centre (I4C) is expanding coordination among States for cross-border scams. Police across India are being trained in digital forensics, AI-based threat investigation and financial-fraud tracking.
While filing your complaint, you are within your rights to request that modern digital-forensics tools and inter-state coordination be used, especially for organised scam call centres or large online fraud networks.
5. Why involve an advocate in a cyber complaint?
Cyber complaints often cut across criminal law, banking rules, data protection and platform policies. An experienced advocate can:
- Draft a complaint that clearly brings your case within the right offences under the IT Act, IPC and other laws.
- Send legal notices to banks, payment gateways, telecom operators and platforms to preserve logs and CCTV, freeze funds and share information.
- Assist in communications with the Investigating Officer so that key lines of inquiry are not missed.
- Advise on parallel remedies – consumer complaint, DPDP proceedings, civil suit for damages, or writ petition in High Court in appropriate cases.
Practical strategy For sizeable financial loss or serious reputational harm, a combined strategy works best: bank complaint + 1930 + online portal + FIR + legal notices + civil/DPDP action where applicable.
6. Quick FAQs
Q. Can I file a cyber complaint if I do not know who cheated me?
Yes. Most cyber crimes are committed by unknown persons using fake numbers/accounts. Give all available technical details – phone numbers, UPI IDs, links, timestamps – and the police can seek information from banks, telecom companies and platforms.
Q. Is it necessary to file both online complaint and FIR?
For minor issues, sometimes the online complaint and platform-level action may be enough. For serious offences (threats, sexual crimes, high-value fraud, organised racket), you should insist on an FIR so that a formal investigation with search, seizure and arrests can take place.
Q. I am worried about my identity being disclosed. What can I do?
In cases involving sexual offences, child abuse or sensitive privacy issues, the law protects the confidentiality of the victim’s identity. You may use the dedicated women/children option on the cyber portal and discuss additional protective measures with your advocate.
Q. How long will it take to get my money back?
There is no fixed timeline – recovery depends on how quickly you reported, whether the funds could be frozen, and cooperation from banks and intermediaries. However, early reporting and a legally backed follow-up give you the best chance of recovery.
Need help with a cyber crime complaint?
Get your case evaluated, complaint drafted and a clear action-plan prepared by Adv. Tarun Choudhury. Focus on your safety while the legal and procedural work is handled professionally.
Call: 98912 44487 Send case details on WhatsApp
Disclaimer: This article is for general information for cases arising in India as of November 2025. It does not create a lawyer-client relationship. Please seek specific legal advice for your facts.
Ideal next steps
- Make a list of all suspicious calls, messages, IDs and amounts involved.
- Take clear screenshots and export your bank statement for the relevant period.
- Call 1930 (for financial fraud) and file a complaint on cybercrime.gov.in.
- Then contact Adv. Tarun Choudhury – 98912 44487 with your reference numbers and evidence bundle.
Checklist
Before you call 1930
- Exact time and amount of the fraudulent transaction.
- Last four digits of the account/card used.
- Transaction reference / UPI ID / UTR number.
- Screenshots of SMS/WhatsApp/links that led to the fraud.
Legal tip
What if police refuse to register FIR?
If your written complaint is not converted into an FIR, you can:
- Send a written complaint to the Superintendent of Police with proof of earlier approach.
- Move an application under Section 156(3) CrPC before the Magistrate.
- In appropriate cases, approach the High Court under Articles 226/227 of the Constitution.
For women & children
Special protections
For offences like sexual harassment, child pornography, sextortion or threats to leak intimate images:
- You may file through the dedicated women/child section of the portal (with option to report anonymously).
- The law prohibits publishing your identity in any media.
- Courts often conduct in-camera proceedings in sensitive matters.
Strategy
When to definitely hire a lawyer
- Fraud or loss above ₹50,000.
- Repeated harassment, stalking or threats to physical safety.
- Deepfake / intimate image cases impacting reputation and career.
- Organised scams, call-centre type operations or cross-border elements.
The sooner a lawyer comes in, the easier it is to shape the investigation and preserve crucial evidence.
