Cyber & Technology Law

How to Report Cyber Crime in India: A Step-by-Step Guide

By Advocate Sharan Jain  · 

How to Report Cyber Crime in India: A Step-by-Step Guide

To report a cyber crime in India, call the national cyber crime helpline 1930 immediately (especially for online financial fraud, where speed can freeze the money), and file a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. For serious offences you can also go to your nearest police station or cyber cell and have an FIR registered. Throughout, preserve all evidence — screenshots, transaction IDs, messages and call records — because that record is what allows the investigation to proceed.

Knowing how to report cyber crime in India quickly matters more than most victims realise. In digital fraud, the stolen amount often moves through several "mule" accounts within minutes. The faster you report, the better the chance the bank and police can place a hold before the money is withdrawn. This guide walks through each channel, the law behind it, and the practical steps to protect yourself.

This is general legal information for educational purposes, not legal advice. Cyber crime law in India changed substantially with the new criminal codes in 2023-24; always verify the current section numbers and procedure with a qualified advocate before acting.

What counts as a cyber crime in India?

"Cyber crime" is an umbrella term for offences committed using a computer, the internet, a phone or any electronic device. Common categories include:

  • Online financial fraud — UPI scams, fake payment links, phishing, card cloning, OTP fraud, fraudulent loan apps.
  • Identity theft and impersonation — fake social media profiles, misuse of Aadhaar/PAN, email account takeover.
  • Cyber harassment and stalking — abusive messages, threats, doxxing, online stalking.
  • Image-based and sexual offences — non-consensual sharing of intimate images, child sexual abuse material (CSAM), "sextortion".
  • Hacking and data theft — unauthorised access to accounts, ransomware, leaking confidential data.

The two main bodies of law are the Information Technology Act, 2000 (IT Act) and India's general penal law. As of 2023-24 the Indian Penal Code (IPC) was replaced by the Bharatiya Nyaya Sanhita, 2023 (BNS), and the Code of Criminal Procedure (CrPC) was replaced by the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS). So many older articles still cite IPC sections (for example, cheating under IPC 420). The equivalent now sits in the BNS, and procedure (FIR, investigation) now follows the BNSS. Because the transition is recent, always verify the current section number for your specific offence rather than relying on a number you read online.

The fastest channel: the 1930 helpline

For any online financial fraud, dial 1930 — the national cyber crime helpline operated under the Indian Cyber Crime Coordination Centre (I4C). It is connected to the Citizen Financial Cyber Fraud Reporting and Management System, which lets banks and payment intermediaries act fast to try to freeze the disputed funds.

When you call 1930, keep ready:

  • Your bank account or card details linked to the fraud.
  • The transaction ID, UPI reference number, date and amount.
  • The number, email or link the fraudster used.

The operator logs a complaint and triggers alerts to the relevant banks. The earlier you call — ideally within the first hour — the higher the chance of a hold. This is sometimes called the "golden hour" of fraud reporting.

Reporting online: cybercrime.gov.in

The National Cyber Crime Reporting Portal — cybercrime.gov.in — is the central online channel run by the Ministry of Home Affairs. You can use it from anywhere in India, which is useful because cyber crime often crosses district and state lines.

The portal has two main reporting tracks:

  1. Report Women/Child Related Crime — for online sexual offences, including CSAM and non-consensual intimate images. This track allows anonymous reporting.
  2. Report Other Cybercrime — for financial fraud, hacking, identity theft, harassment and the rest. This usually requires registration with your mobile number (OTP-verified).

Step-by-step on the portal

StepWhat you doWhat to keep ready
1Go to cybercrime.gov.in and choose the correct reporting categoryDecide: women/child track or "other cybercrime"
2Register / log in with your mobile number and OTPActive mobile number
3Fill in the incident details — date, time, platform, how it happenedA short written account of events
4Upload supporting evidenceScreenshots, transaction proof, chat logs, emails
5Add suspect details if knownPhone number, UPI ID, profile link, account number
6Submit and note the acknowledgement numberSave the complaint/acknowledgement ID
7Track status under "Track your complaint"The acknowledgement ID

The acknowledgement number is important: it is how you follow up, and it is the reference your local cyber cell uses when they pick up the matter.

When and how to file an FIR

For serious cyber offences — significant financial loss, sextortion, threats to life, large-scale data theft — you may need a First Information Report (FIR) registered at a police station. An online portal complaint is a complaint; an FIR formally sets the criminal investigation in motion.

Key points on FIRs for cyber crime:

  • You can approach any police station. Because cyber offences are often committed remotely, the "zero FIR" concept lets a station register the FIR even if the crime technically occurred in another jurisdiction, then transfer it to the correct one. Verify the current zero-FIR provision under the BNSS with an advocate.
  • Many cities have a dedicated Cyber Crime Police Station / cyber cell (Bengaluru has the CEN — Crime, Economic offences and Narcotics — police stations). For technical offences, going directly to the cyber cell can help.
  • For a cognizable offence, the police are generally obliged to register an FIR. If a police station refuses, you can escalate in writing to the Superintendent of Police / Commissioner, and there are remedies before a Magistrate. Discuss the current procedure with a lawyer.

If you are unsure whether your situation needs an FIR or just a portal complaint, that is exactly the kind of question our team handles. See our cyber crime law practice page for how we assist.

Preserving evidence: the part most people get wrong

In cyber matters, the evidence is digital and easy to lose. Do not delete anything, and do not "test" the fraudster's link again. Instead, capture and preserve:

  • Screenshots of messages, profiles, emails, payment screens and error pages — with visible date/time where possible.
  • Transaction records: UPI reference numbers, bank statements, card statements, payment-app history.
  • Communication logs: call history, SMS, WhatsApp/Telegram chats (export the chat).
  • URLs and identifiers: the exact website link, sender email address, phone number, social-media handle, account/UPI ID.
  • Device details: which device, which app, what time the incident happened.

Electronic records are admissible in Indian courts, but their admissibility depends on meeting the statutory conditions for electronic evidence (historically section 65B of the Evidence Act; the law of evidence was recast as the Bharatiya Sakshya Adhiniyam, 2023, so confirm the equivalent provision and the certificate requirement with an advocate). Keep originals where you can — do not only keep screenshots if you can also preserve the source.

Reporting channels compared

ChannelBest forSpeedAnonymous?Leads to FIR?
1930 helplineOnline financial fraud (money just lost)Fastest — aims to freeze fundsNoNot directly
cybercrime.gov.inAll cyber crime; women/child offencesFast, online, nationwideYes (women/child track)Can be escalated
Cyber cell / police station (FIR)Serious offences, threats, large lossesSlower but formalNoYes
Bank / payment appDisputing the transaction itselfImmediateNoNo

A practical approach for financial fraud: call 1930 and inform your bank first, then file on cybercrime.gov.in, and escalate to an FIR if needed. These steps are complementary, not alternatives.

Relevant law: IT Act and BNS

A non-exhaustive map of the law (verify current numbering before relying on it):

  • IT Act, 2000 — covers offences such as identity theft, cheating by personation using a computer, violation of privacy (capturing/sharing private images), and publishing or transmitting obscene or sexually explicit material electronically. Sections include 43, 66, 66C, 66D, 66E, 67, 67A and 67B; section 79 deals with intermediary liability.
  • BNS, 2023 (replacing IPC) — general offences that apply to cyber conduct, such as cheating, criminal breach of trust, forgery, criminal intimidation, stalking and defamation. Because numbering changed from IPC, an advocate should confirm the exact BNS section for your facts.
  • BNSS, 2023 (replacing CrPC) — procedure for FIR, investigation and trial.
  • Bharatiya Sakshya Adhiniyam, 2023 (replacing the Evidence Act) — admissibility of electronic records.

You can read the IT Act, 2000 on the Government of India's official statute database, India Code: India Code — Information Technology Act, 2000.

How long do you have, and what happens next?

There is no single deadline to "report", but for financial fraud the practical clock is minutes to hours. For criminal prosecution, limitation periods can apply to certain offences — and those rules sit in the procedural code, which has changed. Verify any limitation point with an advocate.

After you report, the investigating officer may ask for a written statement, your evidence, and bank cooperation. Cooperate, keep copies of everything you submit, and keep noting reference numbers. Recovery of money is never guaranteed and depends heavily on how quickly the fraud was flagged. If the matter also affects a family or matrimonial dispute, our guide on how to file for divorce in India may be a useful starting point on the civil side.

Frequently Asked Questions

What is the fastest way to report online financial fraud in India?

Call the cyber crime helpline 1930 immediately and inform your bank. 1930 is linked to a system that can alert banks to try to freeze the disputed funds, so reporting within the first hour gives the best chance of a hold.

Can I report a cyber crime online without going to a police station?

Yes. You can file a complaint on the National Cyber Crime Reporting Portal, cybercrime.gov.in, from anywhere in India. For serious offences you may still need to have an FIR registered, which the portal complaint can be escalated into.

Can I report a cyber crime anonymously?

The "Report Women/Child Related Crime" track on cybercrime.gov.in allows anonymous reporting for online sexual offences, including child sexual abuse material. Most other cyber crime reporting requires mobile-number verification.

Is an online portal complaint the same as an FIR?

No. A portal complaint registers your grievance and routes it to the cyber cell. An FIR formally begins a criminal investigation under the procedural code. For serious offences an FIR is usually needed, and you can approach any police station to register one.

What evidence should I keep for a cyber crime complaint?

Preserve screenshots, transaction IDs and bank statements, chat and call logs, the exact URLs or phone numbers used, and device details. Do not delete anything or click suspicious links again. Electronic evidence must meet statutory conditions to be admissible, so keep source records, not just screenshots.

Which laws apply to cyber crime in India?

Mainly the Information Technology Act, 2000, alongside the Bharatiya Nyaya Sanhita, 2023 (which replaced the IPC). Procedure follows the Bharatiya Nagarik Suraksha Sanhita, 2023 (which replaced the CrPC). Because the codes were recently renumbered, verify the exact section for your situation.

The police refused to register my FIR for a cyber crime. What can I do?

For a cognizable offence the police are generally expected to register an FIR. If a station refuses, you can escalate in writing to the senior police officer (SP or Commissioner) and there are remedies before a Magistrate. Speak to an advocate about the current procedure, as it changed under the BNSS.

This article is for general informational purposes only and does not constitute legal advice. Laws change and every situation is different; please consult a qualified advocate about your specific matter.

The golden hour: 1930

For online financial fraud, call the national helpline 1930 first — ideally within the first hour — so banks can try to freeze the disputed funds before they are withdrawn.

Report on cybercrime.gov.in

The national portal works from anywhere in India. The women/child track allows anonymous reporting; other cyber crime needs OTP-verified registration.

FIR for serious cases

A portal complaint is not an FIR. For large losses, threats or sextortion, get an FIR registered — any station can register a "zero FIR" and transfer it.

Preserve the evidence

Keep screenshots, transaction IDs, chat and call logs, exact URLs and numbers, and device details. Do not delete anything or re-click the fraudster's link.

Electronic evidence rules

Digital records are admissible only if statutory conditions are met (historically s.65B Evidence Act, now the Bharatiya Sakshya Adhiniyam, 2023) — keep source records, not just screenshots.

The governing law

The IT Act 2000 plus the BNS 2023 (was IPC); procedure follows the BNSS 2023 (was CrPC). Verify the current section for your specific offence.

Related Legal Services

Dealing with a matter like this? Our Bangalore advocates can help. Explore the relevant practice areas:

SJ

About the Author

Advocate Sharan Jain

Advocate based in Bangalore, practising before the Karnataka High Court and District, Sessions, Consumer and Family courts. Writes on civil, criminal, corporate, family and constitutional law to make Indian law more accessible.

Related Articles

S Jain & Attorneys · Legal Consultation

Have a Legal Question? We're Here to Help.

Our experienced lawyers in Bangalore offer confidential consultations tailored to your specific legal needs.

All matters handled with complete confidentiality and legal discretion.