Cyber Law in Bengaluru: Understanding Cyber Crime, Online Fraud and Your Legal Remedies

Bengaluru is India’s technology capital, so its residents, startups and businesses face a high volume of digital risk. Phishing, UPI scams, loan app harassment, account takeovers and data theft are now everyday legal problems. This article explains the legal framework on cyber crime, online fraud, identity theft and digital evidence, so that readers can understand their rights and options.

What Is Cyber Crime Under Indian Law?

Cyber crime means an unlawful act committed using a computer, mobile device, network or internet service, or targeting one. In India, such offences are mainly addressed under:

• The Information Technology Act, 2000 (IT Act), the principal law on electronic records, hacking, data theft and online impersonation

• The Bharatiya Nyaya Sanhita, 2023 (BNS), which covers cheating, forgery, criminal intimidation and related offences

• The Bharatiya Sakshya Adhiniyam, 2023 (BSA), which governs the admissibility of electronic evidence

A matter involving a cyber crime lawyer in Bengaluru, a cyber law firm or an IT Act lawyer usually involves provisions from more than one of these statutes.

Key Provisions of the IT Act

Some commonly invoked provisions are:

• Section 43 and Section 66: unauthorised access, data theft, introducing malware, and damage to computer systems. Section 43 provides for compensation, and Section 66 applies where the act is dishonest or fraudulent.

• Section 66C: identity theft, meaning fraudulent or dishonest use of another person’s password, electronic signature or unique identification feature.

• Section 66D: cheating by personation using a computer resource, common in phishing and fake customer-care frauds.

• Section 66E: violation of privacy by capturing or publishing private images without consent.

• Sections 67, 67A and 67B: publishing or transmitting obscene or sexually explicit material, with stricter provisions where children are involved.

• Section 72: breach of confidentiality and privacy by persons with lawful access to information.

Penalties vary by section and can include imprisonment, fines or both. Whether an offence is cognizable or bailable depends on the specific provision invoked.

Online Fraud and Cyber Fraud: Common Patterns

Cyber fraud and online fraud take many forms. The patterns most often reported include:

1. Phishing and vishing: fake links, messages or calls that trick a person into sharing OTPs, card details or banking credentials.

2. UPI and payment fraud: collect-request scams, QR code scams and SIM-swap attacks.

3. Investment and job scams: fake trading platforms, task-based work offers and cryptocurrency schemes.

4. Business email compromise: spoofed vendor or executive emails used to redirect payments.

5. Loan app harassment: unauthorised access to contacts and photos, followed by threats or defamation.

Depending on the facts, these may attract Section 66D of the IT Act together with BNS provisions on cheating (such as Sections 318 and 319), criminal intimidation or forgery.

Identity Theft: What the Law Says

Identity theft occurs when someone uses another person’s personal information, such as Aadhaar details, PAN, bank credentials or social media accounts, to commit fraud or cause harm. Section 66C of the IT Act deals specifically with this, and Section 66D covers impersonation to cheat. Victims may also have remedies such as:

• Having fraudulent accounts or content removed by the intermediary under the IT Rules

• Seeking compensation under Section 43 of the IT Act

• Pursuing civil remedies such as injunctions where reputation or privacy is affected

Digital Evidence: Why It Decides Cases

Cyber matters often turn on how electronic evidence is preserved and presented. Under the Bharatiya Sakshya Adhiniyam, 2023, electronic records are admissible as documents, subject to the conditions in Section 63, which includes a certificate requirement. This replaces the earlier Section 65B of the Indian Evidence Act, 1872. Practical points that matter:

• Preserve originals. Do not delete messages, emails, call logs or transaction alerts. Screenshots alone may not be enough.

• Record metadata. Dates, times, URLs, sender addresses and transaction IDs help establish authenticity.

• Maintain a chain of custody. Note who handled a device or file, and when.

• Obtain the required certificate. Admissibility often depends on proper certification of the electronic record.

• Act quickly. Service providers retain logs for limited periods, so delay can mean lost evidence.

Improper handling of digital evidence can weaken an otherwise valid claim or defence.

Reporting a Cyber Crime in Bengaluru

If you are a victim of online fraud or cyber crime, the general steps are:

1. Report financial fraud immediately on the national helpline 1930, or through the National Cyber Crime Reporting Portal (cybercrime.gov.in). Prompt reporting improves the chance of freezing transferred funds.

2. Inform your bank or payment provider right away and request that the account or card be blocked.

3. File a complaint with the cyber crime police in Bengaluru, or the jurisdictional police station, and ask for a copy of the FIR or acknowledgement.

4. Secure your accounts by changing passwords, enabling two-factor authentication and checking linked devices.

5. Keep all records of communication, receipts and screenshots in an organised manner.

Under the IT Act, certain offences are investigated by officers of a prescribed rank, so the complaint should be routed to the appropriate authority.

Rights of Accused Persons in Cyber Cases

Not everyone involved in a cyber matter is a victim. People are sometimes named as accused because their bank account was used as a “mule” account, their device was compromised, or they were wrongly identified. Every accused person has constitutional and procedural rights, including the right to be informed of the grounds of arrest, the right to consult an advocate, the right to be produced before a magistrate, and the right to seek bail as the law permits. Anyone who receives a notice or summons should respond in a lawful and timely manner.

Businesses and Startups: Compliance Matters

Companies in Bengaluru handle large amounts of personal and commercial data. Beyond the IT Act, businesses should be aware of:

• The Digital Personal Data Protection Act, 2023, which sets obligations for handling personal data

• Reasonable security practices under Section 43A of the IT Act and its rules, wherever applicable

• Incident reporting requirements to CERT-In for specified cyber security incidents

• Internal policies on access control, employee training and vendor management

Preparing an incident-response plan before a breach occurs is generally more effective than reacting afterwards.

Choosing Legal Assistance Responsibly

Cyber law is technical, and early legal guidance on notices, complaints, evidence and procedure can help people avoid costly missteps. Whether someone consults a cyber lawyer, a cyber crime advocate or a law firm, they should verify that the person is enrolled with a State Bar Council and ask for clarity on the scope of the engagement. Under the Bar Council of India Rules, advocates must maintain the dignity of the profession and may not solicit work, so any outreach should come from the person seeking advice and not from the advocate.

Conclusion

Cyber crime, online fraud and identity theft are growing legal challenges in Bengaluru, and the law provides remedies under the IT Act, the BNS and the BSA. Preserving digital evidence, reporting promptly and understanding the applicable provisions are the most important steps for anyone affected. This article is meant to inform, and each situation should be assessed on its own facts.