Cyber Law in Kolkata: Understanding Cyber Crime, Online Fraud and Your Legal Rights

Kolkata’s rapid digital growth, from UPI payments and online banking to remote work and social media, has brought a matching rise in technology-related offences. Phishing messages, fake investment apps, SIM-swap scams and misuse of personal data are now common. This article explains the legal framework for cyber crime in India, the remedies available, and why digital evidence matters. It is general information only.

What Is Cyber Crime?

Cyber crime means any unlawful act committed using a computer, mobile device, network or the internet, or directed at them. In India it is mainly governed by the Information Technology Act, 2000 (IT Act), read with the Bharatiya Nyaya Sanhita, 2023 (BNS).

Common categories include:

• Phishing, vishing and fraudulent payment links

• Unauthorised access to accounts, devices or networks

• Data theft and misuse of personal information

• Cyberstalking, online harassment and circulation of obscene content

• Fake websites, loan apps and investment schemes

• Ransomware and malware attacks

Key Provisions of the IT Act

The IT Act, as amended in 2008, defines offences and penalties. Provisions often discussed in connection with online offences include:

• Section 43 and Section 66: Unauthorised access to a computer system, data theft, introducing malware, or damaging data, where the act is done dishonestly or fraudulently.

• Section 66C: Punishment for identity theft, such as fraudulently using another person’s password, electronic signature or unique identification feature.

• Section 66D: Cheating by personation using a computer resource or communication device.

• Section 66E: Violation of privacy through capturing or publishing private images.

• Section 67 and related sections: Publishing or transmitting obscene material electronically.

• Section 72: Breach of confidentiality and privacy by persons with powers under the Act.

Many incidents also attract provisions of the BNS, such as those on cheating, cheating by personation, forgery and criminal intimidation. The Digital Personal Data Protection Act, 2023 adds a framework for the processing of personal data.

Online Fraud and Identity Theft

Online fraud typically involves deceiving a person into parting with money or information. Frequent patterns include:

1. Phishing and fake KYC calls that trick people into sharing OTPs or card details.

2. Fake customer care numbers published online.

3. QR code and “collect request” scams on payment platforms.

4. Investment and task-based scams promising unrealistic returns.

5. SIM swap fraud, where a fraudster takes control of a victim’s mobile number.

Identity theft often underlies these frauds. Stolen credentials may be used to open accounts, take loans or impersonate someone online. Victims may face financial loss, damage to credit records and distress. Acting quickly improves the chances of limiting the damage.

Immediate Steps if You Are a Victim

Practical steps recommended for victims of cyber fraud in India include:

1. Report to your bank or wallet provider immediately to block cards, freeze accounts or flag the transaction. Prompt reporting is important under RBI guidance on customer liability in unauthorised electronic transactions.

2. Call the National Cyber Crime Helpline 1930 and file a complaint on cybercrime.gov.in, the national reporting portal.

3. Approach the local police or the cyber crime police station. In Kolkata, cyber crime complaints are handled by the Kolkata Police cyber crime wing.

4. Do not delete anything. Preserve messages, emails, screenshots, call logs and transaction records.

5. Change passwords and enable two-factor authentication on all affected accounts.

6. Consider independent legal advice on the remedies suited to your situation.

The Role of Digital Evidence

Digital evidence is often central to a cyber case, and its admissibility depends on proper handling. Under the Bharatiya Sakshya Adhiniyam, 2023, which replaced the Indian Evidence Act, electronic records are admissible subject to the conditions in Section 63, including a certificate identifying the record and the device from which it was produced. This corresponds to Section 65B of the earlier law. The Supreme Court has repeatedly stressed that the certificate requirement is mandatory for secondary electronic evidence.

Good practice for preserving digital evidence includes:

• Keeping original devices unaltered where possible

• Saving emails with full headers and metadata

• Recording URLs, dates, times and account identifiers

• Retaining bank statements and SMS alerts

• Avoiding editing or forwarding files in ways that change metadata

Poorly preserved evidence can weaken a complaint or defence, so the integrity of the record matters from the start.

Procedure and Jurisdiction

A cyber crime complaint generally begins with a report to the police or the national portal, followed by registration of an FIR where a cognizable offence is disclosed. Investigation may involve requests to banks, telecom providers and intermediaries, forensic examination of devices and, in appropriate cases, coordination across states because offenders are often located elsewhere. Section 75 of the IT Act also gives it extra-territorial reach in certain circumstances.

Depending on the facts, remedies may include criminal proceedings, recovery or refund mechanisms through banks and regulators, adjudication under the IT Act for compensation claims, and takedown requests to intermediaries under the applicable rules.

Why Early Legal Understanding Helps

Cyber matters are time-sensitive. Transaction trails, server logs and platform data may be retained only for limited periods. Understanding the provisions involved, such as the IT Act, the BNS and the evidence law, helps complainants and accused persons alike to respond properly. Accused persons are equally entitled to a fair process, including the presumption of innocence and the right to legal representation.

Staying Safe Online

• Never share OTPs, PINs or passwords with anyone.

• Verify customer care numbers from official websites only.

• Be cautious of unsolicited links, attachments and “urgent” messages.

• Use strong, unique passwords and enable two-factor authentication.

• Keep devices and apps updated.

• Review bank and account statements regularly.

Conclusion

Cyber crime, online fraud and identity theft are now part of everyday life in Kolkata, as in the rest of India. Awareness of the IT Act, prompt reporting and careful preservation of digital evidence are the most effective protections. Knowing your rights and the available procedures helps you respond calmly and lawfully.