Cyber Crime Laws and How to File a Complaint in Telangana

Cyber crime has become one of the fastest-growing categories of crime in India. From UPI fraud and phishing calls to cyberstalking and hacking, the digital ecosystem creates new vulnerabilities every day. Telangana — and Hyderabad in particular — has a well-developed infrastructure for dealing with cyber crime complaints. Yet most victims either do not know how to file a complaint, or delay doing so until critical evidence is lost.

This guide explains the key cyber crimes under Indian law, how to file a complaint in Telangana, and what you must do to preserve your evidence and maximise the chances of a successful investigation.

Common Cyber Crimes

Financial Fraud

Online financial fraud is the most frequently reported cyber crime in India. This includes:

• UPI and banking fraud — where victims are tricked into sharing OTPs or authorising reverse payment requests
• Investment scams — fake trading platforms, crypto fraud, stock tip scams promising guaranteed returns
• Loan app fraud — predatory apps that access contacts and photos and then extort victims
• KYC update scams — impersonating bank officials or TRAI/RBI representatives to extract banking credentials

Identity Theft and Phishing

Identity theft (Section 66C of the IT Act) involves fraudulently using another person's electronic signature, password, or unique identification feature. Phishing involves creating fake websites or emails that mimic legitimate institutions to harvest credentials. Both offences are cognizable under Indian law.

Hacking and Unauthorised Access

Section 43 of the Information Technology Act, 2000 creates civil liability for anyone who accesses a computer system without permission, downloads data, introduces viruses, or disrupts a computer network. Where the act is done dishonestly or fraudulently, Section 66 IT Act elevates this to a criminal offence punishable with up to three years imprisonment or a fine of up to five lakh rupees, or both.

Cyberstalking and Online Harassment

Section 77B of the IT Act (read with BNS provisions) and Section 78 BNS cover stalking through electronic means. Sending repeated unwanted messages, tracking someone's location through an app, threatening someone through social media, or sharing private images without consent (non-consensual intimate image abuse) are all criminal offences under Indian law.

Offensive and Obscene Content

Section 67 of the IT Act punishes publishing or transmitting obscene material in electronic form. Section 67A covers sexually explicit content, and Section 67B specifically addresses child sexual abuse material (CSAM) — which carries heavy penalties including imprisonment of up to seven years on first conviction.

Social Media Offences

Impersonating someone on social media (Section 66D IT Act — cheating by impersonation using a computer), defamation through posts, and inciting violence or communal hatred through online content all fall within the ambit of Indian cyber law and the BNS.

Note on Section 66A

It is important to note that Section 66A of the IT Act, which criminalised sending "offensive" messages online, was struck down as unconstitutional by the Supreme Court in Shreya Singhal v. Union of India (2015). Any complaint or prosecution under Section 66A is invalid. If you have received a notice citing Section 66A, it should be legally challenged.

Applicable Laws

The principal legal framework for cyber crimes in India includes:

• Information Technology Act, 2000 — Sections 43, 66, 66B, 66C, 66D, 66E, 67, 67A, 67B, 72, 72A
• Bharatiya Nyaya Sanhita, 2023 (BNS) — cheating (Sections 318-319), criminal intimidation (Section 351), defamation (Section 356), identity-related fraud, and cyberstalking (Section 78)
• Bharatiya Sakshya Adhiniyam, 2023 — governs admissibility of electronic evidence, including requirements for Section 63 certificates authenticating electronic records

How to File a Cyber Crime Complaint Online

The simplest and fastest method for reporting cyber crime is through the National Cyber Crime Reporting Portal at cybercrime.gov.in, operated by the Ministry of Home Affairs.

Step 1 — Visit cybercrime.gov.in

The portal has two categories: - Women and Child-Related Crimes (anonymous reporting available for sensitive matters) - Other Cyber Crimes (requires registration)

Step 2 — Register and Log In

Create an account using your mobile number and OTP. Once logged in, click "File a Complaint" and select the relevant category.

Step 3 — Fill the Complaint Form

Provide: - Your personal details - Details of the accused (if known) — name, phone number, email, account details - Description of the incident — what happened, when, and how - Financial details if money was lost — amount, transaction IDs, bank account details, UPI IDs

Step 4 — Upload Supporting Evidence

Attach screenshots, transaction records, emails, URLs, and any other digital evidence. The more specific and well-documented your complaint, the easier it is for the cyber crime unit to act on it.

Step 5 — Submit and Note the Complaint Number

After submission, you will receive a complaint number. Save it. This number is your reference for tracking and follow-up.

The portal routes the complaint to the State Cyber Crime unit, which in Telangana is the Telangana Cyber Security Bureau (TGSB).

Filing a Complaint at Telangana Cyber Crime Police Station

For direct, in-person complaints — which are particularly useful for serious financial frauds, cyberstalking, or cases where immediate action is required — you can approach:

Telangana Cyber Security Bureau (TGSB) CID Campus, Lakdi-Ka-Pool, Hyderabad — 500004 Phone: 1930 (Cyber Crime Helpline — 24x7)

The 1930 helpline is specifically for financial cyber fraud and is particularly effective in the initial hours after a fraud occurs. Banks are integrated with this system and can sometimes freeze fraudulent transactions if reported immediately.

You can also file a cyber crime complaint at your nearest police station (any police station is obligated to accept an FIR or a complaint and forward it to the cyber crime unit), or directly before the Magistrate if the police decline to act.

Evidence — What to Collect and Preserve

The success of a cyber crime investigation depends almost entirely on the quality of evidence provided. Here is what to preserve:

• Screenshots of all relevant messages, posts, transactions, and websites — with the URL and timestamp visible
• Transaction records — UTR numbers, UPI transaction IDs, bank statements showing the debit
• Email headers — not just the email body, but the full header (available in most email clients under "View Source" or "Show Original") — this reveals the sender's actual server information
• URLs — copy the exact URL of the fraudulent website or profile
• Call logs — for vishing (voice phishing) attacks, save the number and time of the call
• Chat records — export the chat history (WhatsApp, Telegram, etc.) and store it separately
• Device information — note the device, browser, and platform used at the time of the incident

Critical Dos

• Do not delete any messages or communications — even if they seem embarrassing or incriminating to you. Deleting evidence, even unintentionally, can severely hamper the investigation.
• Note the exact timestamp of every incident. Courts and investigators rely on precise timestamps to establish the sequence of events.
• Act immediately — especially in financial fraud cases. The sooner you call 1930, the higher the chance of freezing the money before it is withdrawn.
• File a complaint with your bank simultaneously if money has been lost — most banks have a fraud reporting process and are required to assist.
• Keep a written record of all complaint numbers, officer names, and follow-up communications.

Jurisdiction and Limitation Issues

Cyber crimes often cross state and national boundaries. Indian courts have taken a broad view of territorial jurisdiction in cyber crime cases — if any part of the offence occurred in India, or if the victim is in India, Indian courts have jurisdiction. Within India, the complaint can be filed in the state where the victim is located, even if the accused is elsewhere.

There is no specific limitation period for filing an FIR, but civil remedies under the IT Act (such as applications to the Adjudicating Officer for compensation under Section 43) must generally be filed within five years of the cause of action.

Investigation Process

Once your complaint is registered, the cyber crime unit will:

• Analyse the digital evidence you have provided
• Send legal process requests to platforms (Google, Meta, WhatsApp, etc.) for user data
• Coordinate with banks to trace and potentially freeze fraudulent transactions
• Issue notices to the accused if identified, and make arrests in appropriate cases

Investigations can take weeks to months depending on the complexity and whether the accused is traceable.

When to Approach Civil Courts

Not every cyber dispute requires criminal action. In some cases — particularly for businesses facing defamation through online posts, trademark infringement, or data theft — civil remedies may be more appropriate or more immediately effective:

• Injunction from the District Court to take down defamatory content or prevent further publication
• Application to the Adjudicating Officer under the IT Act for compensation for data loss or privacy breach
• John Doe orders (Ashok Kumar orders) — where the identity of the online infringer is unknown, courts can issue orders against unknown parties and require platforms to reveal user identities

Closing Thoughts

Cyber crime is not a victimless or technical offence — it causes real financial loss, reputational damage, and emotional distress. The legal framework in India is substantially developed, and Telangana's Cyber Security Bureau is among the better-equipped units in the country. But the law can only help you if you act quickly, preserve your evidence properly, and file a well-documented complaint. If you have been a victim of cyber crime — or if someone has filed a cyber crime complaint against you — engage a lawyer familiar with both the IT Act and the BNSS to navigate the process effectively.