Facing online fraud, hacking, identity theft, cryptocurrency disputes, cyber harassment or IT Act proceedings? Get discreet, strategic legal guidance focused on protecting your rights and responding fast.
Cyber law explained
Cyber incidents are not a single category of case. The facts, evidence and remedy may involve technology law, criminal law, privacy obligations and civil recovery—often at the same time.
The starting point
Cyber crime broadly describes unlawful conduct where a computer, network, device or digital data is the target, tool or setting of the wrongdoing. It can range from unauthorised access and identity misuse to online cheating, threats, data theft and harmful digital content.
Two legal routes
The Information Technology Act, 2000 addresses conduct involving computers, data and electronic systems. A digital act may also amount to a traditional criminal offence under the Bharatiya Nyaya Sanhita, 2023—such as cheating, forgery, intimidation or theft—depending on the facts.
Remedy matters
Focuses on investigation, prosecution and penal consequences.
May concern compensation, injunctions, contractual loss, data-handling duties or platform obligations.
At a glance
Initial classification helps determine the right evidence, forum and urgent next step. Every matter depends on its own facts.
Unauthorised transfers, phishing and payment deception.
Unauthorised access, account takeover or system interference.
Misuse, extraction or exposure of confidential data.
Impersonation, forged profiles and credential abuse.
Harassment, extortion and abusive digital communications.
Why acting early matters
Preserve screenshots, transaction details, emails, links, device information and complaint acknowledgements. Avoid deleting relevant material. Early legal advice can help identify reporting, preservation and recovery options appropriate to your situation.
The legal framework
Addresses several contraventions and offences connected with computers, electronic records, data and digital systems.
May apply where cyber conduct also involves offences such as cheating, forgery, extortion, intimidation or other criminal wrongdoing.
Provides the evidentiary framework relevant to electronic and digital records in court proceedings.
Sets out a framework for processing digital personal data, with phased commencement provisions; its application depends on the relevant provision and facts.
General educational information only; it is not legal advice. Legal outcomes depend on the facts, evidence and applicable law.
Practice areas
Whether you are a victim seeking urgent action or facing a cyber allegation, the right response begins with understanding what happened, preserving evidence and choosing the appropriate legal route.
Unauthorised transfers, net-banking compromise and deceptive transaction requests.
Fraudulent collect requests, QR-code scams and unauthorised UPI payments.
Misuse of card credentials, unauthorised spends and payment-card impersonation.
Misuse of personal credentials, documents or identity to obtain a benefit.
Unauthorised access, loss of control or misuse of social media accounts.
Impersonation, account takeovers and fraudulent messages sent in your name.
Fake profiles, impersonation, compromised accounts and fraudulent promotions.
Impersonation, marketplace scams and abuse of Facebook-linked identities.
Forged sender identities and misleading emails designed to look genuine.
Deceptive business emails, invoice diversion and payment redirection fraud.
Unauthorised extraction, copying or disclosure of confidential business data.
Misuse of employer, customer or colleague information by insiders.
Unauthorised website access, defacement, sabotage or data compromise.
System or data encryption paired with a demand for payment or access.
Deceptive links, messages or webpages intended to steal data or money.
False trading, investment or high-return schemes promoted online.
Fraudulent crypto investments, wallet compromise and deceptive token schemes.
Abusive recovery practices, contact-list misuse and threatening loan-app communications.
False, harmful statements or publications made through digital channels.
Manipulated audio, video or images used to deceive, harm or impersonate.
Threats to expose information, images or data to demand money or action.
Repeated unwanted digital contact, monitoring, threats or intrusive behaviour.
Non-consensual sharing or threatened sharing of intimate images or videos.
Unauthorised use or copying of creative, technical or commercial assets online.
Unauthorised copying, distribution or use of protected software.
General information only, not legal advice. Available remedies depend on the facts, evidence and applicable law.
Emergency response guide
Whether the incident involves fraud, hacking, impersonation, harassment or data theft, the first hours can shape what evidence is available and what action may be possible. Use this as a practical first-response checklist.
Stabilise & capture
Secure & notify
Report & organise
Assess & act
Before you react
General first-response information only; it is not legal, financial or technical advice. Circumstances and available actions differ by case.
Cyber crime cases can involve financial fraud, online harassment, reputational attacks, data theft, digital privacy violations and criminal allegations. Explore our focused legal resources for specific cyber-law situations in Bangalore.
Legal guidance for online threats, social-media harassment, blackmail, stalking, fake profiles and related digital abuse.
Explore Legal Help →Explore legal remedies involving defamatory posts, online allegations, reputation attacks and digital character-assassination claims.
View Defamation Guide →Legal assistance relating to unauthorized card transactions, skimming incidents, disputed withdrawals and financial fraud.
Explore Card Fraud Help →Understand legal options following UPI scams, unauthorized digital-wallet transactions and payment-related cyber fraud.
Explore UPI Fraud Help →Legal guidance for unauthorized banking transactions, online banking fraud, account compromise and recovery-related disputes.
View Banking Fraud Guide →Legal support for fraudulent sellers, marketplace scams, non-delivery disputes, deceptive transactions and online commercial fraud.
Explore E-Commerce Claims →Legal guidance for unauthorized data access, employee data theft, confidentiality breaches, NDA violations and corporate cyber disputes.
Explore Corporate Cyber Law →Understand legal defence considerations for allegations involving computer-related offences and applicable IT Act provisions.
Explore IT Act Defence →Legal guidance concerning police notices, cyber-crime allegations, investigation stages and anticipatory-bail considerations.
Explore Bail Guidance →Legal information for abusive loan applications, unauthorized contact access, digital harassment, privacy violations and recovery-related concerns.
Explore Privacy Protection →Explore legal options involving digital recovery practices, harassment allegations, privacy concerns and regulatory-compliance issues.
Explore Legal Options →Legal guidance for intimate-image abuse, non-consensual digital publication, privacy violations, threats and related cyber-crime allegations.
Explore Privacy Defence →Get focused legal guidance based on the nature of your cyber crime, digital fraud, online harassment, privacy or IT Act matter.
From incident to resolution
Cyber cases can move through different authorities, procedures and courts depending on the facts. This roadmap gives a practical view of the stages that may be involved.
Starting point
Fact finding
Reporting
Investigation begins
Technical evidence
Digital trail
Investigation outcome
Before the court
Specialist insight
Decision
Further remedy
One important reality
General educational information only; not legal advice. Procedures and remedies depend on the facts and applicable law.
Evidence is the digital trail
In cyber matters, the most important facts often live in devices, messages, platforms and systems. The value of a record depends not only on what it shows, but also how it was collected, preserved and presented.
First principle
Messages, media, call information and account details may help establish communication and sequence.
PreserveKeep the chat, screenshots and original device; note dates, numbers and context.Channels, groups, usernames, messages and shared files can form part of a digital trail.
PreserveCapture links, identifiers, timestamps and relevant conversation context.Technical routing information can be important when assessing suspicious or spoofed emails.
PreserveRetain the original email and its full headers, not only a screenshot.Network identifiers may be relevant to access, logs and the origin of an online activity.
PreserveRecord the source, date, time and related platform or system context.File information may show creation, modification, location or device-related details.
PreserveKeep original files intact; editing or re-saving can change metadata.Video footage may corroborate a physical event connected with a digital incident.
PreserveAct promptly—systems may overwrite footage after a limited period.Storage media can contain files, deleted data, logs and other forensic artefacts.
PreserveAvoid use or formatting; document possession and condition of the device.Phones may contain messages, apps, location data, calls, media and account access records.
PreserveDo not factory-reset; secure the device and record the relevant accounts.System, access and audit logs can help reconstruct actions on a network or service.
PreserveIdentify retention settings and preserve relevant logs before they roll over.Cloud accounts may hold files, access activity, sharing history and account records.
PreserveDocument account details and avoid deleting or moving relevant material.Public ledger entries can be relevant to tracing crypto transactions and wallet activity.
PreserveRecord wallet addresses, transaction hashes, timestamps and exchange correspondence.Browsing artefacts may provide context about websites, links, downloads and login activity.
PreserveDo not clear the browser; preserve device and relevant URLs or timestamps.Electronic signing data may be relevant to authentication, approvals and document integrity.
PreserveRetain the original signed file, certificate information and related records.A record of who collected, handled, transferred and stored an item of evidence.
PreserveLog dates, times, persons and every transfer to support reliability and continuity.Evidence checklist
General educational information only; it is not legal or forensic advice. The appropriate preservation method depends on the device, platform and circumstances.
India’s digital legal framework
Cyber matters are rarely governed by just one law. The legal response may combine technology rules, criminal law, evidence law, privacy obligations, payment-system requirements and platform duties.
Digital conduct
The core statute for many issues involving computers, electronic records, data and digital systems. It provides a framework for certain cyber contraventions and offences, as well as key concepts used across digital legal matters.
Criminal conduct
Online conduct can also constitute offences under general criminal law. Depending on the facts, issues such as cheating, forgery, extortion, intimidation, defamation or theft may be considered alongside technology-specific law.
Proof in court
The law of evidence is central to cyber cases. It provides the framework relevant to electronic and digital records in judicial proceedings—making authenticity, source, integrity and preservation important questions.
Personal data
This Act establishes a framework for processing digital personal data, recognising rights of individuals and the need for lawful processing. Its provisions have phased commencement dates, so relevance depends on the specific provision and facts.
Digital payments
RBI directions and payment-system rules shape how regulated entities handle unauthorised electronic transactions, customer reporting and related grievance processes. Prompt reporting to the bank is especially important.
Incident response
The Indian Computer Emergency Response Team (CERT-In) is the national agency for cyber-security incident response. Directions issued under the IT Act address information-security practices, prevention, response and reporting for covered entities and incidents.
Online platforms
The IT Intermediary Guidelines and Digital Media Ethics Code Rules set due-diligence requirements for intermediaries, with additional duties for significant social media intermediaries and a broader framework for certain online content providers.
Across every stage
Electronic evidence is not a separate incident category; it runs through the whole case. Messages, logs, devices, account records and files can be relevant, but reliability and continuity need careful attention.
How the pieces connect
General educational information only, not legal advice. Legal relevance, procedures and remedies depend on the facts and current law.
Corporate advisory & dispute response
When an incident touches company data, customer trust or business continuity, the response has to be both legally sound and commercially practical.
From early evidence preservation to internal review, notices and dispute strategy, every step should account for operational impact.Unauthorised access, disclosure or loss involving business or customer data.
Response focusContainment, record preservation and obligations assessment.Insider copying, extraction or misuse of company, client or customer information.
Response focusFact review, access records and employment-related action.Unauthorised access, copying or sharing of proprietary source code and technical assets.
Response focusTechnical evidence, confidentiality and IP enforcement options.Misuse or exposure of trade secrets, strategic records or proprietary business information.
Response focusPreservation, notices and protective remedy assessment.Disclosure or use of protected information contrary to confidentiality commitments.
Response focusContract review, evidence review and enforcement strategy.Deceptive vendors, manipulated invoices, impersonation or third-party compromise.
Response focusPayment records, communication trail and recovery options.Misuse of systems, credentials, funds or digital access by an insider.
Response focusAccess controls, evidence integrity and investigation support.Payment diversion or commercial deception through compromised or spoofed email.
Response focusUrgent trail preservation, bank communication and reporting.Business interruption, encrypted systems or extortion following a cyber incident.
Response focusIncident response, legal coordination and continuity planning.Electronic agreements, online acceptances, digital signatures and contractual disputes.
Response focusValidity, evidence, obligations and dispute-resolution review.Corporate response framework
General educational information only; it is not legal advice. Appropriate action depends on your facts, contracts, systems and applicable law.
The next frontier of cyber law
Artificial intelligence can create convincing voices, faces, documents and identities at scale. The legal questions are evolving—but the harm to reputation, money, privacy and trust is already immediate.
THE CORE QUESTION
VOICE CLONING
SYNTHETIC MEDIA
IMAGE MANIPULATION
IMPERSONATION
DOCUMENT DECEPTION
COERCION
FINANCIAL DECEPTION
WHAT COMES NEXT
THE LEGAL LENS
General educational information only; it is not legal advice. The applicable law and available options depend on the facts, evidence and jurisdiction.
The value of the right counsel
In a digital crisis, clarity is a form of protection. You need counsel that can assess the facts, understand the evidence and guide the next decision with discretion.
Begin with a structured view of the incident, your objectives, legal exposure and practical options.
What this meansAdvice designed to help you decide before you act.Digital records need context, preservation and a clear understanding of their role in the larger matter.
What this meansAttention to the source, integrity and relevance of the evidence.When a dispute or criminal proceeding reaches court, preparation and clear presentation matter.
What this meansRepresentation aligned with the facts, evidence and procedure.Cyber incidents can be time-sensitive. Early guidance helps organise the first legal decisions.
What this meansPrompt focus on preservation, reporting and immediate risk.Sensitive personal, financial and business circumstances deserve a discreet first conversation.
What this meansA professional space to explain the facts without pressure.No two cyber cases have the same evidence, timeline, risk or desired outcome.
What this meansA case-specific approach rather than a generic checklist.How we work
General information only, not legal advice. Every matter depends on its facts, evidence and applicable law.
Clear answers. Better next steps.
Explore practical questions across banking fraud, social media, corporate incidents, criminal procedure, bail, evidence and digital forensics.
Financial harm
Contact your bank or payment provider through its official channels as soon as possible, record the complaint reference, preserve transaction details and avoid deleting related messages or alerts.
Recovery depends on the facts, timing, transaction path and actions taken by relevant institutions. Prompt reporting, a clear documentary record and appropriate legal advice can help you assess available options.
The right reporting route depends on the incident. In many cases, bank or payment-provider reporting and a cyber-crime or police complaint may both be relevant. Keep every acknowledgement.
Preserve transaction IDs, bank statements, SMS or email alerts, screenshots, call details, recipient information, app or web links and all complaint reference numbers.
No. Do not share passwords, PINs, OTPs, CVVs or full credentials with anyone. A lawyer or legitimate institution does not need your OTP or PIN to understand the legal facts.
Identity & reputation
Secure associated email and phone access, use the platform’s official recovery process, preserve screenshots and account details, and document any misuse, threats or transactions linked to the compromise.
Preserve the profile URL, username, posts and messages before reporting it to the platform. If the profile is causing harm, impersonation or fraud, legal and police-reporting options may need assessment.
Platform reporting, preservation requests and other steps may be available depending on the content, account, platform policies and applicable legal framework. Do not rely only on screenshots—save links and context.
Do not negotiate or send further material. Preserve the threats, account details and payment demands; use platform safety tools and seek prompt legal advice on reporting and protective options.
They may still be relevant, but availability and evidentiary value depend on what was preserved, the platform, the device and the surrounding facts. Act quickly to save existing context and records.
Business protection
Stabilise access, preserve logs and records, identify affected systems and data, and create a factual incident timeline. Legal, technical, contractual and regulatory issues should be assessed together.
Possible responses depend on the employment terms, access records, nature of the data and evidence. Preserve devices, logs, communications and relevant agreements before taking steps that could change the record.
Immediately alert the bank or payment provider through official channels, preserve the email headers and transaction trail, notify relevant internal stakeholders and obtain legal advice on recovery and reporting options.
An NDA may be relevant where confidential information is used or disclosed contrary to an agreed obligation. Its effectiveness depends on its language, the facts, evidence and other applicable rights or duties.
A focused internal fact review is often important, but it should not delay urgent preservation, containment or required reporting. The scope should be planned to protect evidence and legal position.
How a case may move
A complaint records information about an incident. An FIR is a formal first-information report used where the legal requirements for a cognizable offence and registration are met. The appropriate route depends on the facts and applicable procedure.
Reporting options can vary by incident and jurisdiction. Online reporting may be available for certain matters, while a police or cyber-crime unit may also be relevant. Keep acknowledgement details in either case.
The investigating authority may collect information, examine witnesses, seek records and take other lawful investigative steps. The path and duration vary substantially with the facts, evidence and alleged offences.
Cross-border or multi-city facts can add complexity, but they do not necessarily prevent reporting. Preserve the digital trail, identity details, transaction path and all platform or account information.
No outcome can be guaranteed. Reporting can be important for investigation, preservation and formal action, but results depend on evidence, timing, legal requirements and decisions by relevant authorities.
Protection of liberty
Bail availability depends on the alleged offences, facts, procedural stage, jurisdiction and court assessment. Prompt legal advice is important when a person is contacted, summoned or apprehends arrest.
Anticipatory bail is a legal remedy that may be sought by a person who has reason to believe they may be arrested for a non-bailable offence. Availability and conditions depend on the applicable law and facts.
No. The legal response to an allegation depends on the specific facts, alleged offences, evidence and procedural requirements. Do not ignore notices or communications from authorities; obtain legal advice promptly.
Keep copies of notices, complaint or FIR details if available, a clear timeline, relevant communications, any previous complaints, and details of the person’s address, work and other relevant circumstances.
Courts may impose conditions depending on the matter. The nature and appropriateness of any condition are case-specific and should be understood with legal advice.
What supports the facts
Screenshots can be useful, but their weight may depend on source, context, authenticity, associated records and how they were preserved. Keep original files, links, devices and timestamps where possible.
Deletion can remove context and may make it harder to establish a reliable sequence of events. Preserve relevant material and seek advice before altering a device, app or account.
Metadata is information associated with a file or record, such as creation time, modification time or device-related details. Editing, forwarding or re-saving a file can affect it.
Limit sharing to what is genuinely necessary. Wide forwarding can create privacy, confidentiality and integrity concerns. Make a secure record and document who receives a copy.
It is a record of who collected, handled, transferred and stored an item. It helps show continuity and reduce doubt about whether digital material was altered or mishandled.
The technical trail
Digital forensics involves examining and preserving information from devices, systems, networks or accounts in a manner intended to understand relevant digital activity and maintain reliability.
A reset may remove valuable evidence. If there is a serious incident, preserve the device, document its condition and seek appropriate legal or technical guidance before taking irreversible action.
Possibility depends on the device, service, storage method, time elapsed and other technical factors. Avoid further use of the device or account if preserving potentially deleted data is important.
They may provide technical context about routing, access, timing and system activity. Their meaning depends on the full records and expert interpretation where needed.
Not every matter requires a forensic examination. Whether it is useful depends on the disputed facts, complexity, available records, stage of the matter and the evidence needed.
These FAQs provide general educational information only, not legal advice. Laws, procedures and outcomes depend on individual facts and current law.
Legal insights & prevention guide
Prevention is not about fear. It is about recognising risk early, reducing the chance of loss and preserving your options if something goes wrong.
A practical principle
STAY AHEAD OF FRAUD
EVERYDAY DEFENCE
FOR BUSINESSES
ACCESS CONTROL
ADD A SECOND LAYER
HUMAN RISK
TEAM RESILIENCE
IF SOMETHING FEELS WRONG
General awareness information only; it is not legal, financial or cybersecurity advice. Tailor safeguards and incident response to your circumstances.
Confidential consultation
A clear first conversation can help you understand what to preserve, what to report and what legal options may be relevant to your cyber matter.
Office details
Case evaluation request
General information only, not legal advice. No outcome is guaranteed. For emergencies, use official financial-institution and law-enforcement reporting channels in addition to seeking legal advice.
Connected legal support
Cyber matters often overlap with other areas of law. Explore related practice areas where the wider facts of your matter may require a coordinated legal view.
WHEN DIGITAL CONDUCT BECOMES AN OFFENCE
FOR ORGANISATIONS & COMMERCIAL RISK
RIGHTS, REMEDIES & PRIVATE DISPUTES
OWNERSHIP, DOCUMENTS & DUE DILIGENCE
UNFAIR SERVICES & CUSTOMER GRIEVANCES
FINANCIAL, COMMERCIAL & REGULATORY ALLEGATIONS
PRIVATE COMMERCIAL DISPUTE RESOLUTION
CREATIVE, TECHNICAL & BRAND ASSETS
ONE MATTER. MULTIPLE LEGAL LENSES.
General information only; it is not legal advice. The relevant practice area and remedy depend on the facts and applicable law.
A clear next step starts here
Cyber incidents can move quickly. A calm, informed response can help you preserve evidence, protect your position and decide what to do next.
Why timely legal action matters
CYBER LAW · BANGALORE
Discreet counsel.General information only, not legal advice. No outcome is guaranteed; legal options depend on the facts, evidence and applicable law.
Syed Khaleel Pasha is a full service law firm in India, with its offices in Bangalore