Cyber Crime Defence & Reporting

A UPI scam empties an account in under sixty seconds. An OTP shared in panic costs ₹3,40,000. A WhatsApp impersonation defrauds a vendor of an entire month's receivables. A ransomware attack on an SME freezes operations for nine days. A morphed image surfaces on a private channel. A data leak exposes ten thousand customer records to the dark web. By FY 2026-27, cyber-enabled crime is the fastest-growing crime category in India — and the legal framework that responds to it has changed substantially with the Bharatiya Nyaya Sanhita 2023 overlay, the Bharatiya Sakshya Adhiniyam 2023's electronic-evidence rules (Section 63 BSA replacing the old Section 65B), the IT Rules 2021 (intermediary obligations), the IT Rules 2023 (online gaming / fact-check), and the Digital Personal Data Protection Act 2023 for data-breach response.

The architecture: Information Technology Act 2000 (Sections 43, 66, 66B, 66C, 66D, 67, 67A, 67B, 70B, 72, 79) + BNS 2023 (Sections 318/336 cheating, Section 75 sexual harassment overlay where Section 354A IPC was, identity-related provisions) + BSA 2023 Section 63 certificate + Cybercrime Reporting Portal cybercrime.gov.in + Citizen Financial Cyber Fraud Reporting and Management System (1930 helpline) + CERT-In incident reporting + DPDP Act 2023 data-fiduciary breach notification. We act for victims (reporting, FIR, recovery, prosecution) and for accused (defence under IT Act / BNS, bail, quashing).

The first sixty minutes after a cyber incident decide most of the recovery story. We have an incident-response playbook ready.

What We Handle

• Financial Cyber Fraud:: UPI / IMPS / NEFT / RTGS fraud, OTP scams, phishing, vishing, smishing, fake KYC calls, investment-app scams, crypto-recovery scams, courier scams, electricity-bill scams. Reporting via 1930 / cybercrime.gov.in within the golden hour for transaction reversal; FIR registration; chargesheet under Section 66D IT Act + BNS 318/336 cheating + Section 66C identity theft.

• Identity Theft & Impersonation:: Section 66C IT Act (identity theft) + Section 66D (cheating by personation by computer resource) + BNS overlay. WhatsApp / Instagram / LinkedIn / matrimonial impersonation; takedown notices to platforms under IT Rules 2021 Rule 3(2)(b); DPDP Act data-principal grievance.

• Sexual / Harassment-Related Cyber Offences:: Section 67 IT Act (obscene material), Section 67A (sexually explicit), Section 67B (CSAM); BNS Section 75 (sexual harassment overlay where Section 354A IPC was); BNS provisions on stalking and voyeurism; non-consensual intimate image takedown via portal + Rule 3(2)(b)(ii) of IT Rules 2021 (24-hour takedown).

• Data Breach & Ransomware:: CERT-In 6-hour reporting under the 2022 Directions; DPDP Act data-fiduciary breach notification to the Data Protection Board; Section 43A IT Act civil compensation for failure to maintain reasonable security practices; Section 66 / 66F (cyber terrorism) where applicable; ransomware negotiation, forensic preservation, and law-enforcement coordination.

• Defamation, Trolling & Online Abuse:: BNS defamation provisions + IT Act overlay; takedown coordination with intermediaries under IT Rules 2021; civil injunctions under the SLAPP-resistant defamation track.

Evidence Preservation — Section 63 BSA

Almost every cyber prosecution turns on whether the electronic evidence (transaction logs, screenshots, server records, CCTV, CDR, WhatsApp chats, email headers) is admissible. The Section 63 BSA certificate from the person in lawful control of the device — replacing the pre-2024 Section 65B Evidence Act — is mandatory. We coordinate with the bank / intermediary / employer / device owner for the certificate at the start, not after charges are framed.