Author: Tems Das
College: National Law University Tripura
To the point
Technology has become an inseparable part of everyday life. From online banking and digital payments to social media and e-commerce, people rely on the internet for almost every aspect of their personal and professional lives. However, this growing dependence on technology has also created opportunities for criminals to commit offences in cyberspace. Cybercrime is no longer limited to hacking computers; it now includes identity theft, phishing, online financial fraud, cyberstalking, ransomware attacks, and data breaches that can cause significant financial and emotional harm.
As cyber threats continue to evolve, the legal system must adapt to protect individuals, businesses, and public institutions. In India, the Information Technology Act, 2000, supported by the Bharatiya Nyaya Sanhita, 2023, provides the primary legal framework for combating cyber offences. Courts have further strengthened this framework through landmark judgments that define the admissibility of electronic evidence, safeguard digital rights, and establish accountability for online misconduct.
This article explores the nature of cybercrime, examines significant judicial decisions, and highlights how Indian law continues to evolve to ensure justice, security, and accountability in the rapidly expanding digital world.
Use of Legal Jargon
Cyber crime law involves several legal terms that help define digital offences and determine criminal liability. Cyber terrorism refers to attacks on computer systems intended to threaten national security or public order. Phishing is the fraudulent attempt to obtain confidential
information by impersonating a trustworthy source. Identity theft involves the unauthorized use of another person’s personal information for illegal gain. Data breach signifies unauthorized access to confidential electronic data whiledigital evidence includes emails, electronic records, IP logs, CCTV footage, metadata, and server records admissible under the Bharatiya sakshya Adhiniyam, 2023. Mens rea denotes the guilty intention behind committing a cyber offence, whereas actus reus refers to the unlawful act itself. Electronic records, forensic examination, hash values and chain of custody are crucial concepts in cyber investigations to ensure the authenticity and integrity of evidence. Understanding these legal expressions helps courts, investigators and legal practitioners determine liability, establish guilt beyond reasonable doubt and ensure that justice is delivered while protecting the rights of both victims and accused person.
The Proof
Proving a cyber crime requires reliable and legally admissible electronic evidence. Unlike conventional offences, cyber crimes leave digital footprints that investigators collect through forensic methods. Evidence may include emails, chat records, transaction histories, IP addresses, server logs, mobile phone data, CCTV recordings, metadata, and hard disk contents. Investigating agencies use cyber forensic laboratories to recover deleted files and analyse electronic devices without altering the original data. Under the Bharatiya Sakshya Adhiniyam, 2023 electronic records are admissible before courts when collected and preserved according to legal procedures. The prosecution must establish the authenticity, integrity and relevance of digital evidence through expert testimony and proper documentation.
Maintaining the chain of custody ensures that evidence remains untampered throughout the investigation. Courts also consider witness statements, expert opinions, and surrounding circumstances while determining guilt. Since cyber criminals often conceal their identities using advanced technology, effective investigation depends on skilled forensic experts, international cooperation, and modern technological tools to successfully identify offenders and secure convictions.
Abstract
Cyber crime refers to unlawful activities carried out through computers, digital devices, or the internet. With increasing dependence on technology for banking, communication, education, and business, cyber offences have become more frequent and sophisticated. Crimes such as hacking, identity theft, phishing, online fraud, cyberstalking, ransomware attacks and data breaches affect individuals, businesses, and governments alike.
In India, cyber crimes are primarily governed by the Information Technology Act, 2000, along with relevant provisions of the Bharatiya Nyaya Sanhita, 2023 (BNS) and other applicable laws. These offences not only cause financial losses but also violate privacy, compromise confidential information, and threaten national security. The rapid growth of digital platforms has made cyber security a matter of public importance. Effective legal mechanisms, technological safeguard and public awareness are essential to address these challenges. This article discusses the concept of cyber crime,the legal terminology associated with such offences the evidentiary framework used to establish cyber offences and the significance of strengthening cyber laws for ensuring a safe and secure digital environment.
Case law
1. Shreya Singhal v. Union of India
This landmark judgment transformed India’s cyber law landscape. The Supreme Court declared Section 66A of the Information Technology Act, 2000 unconstitutional because it violated the fundamental right to freedom of speech and expression under Article 19(1)(a) of the Constitution. The Court held that vague and arbitrary provisions could not be used to criminalize online opinions merely because they were offensive or inconvenient. The decision strengthened digital rights while emphasizing that online freedom remains subject to reasonable restrictions under Article 19(2).
2. State of Tamil Nadu v. Suhas Katti
This case is regarded as India’s first successful conviction under the Information Technology Act, 2000. The accused created fake online profiles and posted obscene and defamatory messages about a woman, causing severe harassment. The court convicted the offender under relevant provisions of the IT Act and the Indian Penal Code, demonstrating that online anonymity cannot shield individuals from criminal liability. The judgment highlighted the importance of electronic evidence and encouraged stronger enforcement against cyber harassment and cyberstalking.
3. Anvar P.V. v. P.K. Basheer
Although primarily an evidentiary case, this judgment significantly influenced cybercrime prosecutions. The Supreme Court ruled that electronic records such as emails, digital documents, and computer-generated evidence are admissible only if accompanied by a valid certificate under Section 65B of the Indian Evidence Act (now governed under the Bharatiya Sakshya Adhiniyam, 2023). The decision established clear procedural safeguards for digital evidence, ensuring its authenticity and reliability in criminal and civil proceedings involving cyber offences.
4. CBI v. Arif Azim (Sony Sambandh Case)
Known as the Sony Sambandh Case, this matter involved online credit card fraud through an e-commerce platform. The accused used stolen credit card information to purchase goodsover the internet.
The investigation relied extensively on digital records, electronic transactions, and internet protocols to identify the offender. The court’s conviction demonstrated that cyber fraud could be effectively investigated using technological evidence and emphasized the growing need for secure online payment systems and stronger cybersecurity measures.
5. Avnish Bajaj v. State (Bazee.com Case)
This case arose after obscene material was listed for sale on the online marketplace Bazee.com. The Managing Director, Avnish Bajaj, faced prosecution regarding intermediary liability. The Delhi High Court examined whether an online platform could be held criminally liable for content uploaded by users. The judgment contributed significantly to the development of intermediary liability principles in India, leading to stronger due diligence obligations while recognizing that intermediaries are not automatically responsible for every user-generated publication.
Conclusion
Cyber crime has emerged as one of the greatest legal and technological challenges of the modern era. As digital technology becomes an essential part of everyday life criminals continue to exploit online platforms for financial fraud, identity theft, hacking, cyber bullying and other unlawful activities. Strong legislation alone cannot eliminate cyber crime unless supported by effective enforcement, public awareness and technological advancement. Governments law enforcement agencies, businesses, and citizens must work together to strengthen cyber security and encourage responsible digital behaviour.
Individuals should use secure passwords, enable multi-factor authentication, avoid suspicious links, and regularly update their software to reduce risks. Educational institutions should also promote cyber awareness to help people recognize online threats. Courts play a significant role by ensuring that electronic evidence is properly evaluated and justice is delivered without compromising due process. A secure digital environment depends on a balanced approach that combines legal accountability, technological innovation, and public participation. Only through collective efforts can society effectively combat cyber crime and safeguard the digital future.
FAQs
1. What is cybercrime?
Cybercrime refers to any unlawful activity committed using computers, digital devices, or the internet, including hacking, identity theft, phishing, cyberstalking, and online financial fraud.
2. Which law primarily governs cybercrime in India?
The principal legislation is the Information Technology Act, 2000, as amended in 2008. Relevant provisions of the Bharatiya Nyaya Sanhita, 2023 may also apply depending on the offence.
3. What types of evidence are important in cybercrime cases?
Electronic evidence such as emails, server logs, IP addresses, CCTV footage, mobile data, digital documents, and forensic reports are crucial for investigation and prosecution.
4. Can a person be punished for posting offensive content online?
Yes, if the content amounts to offences such as defamation, obscenity, hate speech, or threats under applicable laws. However, mere offensive expression cannot be criminalized in violation of constitutional free speech protections.
5. Where can cybercrime complaints be filed in India?
Victims can report offences at the nearest Cyber Crime Police Station or through the National Cyber Crime Reporting Portal.
6. Why are cybercrime case laws important?
Cybercrime case laws interpret statutory provisions, establish legal principles on electronic evidence and digital rights, clarify intermediary liability, and guide courts, investigators, and legal practitioners in handling technology-related offences.
