Cybercrime and Economic Offences in India:Legal Action, FIR Filing, and Recovery
- By Suresh Kumar, Aran Law Firm
- Tamil Nadu, India
- 9 min read
- Updated July 2026
Key Facts — Economic Offences & Cybercrime in India
- Cybercrime complaints in India are governed primarily by the Information Technology Act 2000 (IT Act) and relevant provisions of the Indian Penal Code 1860.
- Hacking, data theft, and online fraud are criminal offences under Sections 43, 66, 66C, and 66D of the IT Act 2000 punishable with imprisonment and fines.
- Financial fraud and cheating are also punishable under Sections 420, 406, and 409 IPC (now corresponding provisions under the Bharatiya Nyaya Sanhita 2023).
- Cybercrime FIRs in Tamil Nadu are registered at the nearest police station or the dedicated Cyber Crime Cell in Chennai, this is the Commissioner's Office Cyber Crime Cell.
- National Cyber Crime Reporting Portal (cybercrime.gov.in) allows online complaints for financial fraud, including the Citizen Financial Cyber Fraud Reporting system for immediate fund-freeze requests.
- Civil recovery through a money recovery suit or attachment before judgement can run parallel to a criminal complaint.
While most cheque bounce cases are prosecuted under the Negotiable Instruments Act, matters involving fraudulent intent, forgery, or large-scale financial deception may also give rise to offences under the Indian Penal Code and require specialised legal action.
What laws cover cybercrime and economic offences in India?
Criminal liability for cybercrime and economic fraud in India arises under two overlapping frameworks: the Information Technology Act 2000 (as amended in 2008) and the criminal law now codified in the Bharatiya Nyaya Sanhita 2023 (BNS), which replaced the Indian Penal Code from July 2024.
For businesses in Chennai dealing with data breaches, the IT Act also imposes civil liability under Section 43A on body corporates that are negligent in maintaining reasonable security practices, making them liable to pay compensation to affected persons.
IT Act 2000 - Section 66
Computer-related offences including hacking and data theft. Punishable with imprisonment up to 3 years or fine up to ₹5 lakh or both.
IT Act - Section 66C & 66D
Identity theft (66C) and cheating by personation using a computer resource (66D). Both punishable with imprisonment up to 3 years and fine.
BNS 2023 Cheating & fraud
Financial fraud, embezzlement, and criminal breach of trust are cognisable offences carrying imprisonment.
PMLA 2002
The Prevention of Money Laundering Act applies where proceeds of crime are laundered. Enforcement Directorate has powers of attachment and prosecution.
How do you file a cybercrime complaint in Chennai?
You have three parallel options for filing a cybercrime complaint in Tamil Nadu, and filing on all available channels simultaneously is advisable when financial loss is involved.
Online portal
File at cybercrime.gov.in. For financial fraud, use the Citizen Financial Cyber Fraud Reporting & Management System early filing can trigger a fund-freeze request to the bank.
Cyber Crime Cell, Chennai
Visit the Commissioner's Office Cyber Crime Cell, Chennai. Bring all digital evidence screenshots, transaction IDs, emails, and bank statements.
Nearest police station
Any police station in Tamil Nadu must receive a cybercrime FIR. If refused, a written complaint to the SP or a petition before the Magistrate can compel registration.
National Cyber Helpline 1930
Call 1930 immediately on discovering financial fraud. This triggers the Citizen Financial Cyber Fraud Reporting system for urgent bank-level intervention.
Can you recover money lost to online fraud in India?
Recovery of money lost to online fraud is possible through two simultaneous routes: the criminal process and a civil suit for money recovery.
On the criminal side, police investigating a cybercrime FIR have powers to freeze bank accounts and seize assets under the Code of Criminal Procedure (now the Bharatiya Nagarik Suraksha Sanhita 2023). Courts can also order restitution. Where the offence involves money laundering, the Enforcement Directorate can attach the proceeds of crime under the Prevention of Money Laundering Act 2002.
On the civil side, a money recovery suit before the appropriate civil court — the City Civil Court Chennai or the District Court, depending on the amount — allows the victim to attach the defendant’s property before judgement if there is a risk of the defendant dissipating assets. This civil remedy is independent of the criminal complaint and can proceed simultaneously. At Aran Law, we advise clients on the fastest available route to freeze and recover funds based on the specific facts of their case.
What is the limitation period to file a civil suit for fraud recovery?
The Limitation Act 1963 governs the time within which a civil suit for fraud or money recovery must be filed. For suits based on fraud, time begins to run from when the fraud was discovered — not from the date of the fraudulent act. Prompt legal advice is essential; delay can extinguish your civil right.
What should a business do after a data breach in India?
Under the Digital Personal Data Protection Act 2023 (DPDPA), which is progressively being brought into force, data fiduciaries businesses that collect and process personal data will be required to notify the Data Protection Board of India and affected individuals of data breaches.
Irrespective of the DPDPA’s commencement, businesses currently face civil liability under Section 43A of the IT Act 2000 if they are negligent in maintaining reasonable security practices. If a breach is discovered, immediate steps include isolating the affected systems, preserving all logs and records, notifying affected customers, and reporting to law enforcement under the IT Act.
Aran Law advises businesses in Chennai on post-breach legal obligations, regulatory filings, and coordinating with IT forensics to preserve evidence for criminal proceedings.
A debt recovery notice may not be sufficient where the debtor has acted fraudulently or dishonestly, in which case legal remedies relating to economic offences should also be considered.
FAQ
1.How do I file a cybercrime complaint in Tamil Nadu?
File online at cybercrime.gov.in, call helpline 1930, or visit the Chennai Cyber Crime Cell. For financial fraud, file immediately — early reporting can freeze the fraudster’s account before funds are moved.
2.What is the punishment for online fraud in India?
Online fraud is punishable under the IT Act 2000 and BNS 2023. Offences like cheating by personation (IT Act S.66D) carry up to 3 years imprisonment and fine. Financial fraud under BNS carries separate penalties.
3.Can I recover money lost to UPI or online banking fraud?
Yes call 1930 immediately to trigger a fund-freeze. File at cybercrime.gov.in. A civil suit for money recovery can also be filed in parallel. Speed is critical; early action significantly improves recovery chances.
4.What is the limitation period for a cybercrime case in India?
For civil fraud suits, the Limitation Act 1963 runs from the date of discovery of the fraud. Criminal complaints have no fixed limitation period for cognisable offences, but early filing strengthens the case.
5.Is a data breach a criminal offence in India?
Deliberate data theft or hacking is a criminal offence under Section 66 of the IT Act 2000. Businesses that are negligent in protecting data face civil liability under Section 43A. The DPDPA 2023 will add regulatory obligations once fully in force.
