Skip to main content LegalFirms.in — India's Verified Legal Directory
Cyber Crime

How to Report a Cybercrime and File an Online FIR in India

How do you report a Cybercrime and File an Online FIR in India?

  1. Call 1930 immediately (for financial fraud)
  2. Preserve all digital evidence
  3. Visit cybercrime.gov.in and file a complaint
  4. Track your complaint
  5. Visit the Cyber Crime Cell or police station if needed
  6. Demand a Zero FIR if jurisdiction is unclear
  7. Escalate through CPGRAMS if unresponsive
  8. Consult a cyber law advocate for complex cases
  9. Explore compensation remedies

Each step in detail

To report a cybercrime in India, visit the National Cyber Crime Reporting Portal at cybercrime.gov.in, select the relevant category, and submit your complaint online — no in-person visit is required to begin. Complaints filed there are forwarded to the jurisdictional police, who may register a First Information Report (FIR) under applicable sections of the Bharatiya Nyaya Sanhita, 2023 (BNS) and the Information Technology Act, 2000 (IT Act). There is no fee to file a cybercrime complaint.

If you prefer to file offline, visit the nearest Cyber Crime Cell or any police station. Under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS), a police officer must register a Zero FIR for cognisable offences regardless of jurisdiction, meaning any station must accept your complaint and transfer it to the correct station.

What counts as a cybercrime under Indian law?

Indian law recognises cybercrime primarily under two statutes:

  • Information Technology Act, 2000 (IT Act): Sections 43, 66, 66B, 66C, 66D, 66E, 67, 67A, 67B, 72, and 75 cover hacking, identity theft, phishing, online fraud, publishing obscene material, data theft, and unauthorised access to computer systems.
  • Bharatiya Nyaya Sanhita, 2023 (BNS): Provisions on cheating (Section 318), extortion (Section 308), criminal intimidation (Section 351), and defamation (Section 356) apply where cyberspace is the medium of the offence.

Common examples include online banking fraud, UPI scams, sextortion, cyberstalking, ransomware attacks, email phishing, social media account hacking, and non-consensual sharing of intimate images. If you are unsure whether your situation qualifies, you can browse cyber law questions and answers or consult an advocate.

Where should you report a cybercrime in India?

You have three main options:

  • Online portal: The National Cyber Crime Reporting Portal (cybercrime.gov.in) is the primary official channel, operated by the Ministry of Home Affairs. It covers all cybercrime categories including financial fraud and crimes against women and children.
  • Cyber Crime Cell: Every state has dedicated Cyber Crime Cells, usually within the state CID or crime branch. Large cities such as Delhi, Mumbai, Bengaluru, Hyderabad, and Chennai have standalone Cyber Crime Police Stations.
  • Nearest police station: For cognisable offences you may walk into any police station and demand a Zero FIR under BNSS, 2023. The officer cannot refuse.

Step-by-step: how to file a cybercrime complaint on cybercrime.gov.in

The portal has two reporting tracks — one for financial fraud (fast-track) and one for all other cybercrimes.

  1. Go to cybercrime.gov.in and click File a Complaint. Accept the terms and conditions.
  2. Choose your category. Select Report Cyber Crime Related to Women/Children for offences such as sextortion, CSAM, or cyberstalking involving minors. For all other offences — banking fraud, hacking, identity theft — select Report Other Cyber Crime.
  3. Register or continue as guest. Providing your mobile number lets you track the complaint later. Guest filing is available but limits tracking.
  4. Enter incident details. Provide the date, time, and description of the incident; the suspected accused's details if known (mobile number, email, UPI ID, bank account); and the financial loss amount, if any.
  5. Upload evidence. Attach screenshots, transaction records, emails, chat logs, or any other digital evidence. Accepted formats are typically JPG, PNG, and PDF.
  6. Submit and note your complaint number. You will receive an acknowledgement number. Save it — you will need it to track progress or escalate.

For urgent financial fraud (such as UPI or net-banking fraud), call the National Cybercrime Helpline at 1930 immediately. Acting within the first hour can sometimes help law enforcement freeze fraudulent transfers before they are withdrawn.

How to file an FIR at a Cyber Crime Cell or police station

If your complaint on the portal is not acted upon within a reasonable time, or if the crime is serious, visit a Cyber Crime Cell or police station in person. Carry the following:

  • A written complaint addressed to the Station House Officer (SHO) or Cyber Cell In-charge
  • Printouts or copies of digital evidence (screenshots, transaction history, email headers)
  • Your Aadhaar card or another government-issued photo ID
  • Bank statements or UPI transaction records if financial fraud is involved
  • Your cybercrime.gov.in complaint acknowledgement number, if already filed online

The police officer must register an FIR for cognisable offences. If they refuse, you may approach the Superintendent of Police (SP) or file a complaint before the jurisdictional Executive Magistrate under Section 175 of the BNSS, 2023. You can also approach the High Court for a direction to register the FIR.

What evidence should you preserve?

Digital evidence is perishable. Before reporting, take these steps immediately:

  • Take timestamped screenshots of fraudulent messages, posts, or transactions.
  • Do not delete conversations, emails, or call logs — even threatening ones.
  • Save the full email header (not just the body) for phishing emails.
  • Note the exact URL of any fraudulent website and take a screenshot.
  • For financial fraud, download your bank or UPI statement showing the disputed transaction.
  • If a social media account was used, record the profile URL and any public posts.
Tip: Use your phone to photograph your computer screen if you cannot take a digital screenshot — even an imperfect record is better than none. Courts have accepted such evidence in cybercrime cases when properly authenticated.

Timelines and what happens after you file

There is no fixed statutory deadline for police to investigate a cybercrime complaint, but the portal acknowledges complaints within 24 hours. Once an FIR is registered, investigation timelines depend on complexity. Financial fraud cases may move faster when the 1930 helpline is used promptly. Under Section 193 of the BNSS, 2023, police must submit a charge sheet (Final Report) within 60 days for offences punishable with imprisonment up to seven years, or 90 days for more serious offences — failing which the accused becomes entitled to default bail.

You can track your complaint status on the National Cyber Crime Reporting Portal using your acknowledgement number. If you are dissatisfied with the response, escalate to the Centralised Public Grievance Redress portal (CPGRAMS) or approach the State Cyber Crime nodal officer.

Can you seek compensation for financial loss?

Yes, through more than one route:

  • Criminal courts: Under Section 357 of the BNSS, 2023, a court convicting an accused may order compensation to the victim out of any fine imposed.
  • Consumer forums: If the fraud involved a regulated service provider (bank, payment gateway, e-commerce platform) and the provider was deficient in service, a complaint may lie before a District Consumer Disputes Redressal Commission under the Consumer Protection Act, 2019. Our guide on online shopping fraud complaints explains this process in detail.
  • Civil suit: A victim may independently file a civil suit for damages before the appropriate civil court.
  • IT Act remedy: Section 43A of the IT Act provides for compensation from a body corporate that fails to protect sensitive personal data, adjudicated by the Adjudicating Officer appointed under the Act.

Common mistakes to avoid

  • Delaying the report: In financial fraud, every minute counts. Call 1930 first, then file on the portal.
  • Paying ransom or demands: Paying ransomware attackers or sextortion callers rarely ends the harassment and may encourage further demands.
  • Sharing OTPs or passwords: No legitimate bank, government officer, or court ever asks for these — even as part of a supposed 'verification' during a scam call.
  • Destroying evidence: Deleting messages or blocking the accused before recording evidence can seriously weaken your case.
  • Filing only with the portal and waiting indefinitely: If there is no response within 15–30 days, escalate to the Cyber Crime Cell in person or through CPGRAMS.
Tip: Keep a log of every step you take — dates, complaint numbers, officers spoken to, and responses received. This record is invaluable if you need to escalate or approach a court.

When should you consult a cyber law advocate?

You do not always need a lawyer to file an initial cybercrime complaint. However, professional legal guidance is advisable when:

  • The financial loss is significant (generally above ₹1 lakh) and police are unresponsive
  • You are a victim of sextortion, non-consensual image sharing, or cyberstalking and face immediate personal risk
  • Your business has suffered a data breach or ransomware attack with regulatory implications under the IT Act or the Digital Personal Data Protection Act, 2023
  • You need to approach the High Court for a direction to register an FIR
  • You wish to pursue compensation through consumer forums or civil courts simultaneously

You can find advocates by city and practice area or ask a legal question on LegalFirms.in to understand your options. For further reading, explore our legal guides covering a wide range of topics including digital rights and cyber offences.

This guide is general legal information, not legal advice. Laws and procedures may vary by state and change over time. Consult a qualified advocate for advice specific to your situation.

Step-by-Step Process

1

Call 1930 immediately (for financial fraud)

If money has been transferred fraudulently through UPI, net banking, or a debit/credit card, call the National Cybercrime Helpline at 1930 without delay. The helpline coordinates with banks and payment systems to attempt a freeze on the fraudulent transaction.

2

Preserve all digital evidence

Take timestamped screenshots of fraud messages, suspicious profiles, transaction records, and any threatening communications. Save email headers, note fraudulent URLs, and download bank or UPI statements. Do not delete any messages or block the accused until evidence is recorded.

3

Visit cybercrime.gov.in and file a complaint

Go to the National Cyber Crime Reporting Portal, accept the terms, choose the correct category (financial fraud or other cybercrime), fill in the incident details including dates, amounts, and suspect information, upload your evidence, and submit. Note the acknowledgement number provided.

4

Track your complaint

Use the acknowledgement number to track the status of your complaint on the portal. You should receive a response or referral to the relevant police unit within a few days for financial fraud cases.

5

Visit the Cyber Crime Cell or police station if needed

If the online complaint is not acted upon within 15–30 days, or if the offence is serious, visit your city or district Cyber Crime Cell in person. Carry your written complaint, copies of evidence, photo ID, and the portal acknowledgement number. Demand that an FIR be registered.

6

Demand a Zero FIR if jurisdiction is unclear

If the cyber crime cell claims lack of jurisdiction, insist on a Zero FIR at the nearest police station under BNSS, 2023. Any station must accept it and transfer it to the correct jurisdiction. Refusal is unlawful for cognisable offences.

7

Escalate through CPGRAMS if unresponsive

If police remain unresponsive, file a grievance on the Centralised Public Grievance Redress portal (pgportal.gov.in) against the concerned police department, or contact the State Cyber Crime nodal officer.

8

Consult a cyber law advocate for complex cases

For significant financial loss, sextortion, data breaches, or where you need to approach the High Court, seek guidance from a qualified cyber law advocate. You can find advocates by city and practice area on LegalFirms.in.

9

Explore compensation remedies

Simultaneously with the criminal complaint, consider a consumer forum complaint under the Consumer Protection Act, 2019 if a regulated service provider was at fault, or a civil damages suit, or an application to the IT Act Adjudicating Officer for data-breach-related claims.

Need Legal Help?

Connect with verified legal advocates near you — free enquiry, no commitment.

Frequently Asked Questions

There is no statutory limitation period for filing a cybercrime complaint with the police. However, in financial fraud cases, acting within the first hour by calling 1930 dramatically improves the chances of freezing the fraudulent amount. For civil compensation suits, the Limitation Act, 1963 generally prescribes a three-year period from the date of the cause of action.

Yes. The National Cyber Crime Reporting Portal (cybercrime.gov.in) allows anonymous complaints for crimes against women and children. However, anonymous complaints may receive lower priority and cannot be tracked. For financial fraud, you must identify yourself so that recovery efforts can be directed to you.

The National Cybercrime Helpline number is 1930. It operates under the Ministry of Home Affairs and is specifically meant for financial cyber fraud. Calling immediately after a fraud gives the best chance of freezing the money before it is withdrawn by the fraudster.

If a police officer refuses to register an FIR for a cognisable cybercrime offence, you can: (1) send your complaint in writing by registered post to the Superintendent of Police; (2) file a complaint before the Executive Magistrate under Section 175 of the BNSS, 2023; or (3) approach the High Court with a writ petition seeking a direction to register the FIR. The Supreme Court in Lalita Kumari v. Govt. of UP (2014) held that registration of an FIR is mandatory for cognisable offences.

Online financial fraud is primarily prosecuted under Section 66D of the Information Technology Act, 2000 (cheating by personation using a computer resource) and Section 318 of the Bharatiya Nyaya Sanhita, 2023 (cheating). Additional provisions under the Payment and Settlement Systems Act, 2007 and RBI guidelines on unauthorised electronic transactions may also apply, especially for chargebacks through banks.

Recovery is not guaranteed, but acting fast increases the chance. Call 1930 immediately to report the fraud — the helpline coordinates with banks to freeze suspect accounts. You can also approach your bank with a written complaint and reference the RBI's framework on customer liability for unauthorised transactions (RBI circular on limiting liability of customers in unauthorised electronic banking transactions). If the bank is unresponsive, escalate to the RBI Banking Ombudsman through the RBI's Integrated Ombudsman Scheme portal.

Related Legal Guides

Documents and steps on Legal Drive

Recent Judgments on Cyber Crime

View all judgments →

Recent decisions from the Supreme Court and High Courts, editorially reviewed with AI-generated headnotes. For research and informational purposes.

Judgments are summarised for research purposes and are not a substitute for legal advice.