Practice area · Haryana
Online fraud and UPI scam defence
Cyber fraud FIRs sweep up organisers, intermediaries and people whose only connection is a credit they cannot explain. Which of those you are is the whole case, and it has to be established from the record.
- IT Act 66C
- IT Act 66D
- BNS 318
- BNS 319
- BNS 336
The provisions used in an online fraud FIR
A typical online fraud FIR in Haryana draws on two statutes at once. From the Information Technology Act, 2000: Section 66C for identity theft, covering fraudulent use of another person's password, digital signature or unique identification feature, and Section 66D for cheating by personation using a computer resource or communication device. Both carry imprisonment of up to three years and a fine of up to one lakh rupees. Section 43 and Section 66 cover unauthorised access and computer-related offences, and Section 67 deals with obscene material in electronic form.
From the Bharatiya Nyaya Sanhita, 2023: Section 318 for cheating, with punishment graded by sub-section, and Section 319 for cheating by personation, which expressly reaches impersonation through fake emails, websites, social media profiles and digital identities. Where forged electronic records are involved — fake screenshots, altered PDFs, spoofed payment confirmations — the forgery provisions including Section 336 may also be invoked.
The case patterns that recur
UPI, QR and payment fraud
Reversed or disputed transfers, collect requests presented as payments, and QR codes that debit rather than credit. These generate the largest volume of complaints and the largest number of account freezes, because the money moves through several accounts within minutes.
Investment and trading app schemes
Telegram and WhatsApp groups promoting stock tips, fake trading platforms showing paper profits that cannot be withdrawn, and IPO allotment promises. Local agents who introduced others to the scheme are routinely named alongside the organisers even where they invested and lost money themselves.
Task and part-time job scams
Small payments for completing simple tasks, escalating to larger deposits that are never returned. Prevalent among students and young professionals across Rohtak, Sonipat and Gurugram.
Loan app harassment
Recovery operations that misuse a borrower's contact list, circulate morphed photographs and issue threats. This is worth stating plainly: that conduct is an offence in itself, and a complaint can be made against it even where the underlying loan is genuinely outstanding.
Impersonation and account takeover
Fake profiles, cloned business pages, spoofed bank helplines and OTP-based takeovers, prosecuted under Sections 66C and 66D with Section 319 BNS.
Mule and rented account allegations
The largest category of people who arrive genuinely bewildered. An account received a credit, or was lent to someone, and the holder is now named in an FIR filed hundreds of kilometres away.
Where the defence actually lies
Cyber fraud cases are documentary before they are anything else, and the defence is built from the same records the prosecution relies on.
- Intention at the time of the inducement. Cheating requires dishonest intention when the inducement was made. The Supreme Court has reiterated that this must be shown, not inferred from a later failure to perform. A transaction that went wrong is not automatically a fraud.
- Knowledge. Abetment and conspiracy require knowledge of the scheme. A credit alone does not supply it.
- Attribution. Whether the device, IP address, SIM or account can actually be tied to you rather than to a number registered in your name or a handset used by someone else.
- Integrity of the electronic evidence. Under the Bharatiya Sakshya Adhiniyam, 2023 electronic records must be produced with the required certification. Screenshots without provenance and logs without a proper certificate are open to challenge.
- Consideration. Where the disputed credit was payment for goods supplied or services rendered, that is a defence — and it is proved with invoices, delivery records and correspondence, not with assertions.
Do not clean up your phone. Deleting chats, uninstalling apps or closing accounts after a notice arrives is read as destruction of evidence and does far more damage than whatever the messages contained. Preserve everything, including material that looks unhelpful, and let it be assessed properly.
Where this connects to the rest of the case
An online fraud allegation rarely arrives alone. It usually comes with a frozen account that needs immediate attention, a risk of arrest that calls for anticipatory bail or regular bail, and sometimes a case that should never have been registered at all and can be taken to quashing. Which of those comes first depends on what is causing the most damage right now.
FAQ
Online Fraud Defence — common questions
I received money from a fraud in my account but I did not commit any fraud. What happens to me?
Receiving a credit is not by itself an offence. Cheating under Section 318 BNS requires deception and dishonest intention, and abetment requires knowledge of the scheme. A Mumbai court has acquitted an accused on the footing that mere credit of defrauded money into a bank account, without proof of criminal conspiracy with the main accused, does not amount to an offence. The practical task is to establish the source of the credit, the absence of any dealing with the complainant, and the ordinary use of the account.
What is the punishment under Section 66D of the IT Act?
Cheating by personation using a computer resource or communication device under Section 66D is punishable with imprisonment of up to three years and a fine of up to one lakh rupees. Identity theft under Section 66C carries the same maximum. Because cyber FIRs almost always add cheating provisions from the Bharatiya Nyaya Sanhita, the exposure in a given case is usually driven by which sub-section of Section 318 has been invoked rather than by the IT Act sections alone.
Loan app agents are threatening me and messaging my contacts. Is that a crime?
Yes. Circulating morphed photographs, misusing a contact list obtained through app permissions, and issuing threats are offences regardless of whether the loan is outstanding. A complaint can be filed at the cyber cell and on the national portal, and the platform can be asked to take the material down. Being in default on a loan does not license criminal intimidation, and it is worth saying so clearly because a great many people endure this without reporting it.
The police say my IP address or phone number was used. Is that conclusive?
No. A SIM registered in your name is not proof that you used the handset, and an IP address identifies a connection rather than a person — shared connections, spoofing and compromised devices are all real. Under the Bharatiya Sakshya Adhiniyam electronic records also have to be produced with the required certification. Attribution has to be established, and it is frequently where these cases are weakest.
Can I be prosecuted in Haryana if the complaint was filed in another state?
Yes. Cyber offences are ordinarily investigated where the consequence occurred, which is usually where the victim is, and that state's police can seek your custody and freeze your account through your bank. This is why identifying every complaint on the transaction chain matters: bail in one FIR gives no protection against arrest on another, and a plan that addresses only the FIR you know about is incomplete.
Speak to the advocate
A cyber matter gets harder every day it is left alone.
Freeze orders, notices under Section 35 BNSS and arrest in cyber cases rarely wait for office hours. Call or send a message with the FIR number, the notice, or the bank’s freeze intimation, and you will get a straight answer on what can be done and in which court.