Consider a 16-year-old from Pune who discovers morphed photographs of herself circulating on Instagram with sexually explicit captions. Classmates forward screenshots; her phone fills with notifications within hours. The person behind it—a former friend—threatens to send the images to her school principal unless she pays money. Her mother searches “cyberbullying complaint India” late at night, desperate for a step-by-step process that matches current law and actually works. This guide sets out that process.
Citizen Crisis Response Network
Cyberbullying, sextortion, and digital harassment can damage reputations, mental health, and safety within hours. The Citizen Crisis Response Network equips you with statute-backed complaint templates, evidence-preservation checklists, and escalation workflows that push police to act. When images spread, time matters—this guide turns panic into documented, legally admissible steps.
To file a cyberbullying complaint in India in 2026: (1) Screenshot all messages, URLs, sender profiles with timestamps; (2) lodge a zero-FIR at the nearest police station or report online via https://cybercrime.gov.in citing BNS Section 78 (stalking), Section 79 (word/gesture to insult modesty of a woman), or Section 351 (criminal intimidation); (3) mention IT Act 2000 Section 67 for obscene electronic content; (4) request takedown to platforms under the IT Rules 2021; (5) preserve phone/laptop as-is for forensic imaging; (6) escalate delayed investigations to the Superintendent of Police (Cyber Cell); (7) invoke NCPCR jurisdiction if the victim is under 18.
Cyberbullying lacks a standalone statutory definition in India; instead, it triggers multiple penal provisions under the Bharatiya Nyaya Sanhita 2023 (BNS), the IT Act 2000, and the Protection of Children from Sexual Offences Act 2012 (POCSO) when the victim is a minor. Cyberbullying encompasses repeated harassment via electronic communication—texts, emails, social-media posts, deep-fakes, morphed images, doxxing (publishing private information), impersonation, threats, or group-based ridicule—that causes emotional distress, fear, or reputational harm.
Threshold elements courts examine:
In Shreya Singhal v. Union of India (2015) 5 SCC 1, the Supreme Court struck down Section 66A of the IT Act 2000 for vagueness but left intact Section 67 (obscene electronic material) and Section 67A (sexually explicit content), both of which are invoked in cyberbullying prosecutions alongside BNS provisions. Practically, complaints are strongest when backed by demonstrable harm—reputational injury, documented mental-health impact (counsellor or psychiatrist reports), job loss, or school records—rather than mere “annoyance”.
Most citizens miss this — Police often dismiss cyberbullying as “Facebook fights”. Cite specific BNS sections and attach medical/counsellor reports documenting emotional distress to help convert a complaint from “not serious” into an actionable FIR.
The Bharatiya Nyaya Sanhita 2023 replaced the Indian Penal Code 1860 with effect from 1 July 2024; complaints relating to conduct on or after that date cite BNS sections:
| BNS Section | Offence | Punishment | Cyberbullying Application |
|---|---|---|---|
| Section 78 | Stalking (including electronic contact despite clear refusal) | First conviction up to 3 years + fine; subsequent conviction up to 5 years + fine | Repeated Instagram DMs, WhatsApp messages after blocking |
| Section 79 | Word, gesture or act intended to insult the modesty of a woman | Up to 3 years + fine | Sexually explicit comments on photos, lewd memes targeting the victim |
| Section 351(2) | Criminal intimidation | Up to 2 years, or fine, or both | “I'll leak your nudes to your college group” |
| Section 351(3) | Criminal intimidation by threat to cause death or grievous hurt, or to impute unchastity to a woman | Up to 7 years, or fine, or both | A threat to kill or to defame, sent via electronic communication |
| Section 356 | Defamation | Up to 2 years, or fine, or community service, or both | False allegations posted on Facebook to harm reputation |
Additional statutes triggered:
Do this immediately — When drafting your FIR, list all applicable sections (BNS + IT Act + POCSO if a minor is involved). Omitting a section at the FIR stage can weaken the prosecution later, so set out every provision that fits the facts.
For the full text of the RTI Act and how to use information requests to track your complaint, see https://righttoinformation.wiki/rti-act-2005-complete-guide.
The National Cyber Crime Reporting Portal (https://cybercrime.gov.in), operated by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs, accepts complaints 24×7 and routes them to State Cyber Crime Police Stations.
Filing workflow:
Parallel physical complaint: An electronic complaint registered on the portal does not, by itself, always equal a registered FIR. If there is no police contact within a reasonable time, visit the nearest police station and lodge a zero-FIR—permissible nationwide. Under BNSS 2023 Section 173, any police station must record information disclosing a cognizable offence and transfer it to the jurisdictional station for investigation.
Citizen tip — Take a printout of the cybercrime.gov.in acknowledgment PDF when visiting a police station. A documented audit trail makes it harder for officers to dismiss the complaint as “not serious”.
Cyberbullying prosecutions can collapse when electronic evidence is inadmissible. Since 1 July 2024, the admissibility of electronic records is governed by the Bharatiya Sakshya Adhiniyam 2023 (BSA), Section 63, which replaced Section 65B of the Indian Evidence Act 1872. The Bharatiya Nagarik Suraksha Sanhita 2023 (BNSS) governs investigation and seizure.
Admissibility checklist (BSA 2023 Section 63):
Step-by-step evidence capture:
Warning — Morphed images can attract more than one offence: defamation (BNS Section 356) and IT Act Section 67 (obscene material). Cite each applicable provision in your complaint; forensic analysis showing that an image was morphed is valuable corroboration.
For parallel evidence-handling guidance and citizen escalation workflows, see https://righttoinformation.wiki/citizen-crisis-response-network.
Cyberbullying complaints raise jurisdictional questions: the offence may originate where the content was uploaded (often unknown), where the victim accessed it, or where the harm occurred (victim's residence/workplace). The BNSS 2023 zero-FIR provision and the Supreme Court's directions in Lalita Kumari v. Govt. of U.P. (2014) 2 SCC 1 help resolve this.
Zero-FIR rights:
Determining jurisdiction:
Cyber Cell contact:
Most State Police forces operate dedicated Cyber Crime Police Stations; check your State Police website for the local cell and its contact details. Escalate stalled investigations to that cell and to the Superintendent of Police (Cyber Cell).
Trust signal — The Ministry of Home Affairs and I4C publish cybercrime guidance and statistics on https://cybercrime.gov.in. A documented, persistent escalation—acknowledgment number, follow-ups, and dated correspondence—materially improves the chance your complaint is acted on.
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 impose due-diligence obligations on social-media intermediaries. Rule 3(1)(b) requires intermediaries to make reasonable efforts to prevent unlawful content and to remove or disable access to content on receiving a court order or a notification by the appropriate government or its agency. The Rules also require platforms to act on certain complaints within fixed timelines—particularly for non-consensual intimate imagery and content depicting nudity—and to publish a Grievance Officer for India.
How to trigger takedowns:
Subject: Urgent Takedown Request - Cyberbullying / Non-Consensual Intimate Images - FIR No. [XXX] To: Grievance Officer, [Platform Name] Date: [DD/MM/YYYY] I, [Your Name], resident of [Address], have filed FIR No. [XXXX] dated [DD/MM/YYYY] at [Police Station] against unknown offenders for cyberbullying under BNS Sections 78, 79, 351 and IT Act Section 67. The following URLs contain morphed obscene images / defamatory content / threat messages, which I request be removed under the IT Rules 2021: 1. [Full URL] 2. [Full URL] 3. [Full URL] I request immediate removal and disclosure of account registration details (IP address, mobile number, email) to the investigating officer [IO Name, Badge No.] at [Police Station Email]. Attached: FIR copy, screenshots with timestamps, and my ID for verification. [Your Signature] [Contact: Mobile, Email]
Most citizens miss this — Platforms generally prioritise government/court takedown orders over user complaints. Push your investigating officer to issue the notice, and use the RTI Act 2005 (https://righttoinformation.wiki/rti-act-2005-complete-guide) to ask “What action has been taken on my request dated [X] for a platform takedown notice?” if it is delayed.
When the victim is under 18, the National Commission for Protection of Child Rights (NCPCR) (https://ncpcr.gov.in) has jurisdiction under the Commissions for Protection of Child Rights Act 2005. NCPCR can issue directions to police, schools, and others, and can take up cases of delayed police action.
NCPCR intervention triggers:
Complaint procedure:
Do this immediately — If your child is the victim, do not delay NCPCR escalation. File parallel complaints (cybercrime.gov.in + NCPCR + police station) the same day; redundancy improves the chance one pathway succeeds.
For NCPCR complaint templates and citizen advocacy strategies, visit https://righttoinformation.wiki/citizen-crisis-response-network.
Alongside genuine cyberbullying complaints, “digital arrest” scams have surged sharply over 2024-2026: fraudsters impersonate police or Enforcement Directorate officers over video calls, claim the victim is implicated in a crime, display fake “arrest warrants”, and extort money under threat of immediate arrest. Victims, isolated during long video “interrogations”, are pressured to transfer funds. The Supreme Court took suo motu cognisance of the rise in such scams in late 2025 and sought action from the Centre and investigating agencies, and the I4C/MHA has repeatedly warned citizens that “digital arrest” is not a real legal procedure.
Red flags distinguishing a scam from genuine police contact:
| Genuine Cyber Police | Digital Arrest Scam |
|---|---|
| Sends written summons on letterhead with a station seal, or email from an official .gov.in domain | WhatsApp/video call from an unknown number; an “officer” in uniform (often stock footage or a deep-fake) |
| Provides a badge number, station address, and verifiable FIR number | Refuses to share a badge number; threatens that “your case will become public if you verify” |
| Never demands immediate payment; lawful fines are paid via official challan to the government treasury | Demands UPI/bank transfer to “verify innocence” or pay a “court fee” |
| Allows you to visit the station physically and to consult a lawyer | Insists on a long video call; tells you to stay alone and not inform family |
If you receive a digital arrest call:
Warning — Never transfer money during a video call claiming to be the police. No genuine law-enforcement officer asks for payment via UPI to “prove innocence”. Hang up, consult family or a lawyer, then verify.
Sextortion—extortion using nude/intimate images as leverage—is among the most acute cyberbullying variants. BNS Section 351 (criminal intimidation) + IT Act Section 67 (obscene-material transmission) + POCSO Act Section 11/12 (if the victim is a minor) typically apply.
Emergency response (first 24 hours):
Platform-specific actions:
Medical and legal support:
Compensation: Under the BNSS 2023 Section 396 victim-compensation scheme, victims (or their dependents) can apply to the District/State Legal Services Authority for compensation, including where the offender is not traced. The quantum is decided under the applicable State scheme. Apply with your FIR, medical bills, and counsellor reports.
Trust signal — The national cybercrime helpline 1930 (toll-free), operated by I4C under the Ministry of Home Affairs, takes reports of cyber financial fraud (including sextortion-linked extortion) and helps initiate rapid account-freezing; complete your report afterwards on https://cybercrime.gov.in.
| Myth | Reality |
|---|---|
| “Police only act if you know the bully's real name and address.” | Zero-FIR and cybercrime.gov.in accept “unknown offender”; digital forensics can trace IPs, device IDs, and SIM-registration details. |
| “Screenshots aren't legal evidence.” | Screenshots are admissible when accompanied by a certificate under BSA 2023 Section 63 (which replaced Section 65B of the Indian Evidence Act 1872). Courts regularly rely on properly proved electronic records, including WhatsApp messages. |
| “If I deactivate my account, the case closes.” | Platforms retain certain data for a period and respond to lawful requests; police can seek records even after account deletion. Deactivation may hinder ongoing evidence collection—coordinate with the investigating officer first. |
| “Cyberbullying is non-cognizable; you need Magistrate permission.” | The serious BNS provisions (e.g. Sections 78, 79, 351(3)) and IT Act Sections 67/67A are cognizable; police can register an FIR without a Magistrate's order. Check the classification in the BNSS First Schedule for the specific section. |
| “Blocking the bully solves the problem.” | Blocking stops direct contact but not public defamation, morphed-image distribution, or harassment via proxy accounts. Legal action is needed to remove existing content and deter further abuse. |
| “Only famous people win cyberbullying cases.” | Courts decide these cases on the quality of evidence, not the complainant's social status; ordinary students, homemakers, and employees pursue and win such cases. |
Below is a template adaptable to your situation. Fill the bracketed placeholders; attach it as a typed complaint when visiting a police station or upload it as a PDF to cybercrime.gov.in.
To, The Station House Officer, [Police Station Name], [District, State - PIN] Date: [DD/MM/YYYY] Subject: FIR against unknown offender(s) for cyberbullying, criminal intimidation, and transmission of obscene material Respected Sir/Madam, I, [Your Full Name], aged [XX] years, residing at [Full Address with PIN], holding ID proof [type and masked number, copy attached], hereby lodge this complaint against unknown offender(s) under the following provisions: 1. Bharatiya Nyaya Sanhita 2023 Section 78 (Stalking, including electronic communication) 2. Bharatiya Nyaya Sanhita 2023 Section 79 (Word/gesture intended to insult the modesty of a woman) 3. Bharatiya Nyaya Sanhita 2023 Section 351 (Criminal intimidation) 4. Information Technology Act 2000 Section 67 (Publishing obscene material in electronic form) [If victim under 18: 5. POCSO Act 2012 Section 11/12 (Sexual harassment of a child)] FACTS OF THE CASE: On [DD/MM/YYYY] at approximately [HH:MM], I discovered that [Instagram user @username / Facebook profile "Name" / WhatsApp number +91-XXXXXXXXXX] had posted [morphed obscene photographs of me / defamatory allegations / sexually explicit comments on my profile] on [platform name]. The post/message read: "[Quote exact text]." Between [Start Date] and [End Date], the accused: - Sent repeated threatening messages via WhatsApp (screenshots attached as Annexure A). - Created a fake account "@[username]" impersonating me and posted morphed images (screenshots attached as Annexure B; forensic morph-detection report from [Lab Name], if obtained, attached as Annexure C). - Forwarded obscene content to my college/work WhatsApp group, causing severe mental distress and reputational harm. - Demanded ₹[Amount] via UPI ID [xyz@oksbi], threatening to send images to my employer [Company Name] if I did not pay (demand message screenshot attached as Annexure D). I have suffered anxiety, sleeplessness and distress; I consulted [Dr. Name], [Hospital], who has documented the same (medical certificate attached as Annexure E). EVIDENCE SUBMITTED: 1. Screenshots with timestamps (Annexure A-D) 2. Screen recording of the relevant content (on USB drive) 3. Email headers showing the sender details (Annexure F) 4. Forensic morph-detection report, if obtained (Annexure C) 5. Medical certificate (Annexure E) 6. Witness statement from [Name], who received forwarded content (Annexure G) PRAYER: I request your good office to: - Register an FIR under the above sections. - Issue a takedown notice to [Platform Name]'s Grievance Officer under the IT Rules 2021. - Conduct forensic imaging of my [mobile phone model] (I undertake to produce the device as-is; IMEI [number]). - Trace and proceed against the accused through digital forensics (IP logs, SIM registration, device ID). I affirm that the above facts are true to the best of my knowledge. [Your Signature] [Name in BLOCK LETTERS] Contact: [Mobile], [Email] Enclosures: [List Annexures A-G]
Citizen tip — Police often ask complainants to “write a simple application”. Do not dilute the specifics. A complaint that cites the statutes, quantifies the harm, lists evidence by annexure, and includes a clear prayer for relief is harder to ignore and easier to investigate.
Generally, no—FIR registration and the cybercrime.gov.in portal require complainant identity (an ID proof) for an FIR. However, a victim's identity is protected during trial for sexual offences (closed-door proceedings, and special protections under the POCSO Act where the victim is a minor). In high-risk cases, the Witness Protection Scheme 2018 (endorsed by the Supreme Court) allows protective measures; this is sought through the public prosecutor.
There is no single fixed deadline; timelines depend on the offence and the complexity of tracing an anonymous accused. Under the BNSS 2023, the investigating officer is required to keep the informant/victim updated on the progress of the investigation (within the periods specified in the BNSS). If the investigation stalls, you can escalate to the Superintendent of Police (Cyber Cell), use the RTI Act 2005 (https://righttoinformation.wiki/rti-act-2005-complete-guide) to ask for the status, and—in cases of unreasonable delay—consider a writ petition under Article 226 of the Constitution in the High Court.
IT Act 2000 Section 75 provides for extraterritorial application: offences under the Act committed outside India can be prosecuted if they involve a computer, computer system or computer network located in India. In practice, police seek Mutual Legal Assistance through the Ministry of Home Affairs/External Affairs (which can take several months), and may use Interpol channels for serious offences. Meanwhile, platforms' India Grievance Officers remain responsible for acting on lawful content-removal requests regardless of where the content was uploaded.
Yes. You can file a civil defamation suit seeking damages and an injunction against further publication in the appropriate civil court. Civil and criminal proceedings run independently; a criminal conviction (e.g. BNS Section 356 defamation) can support a civil damages claim. Limitation periods apply under the Limitation Act 1963, so consult a lawyer promptly to file in time.
Deleted data may still be recoverable. Immediately stop using the device to prevent data being overwritten, and hand the phone/laptop to the police for forensic imaging; forensic tools can often recover deleted chats, photos and browsing history from device memory. Recovery is not guaranteed, so the sooner the device is preserved and examined, the better the prospects.