Cyberbullying Complaint Guide India (2026)

Consider a 16-year-old from Pune who discovers morphed photographs of herself circulating on Instagram with sexually explicit captions. Classmates forward screenshots; her phone fills with notifications within hours. The person behind it—a former friend—threatens to send the images to her school principal unless she pays money. Her mother searches “cyberbullying complaint India” late at night, desperate for a step-by-step process that matches current law and actually works. This guide sets out that process.

Citizen Crisis Response Network

Cyberbullying, sextortion, and digital harassment can damage reputations, mental health, and safety within hours. The Citizen Crisis Response Network equips you with statute-backed complaint templates, evidence-preservation checklists, and escalation workflows that push police to act. When images spread, time matters—this guide turns panic into documented, legally admissible steps.

To file a cyberbullying complaint in India in 2026: (1) Screenshot all messages, URLs, sender profiles with timestamps; (2) lodge a zero-FIR at the nearest police station or report online via https://cybercrime.gov.in citing BNS Section 78 (stalking), Section 79 (word/gesture to insult modesty of a woman), or Section 351 (criminal intimidation); (3) mention IT Act 2000 Section 67 for obscene electronic content; (4) request takedown to platforms under the IT Rules 2021; (5) preserve phone/laptop as-is for forensic imaging; (6) escalate delayed investigations to the Superintendent of Police (Cyber Cell); (7) invoke NCPCR jurisdiction if the victim is under 18.

• What qualifies as cyberbullying under Indian law 2026
• BNS 2024 sections applicable to online harassment
• Step-by-step complaint filing on cybercrime.gov.in portal
• Evidence collection and chain-of-custody rules
• Police jurisdiction and zero-FIR rights
• Platform takedown requests under IT Rules 2021
• NCPCR escalation for child victims
• Digital arrest and fake cyber-police scams
• Sextortion complaint procedure
• Myth vs reality in cyberbullying cases
• Sample cyberbullying FIR text
• FAQ

Cyberbullying lacks a standalone statutory definition in India; instead, it triggers multiple penal provisions under the Bharatiya Nyaya Sanhita 2023 (BNS), the IT Act 2000, and the Protection of Children from Sexual Offences Act 2012 (POCSO) when the victim is a minor. Cyberbullying encompasses repeated harassment via electronic communication—texts, emails, social-media posts, deep-fakes, morphed images, doxxing (publishing private information), impersonation, threats, or group-based ridicule—that causes emotional distress, fear, or reputational harm.

Threshold elements courts examine:

1. Intentionality: Casual rude remarks may not qualify; systematic campaigns, planned morphing, or coordinated pile-ons establish intent.
2. Repetition or severity: A single vulgar comment is harassment; daily tags, share-chains, or distribution to a victim's workplace/school elevate it to bullying.
3. Power imbalance or target vulnerability: Exploiting a victim's age, gender, caste, disability, or private content (nude photographs, medical records) aggravates culpability.

In Shreya Singhal v. Union of India (2015) 5 SCC 1, the Supreme Court struck down Section 66A of the IT Act 2000 for vagueness but left intact Section 67 (obscene electronic material) and Section 67A (sexually explicit content), both of which are invoked in cyberbullying prosecutions alongside BNS provisions. Practically, complaints are strongest when backed by demonstrable harm—reputational injury, documented mental-health impact (counsellor or psychiatrist reports), job loss, or school records—rather than mere “annoyance”.

Most citizens miss this — Police often dismiss cyberbullying as “Facebook fights”. Cite specific BNS sections and attach medical/counsellor reports documenting emotional distress to help convert a complaint from “not serious” into an actionable FIR.

The Bharatiya Nyaya Sanhita 2023 replaced the Indian Penal Code 1860 with effect from 1 July 2024; complaints relating to conduct on or after that date cite BNS sections:

Additional statutes triggered:

• IT Act 2000 Section 67: Publishing/transmitting obscene material in electronic form (on first conviction, imprisonment up to 3 years and fine up to ₹5 lakh).
• IT Act 2000 Section 67A: Publishing/transmitting sexually explicit material in electronic form (on first conviction, imprisonment up to 5 years and fine up to ₹10 lakh).
• POCSO Act 2012 Section 11/12: Sexual harassment of a child (up to 3 years + fine where the victim is under 18).
• POCSO Act 2012 Section 13/14: Use of a child for pornographic purposes (imprisonment of at least 5 years + fine, with higher punishment on repeat conviction).

Do this immediately — When drafting your FIR, list all applicable sections (BNS + IT Act + POCSO if a minor is involved). Omitting a section at the FIR stage can weaken the prosecution later, so set out every provision that fits the facts.

For the full text of the RTI Act and how to use information requests to track your complaint, see https://righttoinformation.wiki/rti-act-2005-complete-guide.

The National Cyber Crime Reporting Portal (https://cybercrime.gov.in), operated by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs, accepts complaints 24×7 and routes them to State Cyber Crime Police Stations.

Filing workflow:

1. Step 1: Navigate to https://cybercrime.gov.in → “Report Cyber Crime” → select “Report Women/Child Related Crime” if applicable.
2. Step 2: Register using mobile OTP; provide an ID proof (Aadhaar, Voter ID, or Driving Licence).
3. Step 3: Select the offence category, e.g. “Cyber Bullying / Stalking / Sexting” or “Publishing/Transmitting Obscene Material”.
4. Step 4: Enter incident details:
   • Date-time of first occurrence and most recent instance.
   • Social-media platform(s): Instagram, Facebook, Snapchat, WhatsApp, Telegram.
   • Suspect details: username, profile URL, mobile number if known (“unknown offender” is acceptable).
   • Incident description: a chronological narrative mentioning morphed images, threat language, and distribution scope.
5. Step 5: Upload evidence (image, PDF or video; follow the size/format limits shown on the portal):
   • Screenshots with visible timestamps, sender names, and platform UI (do NOT crop excessively).
   • Screen-recordings of ephemeral content (Snapchat, Instagram Stories).
   • Email headers (in Gmail: “Show original”).
   • Bank/UPI statements if an extortion payment was demanded.
6. Step 6: Submit and note the acknowledgment number. The portal sends a PDF receipt to your registered email.
7. Step 7: The portal forwards the complaint to the jurisdictional Cyber Police Station, and you receive updates by SMS/email.

Parallel physical complaint: An electronic complaint registered on the portal does not, by itself, always equal a registered FIR. If there is no police contact within a reasonable time, visit the nearest police station and lodge a zero-FIR—permissible nationwide. Under BNSS 2023 Section 173, any police station must record information disclosing a cognizable offence and transfer it to the jurisdictional station for investigation.

Citizen tip — Take a printout of the cybercrime.gov.in acknowledgment PDF when visiting a police station. A documented audit trail makes it harder for officers to dismiss the complaint as “not serious”.

Cyberbullying prosecutions can collapse when electronic evidence is inadmissible. Since 1 July 2024, the admissibility of electronic records is governed by the Bharatiya Sakshya Adhiniyam 2023 (BSA), Section 63, which replaced Section 65B of the Indian Evidence Act 1872. The Bharatiya Nagarik Suraksha Sanhita 2023 (BNSS) governs investigation and seizure.

Admissibility checklist (BSA 2023 Section 63):

1. Section 63 certificate: The person who operated the device (the victim, or a forensic analyst) must certify how the electronic record was produced and that it is a true reproduction. Police typically obtain this certificate during forensic imaging.
2. Metadata preservation: Screenshots alone may be challenged; forensic extraction of message databases with timestamps, sender IDs, and logs strengthens the record. Private cyber-forensic labs charge a fee per device for this work.
3. Chain of custody: Log every transfer—victim's phone → forensic examiner → police malkhana (evidence room) → court. Each custodian signs a seizure memo.

Step-by-step evidence capture:

1. Do NOT delete messages or deactivate accounts even after filing a complaint; courts may need live verification.
2. Screenshots: Use native OS tools (Android: Power + Volume Down; iPhone: Side + Volume Up). Third-party apps may strip metadata.
3. URLs: Use https://archive.is or the Wayback Machine (https://web.archive.org) to snapshot posts before deletion; archived URLs can corroborate other evidence.
4. Witness statements: If classmates/colleagues witnessed harassment or received forwarded content, collect signed statements (and, where appropriate, statements recorded before a Magistrate under the BNSS).
5. Platform preservation requests: Email the platform's grievance/abuse channel with your complaint/FIR number, requesting that account and content data be preserved pending investigation.

Warning — Morphed images can attract more than one offence: defamation (BNS Section 356) and IT Act Section 67 (obscene material). Cite each applicable provision in your complaint; forensic analysis showing that an image was morphed is valuable corroboration.

For parallel evidence-handling guidance and citizen escalation workflows, see https://righttoinformation.wiki/citizen-crisis-response-network.

Cyberbullying complaints raise jurisdictional questions: the offence may originate where the content was uploaded (often unknown), where the victim accessed it, or where the harm occurred (victim's residence/workplace). The BNSS 2023 zero-FIR provision and the Supreme Court's directions in Lalita Kumari v. Govt. of U.P. (2014) 2 SCC 1 help resolve this.

Zero-FIR rights:

1. Under Lalita Kumari, registration of an FIR is mandatory when the information discloses a cognizable offence; police cannot refuse on territorial-jurisdiction grounds.
2. The station records the FIR (a “zero-FIR” if it lacks territorial jurisdiction), assigns a number, and transfers the case to the jurisdictional police station where investigation continues.
3. If a station refuses to register a cognizable complaint, note the officer's name/badge number and escalate to the Superintendent of Police (Cyber Cell). You can also use the RTI route to ask what action was taken.

Determining jurisdiction:

1. Where the offence was committed: server location (often impractical for foreign platforms) or the victim's location when the content was accessed.
2. Where the accused resides: if known.
3. Where the consequence occurred: the victim's district, where reputational or other harm was suffered.

Cyber Cell contact:

Most State Police forces operate dedicated Cyber Crime Police Stations; check your State Police website for the local cell and its contact details. Escalate stalled investigations to that cell and to the Superintendent of Police (Cyber Cell).

Trust signal — The Ministry of Home Affairs and I4C publish cybercrime guidance and statistics on https://cybercrime.gov.in. A documented, persistent escalation—acknowledgment number, follow-ups, and dated correspondence—materially improves the chance your complaint is acted on.

The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 impose due-diligence obligations on social-media intermediaries. Rule 3(1)(b) requires intermediaries to make reasonable efforts to prevent unlawful content and to remove or disable access to content on receiving a court order or a notification by the appropriate government or its agency. The Rules also require platforms to act on certain complaints within fixed timelines—particularly for non-consensual intimate imagery and content depicting nudity—and to publish a Grievance Officer for India.

How to trigger takedowns:

1. In-app reporting: Instagram → Report → Bullying or Harassment; Facebook → Report Post → Harassment; WhatsApp → Report Contact (note that end-to-end encryption limits content review to account metadata).
2. Legal escalation: Email the platform's Grievance Officer (mandatory under the Rules; the name is published on the platform's India website). Template:

Subject: Urgent Takedown Request - Cyberbullying / Non-Consensual Intimate Images - FIR No. [XXX]

To: Grievance Officer, [Platform Name]

Date: [DD/MM/YYYY]

I, [Your Name], resident of [Address], have filed FIR No. [XXXX] dated [DD/MM/YYYY] at [Police Station] against unknown offenders for cyberbullying under BNS Sections 78, 79, 351 and IT Act Section 67.

The following URLs contain morphed obscene images / defamatory content / threat messages, which I request be removed under the IT Rules 2021:

1. [Full URL]
2. [Full URL]
3. [Full URL]

I request immediate removal and disclosure of account registration details (IP address, mobile number, email) to the investigating officer [IO Name, Badge No.] at [Police Station Email].

Attached: FIR copy, screenshots with timestamps, and my ID for verification.

[Your Signature]
[Contact: Mobile, Email]

1. Government notification route: Ask the investigating officer to issue a takedown notice to the platform under the IT Rules 2021 via official police email. A lawful order/notification from the appropriate authority is binding on the intermediary.

Most citizens miss this — Platforms generally prioritise government/court takedown orders over user complaints. Push your investigating officer to issue the notice, and use the RTI Act 2005 (https://righttoinformation.wiki/rti-act-2005-complete-guide) to ask “What action has been taken on my request dated [X] for a platform takedown notice?” if it is delayed.

When the victim is under 18, the National Commission for Protection of Child Rights (NCPCR) (https://ncpcr.gov.in) has jurisdiction under the Commissions for Protection of Child Rights Act 2005. NCPCR can issue directions to police, schools, and others, and can take up cases of delayed police action.

NCPCR intervention triggers:

1. A cyberbullying complaint is filed but police refuse to register an FIR (note that POCSO Act 2012 Section 19 imposes a mandatory-reporting obligation).
2. School administration retaliates against the victim (suspension, victim-blaming).
3. A platform refuses to remove content despite POCSO Act violations.

Complaint procedure:

1. File a complaint through the NCPCR website https://ncpcr.gov.in (use the online complaint facility / contact details listed there).
2. Subject: “POCSO Act Violation + Delayed Police Action - [District]”.
3. Attach: a copy of the cybercrime.gov.in acknowledgment, any police refusal memo (or a statement that no FIR was registered despite a visit), a counsellor/psychiatrist note documenting trauma, and screenshots.
4. NCPCR can direct the State Commission for Protection of Child Rights (SCPCR) to coordinate with police and can seek explanations from senior officers.

Do this immediately — If your child is the victim, do not delay NCPCR escalation. File parallel complaints (cybercrime.gov.in + NCPCR + police station) the same day; redundancy improves the chance one pathway succeeds.

For NCPCR complaint templates and citizen advocacy strategies, visit https://righttoinformation.wiki/citizen-crisis-response-network.

Alongside genuine cyberbullying complaints, “digital arrest” scams have surged sharply over 2024-2026: fraudsters impersonate police or Enforcement Directorate officers over video calls, claim the victim is implicated in a crime, display fake “arrest warrants”, and extort money under threat of immediate arrest. Victims, isolated during long video “interrogations”, are pressured to transfer funds. The Supreme Court took suo motu cognisance of the rise in such scams in late 2025 and sought action from the Centre and investigating agencies, and the I4C/MHA has repeatedly warned citizens that “digital arrest” is not a real legal procedure.

Red flags distinguishing a scam from genuine police contact:

If you receive a digital arrest call:

1. Disconnect immediately; do NOT engage.
2. File a complaint on cybercrime.gov.in (or call 1930) under “Online Financial Fraud”.
3. Block the caller and report the WhatsApp account.
4. Independently verify any claim against you through official channels; never rely on details supplied by the caller.

Warning — Never transfer money during a video call claiming to be the police. No genuine law-enforcement officer asks for payment via UPI to “prove innocence”. Hang up, consult family or a lawyer, then verify.

Sextortion—extortion using nude/intimate images as leverage—is among the most acute cyberbullying variants. BNS Section 351 (criminal intimidation) + IT Act Section 67 (obscene-material transmission) + POCSO Act Section 11/12 (if the victim is a minor) typically apply.

Emergency response (first 24 hours):

1. Do NOT pay the extortionist; payment invites repeat demands and confirms the account is active.
2. Preserve evidence: screenshot demands (including any wallet addresses or UPI IDs), the content threatened (if already in your possession), and all communication channels.
3. File a cybercrime.gov.in complaint selecting the relevant obscene-content category, and lodge a parallel FIR at the nearest police station.
4. Ask the investigating officer to seek freezing of the extortionist's accounts through the bank/payment-gateway and the financial-fraud reporting mechanism (the 1930 helpline supports rapid action on financial fraud).

Platform-specific actions:

1. Instagram/Meta: use the in-app reporting for harassment and intimate-image abuse, which routes to the Trust & Safety teams.
2. WhatsApp: report the account from within the app and forward the abusive messages to the platform's grievance channel.
3. Email: forward phishing/abuse to your email provider's abuse address (for Gmail: [email protected]) with full headers.

Medical and legal support:

1. Consult a psychiatrist/clinical psychologist and obtain a certificate documenting trauma; this supports the assessment of harm in the criminal case.
2. Engage a lawyer; District Legal Services Authorities (DLSA) offer free legal aid to eligible victims (apply via https://nalsa.gov.in or your district court DLSA office).

Compensation: Under the BNSS 2023 Section 396 victim-compensation scheme, victims (or their dependents) can apply to the District/State Legal Services Authority for compensation, including where the offender is not traced. The quantum is decided under the applicable State scheme. Apply with your FIR, medical bills, and counsellor reports.

Trust signal — The national cybercrime helpline 1930 (toll-free), operated by I4C under the Ministry of Home Affairs, takes reports of cyber financial fraud (including sextortion-linked extortion) and helps initiate rapid account-freezing; complete your report afterwards on https://cybercrime.gov.in.

Below is a template adaptable to your situation. Fill the bracketed placeholders; attach it as a typed complaint when visiting a police station or upload it as a PDF to cybercrime.gov.in.

To,
The Station House Officer,
[Police Station Name],
[District, State - PIN]

Date: [DD/MM/YYYY]

Subject: FIR against unknown offender(s) for cyberbullying, criminal intimidation, and transmission of obscene material

Respected Sir/Madam,

I, [Your Full Name], aged [XX] years, residing at [Full Address with PIN], holding ID proof [type and masked number, copy attached], hereby lodge this complaint against unknown offender(s) under the following provisions:

1. Bharatiya Nyaya Sanhita 2023 Section 78 (Stalking, including electronic communication)
2. Bharatiya Nyaya Sanhita 2023 Section 79 (Word/gesture intended to insult the modesty of a woman)
3. Bharatiya Nyaya Sanhita 2023 Section 351 (Criminal intimidation)
4. Information Technology Act 2000 Section 67 (Publishing obscene material in electronic form)
[If victim under 18: 5. POCSO Act 2012 Section 11/12 (Sexual harassment of a child)]

FACTS OF THE CASE:

On [DD/MM/YYYY] at approximately [HH:MM], I discovered that [Instagram user @username / Facebook profile "Name" / WhatsApp number +91-XXXXXXXXXX] had posted [morphed obscene photographs of me / defamatory allegations / sexually explicit comments on my profile] on [platform name]. The post/message read: "[Quote exact text]."

Between [Start Date] and [End Date], the accused:
  - Sent repeated threatening messages via WhatsApp (screenshots attached as Annexure A).
  - Created a fake account "@[username]" impersonating me and posted morphed images (screenshots attached as Annexure B; forensic morph-detection report from [Lab Name], if obtained, attached as Annexure C).
  - Forwarded obscene content to my college/work WhatsApp group, causing severe mental distress and reputational harm.
  - Demanded ₹[Amount] via UPI ID [xyz@oksbi], threatening to send images to my employer [Company Name] if I did not pay (demand message screenshot attached as Annexure D).

I have suffered anxiety, sleeplessness and distress; I consulted [Dr. Name], [Hospital], who has documented the same (medical certificate attached as Annexure E).

EVIDENCE SUBMITTED:
1. Screenshots with timestamps (Annexure A-D)
2. Screen recording of the relevant content (on USB drive)
3. Email headers showing the sender details (Annexure F)
4. Forensic morph-detection report, if obtained (Annexure C)
5. Medical certificate (Annexure E)
6. Witness statement from [Name], who received forwarded content (Annexure G)

PRAYER:
I request your good office to:
  - Register an FIR under the above sections.
  - Issue a takedown notice to [Platform Name]'s Grievance Officer under the IT Rules 2021.
  - Conduct forensic imaging of my [mobile phone model] (I undertake to produce the device as-is; IMEI [number]).
  - Trace and proceed against the accused through digital forensics (IP logs, SIM registration, device ID).

I affirm that the above facts are true to the best of my knowledge.

[Your Signature]
[Name in BLOCK LETTERS]
Contact: [Mobile], [Email]

Enclosures: [List Annexures A-G]

Citizen tip — Police often ask complainants to “write a simple application”. Do not dilute the specifics. A complaint that cites the statutes, quantifies the harm, lists evidence by annexure, and includes a clear prayer for relief is harder to ignore and easier to investigate.

Generally, no—FIR registration and the cybercrime.gov.in portal require complainant identity (an ID proof) for an FIR. However, a victim's identity is protected during trial for sexual offences (closed-door proceedings, and special protections under the POCSO Act where the victim is a minor). In high-risk cases, the Witness Protection Scheme 2018 (endorsed by the Supreme Court) allows protective measures; this is sought through the public prosecutor.

There is no single fixed deadline; timelines depend on the offence and the complexity of tracing an anonymous accused. Under the BNSS 2023, the investigating officer is required to keep the informant/victim updated on the progress of the investigation (within the periods specified in the BNSS). If the investigation stalls, you can escalate to the Superintendent of Police (Cyber Cell), use the RTI Act 2005 (https://righttoinformation.wiki/rti-act-2005-complete-guide) to ask for the status, and—in cases of unreasonable delay—consider a writ petition under Article 226 of the Constitution in the High Court.

IT Act 2000 Section 75 provides for extraterritorial application: offences under the Act committed outside India can be prosecuted if they involve a computer, computer system or computer network located in India. In practice, police seek Mutual Legal Assistance through the Ministry of Home Affairs/External Affairs (which can take several months), and may use Interpol channels for serious offences. Meanwhile, platforms' India Grievance Officers remain responsible for acting on lawful content-removal requests regardless of where the content was uploaded.

Yes. You can file a civil defamation suit seeking damages and an injunction against further publication in the appropriate civil court. Civil and criminal proceedings run independently; a criminal conviction (e.g. BNS Section 356 defamation) can support a civil damages claim. Limitation periods apply under the Limitation Act 1963, so consult a lawyer promptly to file in time.

Deleted data may still be recoverable. Immediately stop using the device to prevent data being overwritten, and hand the phone/laptop to the police for forensic imaging; forensic tools can often recover deleted chats, photos and browsing history from device memory. Recovery is not guaranteed, so the sooner the device is preserved and examined, the better the prospects.