Sporadic growth in cybercrime has rocked institutions and individuals alike in India. From small-scale scams like money laundering and A/C phishing to larger scams within agencies and organizations, such as ransomware attacks, cybercrime is growing at an exponential rate. But that’s not all.
At an individual level, we witness crimes like AI-generated obscene images being leaked, which are quite unnerving for the victims. The rate, intensity, and frequency of crimes are growing every day, and it needs an acute solution at this point.
But here is the problematic part. Most of the people who suffer are clueless about where to start seeking a solution for what they face. Shall they go to the police? Or file something online? The answer is: you file an FIR. That's the first real, formal step that puts the law in motion.
If the legal side of things feels murky, consulting experienced cybercrime lawyers early on can genuinely change how your case unfolds. But even before you get there, understanding the process yourself is power.
What Is an FIR in a Cybercrime Case?
An FIR, also known as the First Information Report, is simply a written complaint that a police officer is required to record when you report a cognisable offence. That's legalese for a crime serious enough that the police can investigate without waiting for a court order. It's governed by Section 154 of the Code of Criminal Procedure (CrPC).
Now here's the part most people don't realise: a huge range of cybercrimes actually qualify as cognisable offences. We're talking about online fraud and cheating, identity theft, hacking, cyberstalking, defamation via digital platforms, voyeurism, and offences under the IT Act, 2000.
So if someone scammed you online for ₹50,000, or a person is harassing you through fake accounts, that's not a "civil dispute." That's a criminal matter, and you have every right to file an FIR.
Once you do, it triggers the investigation machinery. The police are supposed to take it seriously. It also builds a legal record that can later support civil claims like recovering money, seeking compensation, or getting restraining orders.
Where Can You Actually File an FIR Against a Cybercrime?
You've got three legitimate options, and none of them requires you to act as a lawyer for a cybercrime case.
- Your nearest police station
Under the CrPC, any police officer must accept an FIR for a cognisable offence. Location of the crime or the accused doesn't technically matter for registration.
- The Cybercrime Cell
Most major cities have a dedicated cyber police station or cell. These officers are better equipped to deal with digital evidence.
- The National Cybercrime Reporting Portal: cybercrime.gov.in.
This is the government's official online complaint system, and it works. You can file from home.
The good news is you're not stuck if one route fails. If the local station won't help. And yes, that happens more than it should. The portal is always open.
Step 1: Gather Everything Before You Go
This is the step most people skip in their panic, and then regret it. Before you file anything, spend an hour or two collecting evidence. The more you bring, the stronger your case.
- Screenshots of conversations, posts, payment pages, or threats
- Emails (full headers included, not just the body)
- Transaction IDs, bank statements, UPI references
- URLs, profile links, and usernames of the accused
- Call records and SMS logs
- Device details like your phone model, app used, date, and time of the incident
Pro Tip: Save everything to a separate device or a cloud folder immediately. Don't delete anything, even if it's disturbing to look at. Courts and investigators need original digital records, not descriptions of what they said.
If you end up working with cybercrime lawyers later, good documentation is what gives them something to work with.
Step 2: Choose Your Channel: Online or Offline?
Both routes are valid. Here's a quick comparison:
- Offline (Police Station): Best when the crime is ongoing, multi-layered, or involves physical threats. You speak to a human officer directly and can demand immediate action on urgent matters like account freezing.
- Online (cybercrime.gov.in): Best for streamlined, trackable complaints. You can file at any time from home. It auto-routes to the nearest cyber cell and generates a reference number instantly.
Some people do both. They file online first for a paper trail, then follow up in person. There's no rule against it.
How to File an FIR Against Cybercrime Offline at a Police Station?
- Walk into the nearest police station or the city's cybercrime cell. You don't need to go to the station in the area where the crime "happened". Remember that digital crimes have fuzzy geography.
- Tell the officer you want to register a complaint under Section 154 CrPC and that you believe it involves a cognisable offence. Use those exact words if you have to. Remember that the same matters legally.
- Submit a written complaint if asked. Keep it factual, chronological, and clear. Attach your evidence list.
- Get a copy of the FIR and note your FIR number. This is non-negotiable. The police are required to give you a copy.
Watch out: Some officers will try to redirect you, say they don't have jurisdiction, or suggest you "sort it out amicably." Don't accept that for a cognisable offence. Politely insist. If that doesn't work, read the next section.
How to File an FIR Against Cybercrime Online via cybercrime.gov.in
- Go to cybercrime.gov.in and select "Report other cybercrimes" from the homepage.
- Register using your mobile number and verify with OTP.
- Fill in the incident form, then select the crime category, describe what happened (dates, amounts, platforms), and upload your supporting documents.
- Submit and note your complaint reference number. Save a screenshot of the confirmation page.
This online complaint carries the same weight as an FIR in many cases and gets routed directly to the relevant police unit. You can track its status from the same portal later.
What If the Police Refuse to File Your FIR Against Cybercrime?
It happens. In many cases, the police redirect you to the cyber cell or prioritise cases that require field intervention. But why does that happen?
The experienced lawyers in India say that this is partly due to the lack of strategic ability of Indian police forces in combating cybercrimes, stemming from their lack of innovation and exclusivity. However, the IPC states that no police station can directly state that it will not receive an FIR.
However, they advise victims to file GDs instead of FIRs, so that the gravity of the attack is toned down. Remember that turning you down when you went to file an FIR is a serious crime under Section 154 CrPC.
If they do refuse, here's what you can do:
- Approach the Superintendent of Police (SP) or the Commissioner of Police directly with a written complaint.
- File a complaint before the local Judicial Magistrate under Section 156(3) CrPC. The magistrate can direct the police to register the FIR.
- Consult a lawyer for a cybercrime case who can draft a strongly worded legal application and represent you before higher authorities if needed.
A wrong cybercrime FIR lawyer, meaning one who specialises in correcting procedurally flawed or misdirected FIRs, can also step in if an FIR has been filed with incorrect sections or wrong details, and help get it amended before it derails your case.
Remember: Refusing to register an FIR for a cognisable offence is itself a legal violation. You are not without recourse.
When Should You Hire Cybercrime Lawyers After Filing an FIR?
Not every cybercrime case needs a lawyer from day one. But there are situations where getting one early is the smart move, not a luxury, but a strategic necessity.
- Cross-border fraud: crypto scams, phishing rings, or business email compromise, where money has left India. These cases require coordination that most local police aren't equipped to handle.
- Reputation harm: defamation, morphed images, and revenge content. These cases move fast online and need immediate legal intervention.
- When you also need civil remedies: if you want to recover money, get accounts frozen, or pursue compensation, a lawyer can file parallel civil applications while the FIR investigation runs.
- Counter-complaints: In some cases, the other party files a fake FIR against you first. You need representation immediately.
Cybercrime lawyers can help you preserve evidence in legally admissible formats, coordinate with the investigating officer, and make sure procedural errors don't sink a strong case.
What Happens After You File an FIR for Cybercrime?
Here's what a typical post-FIR process looks like, because a lot of people file and then wonder why nothing seems to be moving.
The police or cyber cell formally registers the FIR and assigns it to an investigating officer (IO). The IO may contact you fairly quickly. Sometimes, within days, for a statement under Section 161 CrPC. They may also reach out to your bank, the relevant app or platform, or the internet service provider to secure digital logs.
In financial fraud cases, account freezing requests go to banks on an emergency basis. When you are filing a case, remember that time really matters here. In harassment cases, platforms may be asked to preserve account data before the accused deletes everything.
Stay reachable. Respond promptly to calls from the IO. Follow up every 2–3 weeks if you don't hear anything. Being a proactive complainant actually helps move things along.
Practical Tips to Make Your FIR Stronger
- Write your complaint in clear, plain language. Stick to facts and dates, not how betrayed or devastated you felt. Courts deal in evidence, not emotion.
- Never delete anything. Not even the messages that are embarrassing or that show context you'd rather not share. Your lawyer can handle what's relevant.
- Change your passwords and enable two-factor authentication on everything immediately after the incident.
- If the case involves technical complexity (ransomware, data breaches, corporate hacking), consider getting a digital forensics expert involved alongside your legal counsel.
Protecting Yourself Going Forward
Filing an FIR is reactive. Staying safe is proactive. And it's worth spending five minutes on this.
Use strong, unique passwords for every account. A password manager makes this effortless. Set up authenticator apps instead of SMS-based OTPs wherever possible. Never share OTPs over the phone, regardless of who the caller claims to be. Your bank will never ask for it.
And if you have elderly family members at home, have the conversation with them about scams. Fake calls from "bank officials," lottery wins, and government impersonation are specifically designed to target people who aren't yet cynical about such things. That's not a character flaw, but a calculated exploit.
Navigating Legal Support: When and How to Consult Cybercrime Lawyers?
Let's be clear about something: cybercrime law is not general law. The IT Act has its own structure, evidentiary standards, and procedural quirks. Someone who knows how to handle a property dispute or a matrimonial case may not know the first thing about Section 66C or Section 67B of the IT Act.
An experienced cybercrime lawyer offers several specific advantages. They know which IPC and IT Act sections apply to your situation. Meanwhile, applying the wrong sections could mean the accused walks free on a technicality. They can help you track the investigation and push back if the police are dragging their feet. And if the police file a chargesheet that's weak or factually wrong, a good lawyer can challenge it.
Look for someone with a background in digital evidence, cyber fraud, and IT law. Ask specifically about their experience with similar cases on financial scams, identity theft, or content-based harassment, depending on what you're dealing with.
Why Prompt Action and Correct FIR Filing Matter?
Every hour counts in a cybercrime case. Digital evidence gets deleted. Money moves across accounts. Accounts get abandoned. The window to freeze funds or preserve platform data closes surprisingly fast.
Even if your case feels "small" (for instance, a ₹10,000 scam), an impersonation account with a handful of followers, filing an FIR creates a legal record that carries real weight. It may deter repeat offenders. It strengthens any civil claim you pursue. And it puts the other party on notice that you're not going to quietly absorb what happened.
Filing an FIR isn't the end of the road. It's the beginning of one.
Frequently Asked Questions (FAQs)
1. What is an FIR in a case that involves cybercrime?
It is a formal complaint lodged with the police as implied by Section 154 CrPC. It compels the police to launch a direct investigation into any cognisable cybercrime offence.
2. Where do I file an FIR for Cybercrime?
You can easily approach any police station or lodge your complaint directly with the cybercrime cell. You can also visit the website cybercrime.gov.in to file a complaint online.
3. What evidence do you need to present while filing a complaint against cybercrime?
Ideally, you should present evidence that is not limited to screenshots, emails with visible header sections, URL, call logs, device data, and transaction IDs or other transaction details.
4. What can I do when the police do not register my FIR against cybercrime?
You can hire a lawyer in the initial stage. Cybercrime lawyers protect you from reputational damage or ensure the smooth recovery of the funds you lost to fraudulent actions.
Sources:
- https://devgan.in/crpc/section/154/
- https://humanrightscouncil.in/blog/details.php?slug=what-to-do-if-police-refuses-to-lodge-fir-in-india-1753774954
- https://www.sbigeneral.in/blog/cyber-insurance/cyber-gi-simplified/how-to-file-a-cyber-crime-complaint-online-in-india
- https://cybercrime.gov.in/Webform/crmcondi.aspx
- https://police.tripura.gov.in/faq
Share:
Share on
×