LegalRepublic.in
[ Criminal format ]

Cyber Crime Complaint Format for Online Fraud and Cyber Harassment

Section 173, Bharatiya Nagarik Suraksha Sanhita, 2023; Sections 318, 319, 308, 77, 78 and 351, Bharatiya Nyaya Sanhita, 2023; Sections 66, 66C, 66D, 66E and 67, Information Technology Act, 2000

Free sample · Word, print and copy · Updated

Sample format, not legal advice. This is a sample format for general information. It is not legal advice and does not create a lawyer–client relationship. Facts, court practice, court fees and stamp duty differ by state and by case. Check the current law and your local court rules, or speak to an advocate, before you file, send or sign it.

A cyber crime complaint is a written complaint to the police — usually a district cyber crime police station or cyber cell — asking for an FIR for an offence committed through phones, computers or the internet. Common examples are UPI and card fraud, fake KYC calls, investment and job scams, account hacking, identity theft, morphed images and online stalking.

Speed matters. For financial fraud, first call the national helpline 1930 and report on the National Cyber Crime Reporting Portal (cybercrime.gov.in), so that the money can be put on hold in the receiving account. A portal complaint is not itself an FIR; this written complaint asks the police to register one under Section 173 BNSS. The offences usually fall under the Bharatiya Nyaya Sanhita — such as cheating (Section 318), cheating by personation (Section 319) and extortion (Section 308) — and the IT Act, such as identity theft (Section 66C) and cheating by personation using a computer resource (Section 66D).

Given to
Cyber crime police station or cyber cell of the district; or any police station (zero FIR)
Given by
The victim, or a family member on the victim's behalf
First steps
Call 1930 and file on cybercrime.gov.in; inform your bank at once
Law
Section 173 BNSS; BNS and IT Act offences
Time limit
No legal limit, but report within hours for any chance of a hold on the money
Fee
None

When to use this format

  • Money was debited from your bank account, card or UPI app through fraud, a fake call, a link or a screen-sharing app.
  • Your email, social media or bank account was hacked or someone is impersonating you online.
  • Someone is threatening to publish your private or morphed photos, or demanding money (sextortion).
  • You are being stalked, abused or threatened through messages, calls or social media.
  • For offline crimes, use the general police complaint to SHO.

Written complaint of cyber crime

Open PDF

Replace everything in [square brackets] with your own details. Delete lines that do not apply.

To,
The Station House Officer
[CYBER CRIME POLICE STATION / CYBER CELL / POLICE STATION [NAME]]
[ADDRESS]
[DISTRICT], [STATE]

Date: [DATE]

Subject: Complaint for registration of FIR regarding [ONLINE FINANCIAL FRAUD OF RS. [AMOUNT] / HACKING OF [ACCOUNT] / CYBER STALKING / SEXTORTION / IDENTITY THEFT]

Sir / Madam,

1. I, [FULL NAME], S/o / D/o / W/o [FATHER'S OR SPOUSE'S NAME], aged about [AGE] years, R/o [FULL ADDRESS], mobile [MOBILE NUMBER], email [EMAIL], submit this complaint of cyber crime.

2. Type of incident: [SELECT AND DESCRIBE — e.g. fraudulent UPI transfers after a fake customer-care call / phishing link / fake investment or job offer / hacking of my Instagram account / misuse of my photographs / threatening messages].

3. Date and time: The incident took place on [DATE] between about [TIME] and [TIME]. I came to know of it on [DATE] at [TIME] when [HOW YOU FOUND OUT].

4. How it happened: [DESCRIBE STEP BY STEP — how the person contacted you (call, SMS, WhatsApp, email, social media, website or app), what they claimed, what you were asked to do, and what happened next. Mention any app you were asked to install and any link you clicked.]

5. Details of the suspect, as known to me:
(a) Mobile number(s): [NUMBERS]
(b) UPI ID(s) / bank account number(s) and IFSC: [DETAILS]
(c) Email ID(s): [EMAILS]
(d) Social media profile name and link: [PROFILE NAME AND URL]
(e) Website or app: [URL / APP NAME]

6. Financial loss: Total Rs. [AMOUNT] (Rupees [AMOUNT IN WORDS] only), as follows:
(a) Rs. [AMOUNT] on [DATE] at [TIME] by [UPI / IMPS / NEFT / CARD] from my account no. ending [LAST 4 DIGITS] with [BANK] to [BENEFICIARY UPI ID / ACCOUNT], transaction / UTR no. [NUMBER];
(b) [REPEAT FOR EACH TRANSACTION].

7. Steps already taken:
(a) Called the cyber fraud helpline 1930 on [DATE] at [TIME]; reference no. [NUMBER];
(b) Complaint on cybercrime.gov.in on [DATE]; acknowledgement no. [NUMBER];
(c) Reported to my bank [BANK] on [DATE] at [TIME]; complaint no. [NUMBER]; card/UPI blocked on [DATE];
(d) Reported the profile/content to [PLATFORM] on [DATE]; ticket no. [NUMBER].

8. Evidence: I enclose screenshots of messages, call logs and profiles, bank statements and the transaction details. I have preserved the original messages and devices and will produce them when required.

9. The above facts disclose cognizable offences under the Bharatiya Nyaya Sanhita, 2023 and the Information Technology Act, 2000. I request you to:
(a) register an FIR under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023 and give me a free copy;
(b) take immediate steps with the banks and payment platforms concerned to hold the disputed amount in the beneficiary accounts and to trace the money;
(c) obtain and preserve the records of the mobile numbers, accounts, profiles and websites mentioned above;
(d) take steps to have the offending content removed, where applicable; and
(e) investigate the matter and take action against the persons responsible.

I shall co-operate fully with the investigation. The facts stated above are true to my knowledge.

Yours faithfully,

[SIGNATURE]
[FULL NAME]
[ADDRESS]
Mobile: [MOBILE NUMBER]
Email: [EMAIL]

Enclosures:
1. Copy of identity proof
2. Bank statement marking the disputed transactions
3. Screenshots of messages, calls, profiles and websites (with date and time visible)
4. Copies of 1930, portal, bank and platform acknowledgements

RECEIVING (to be filled at the police station)
Received on [DATE] at [TIME]
GD / Diary Entry No.: [NUMBER]
Name, rank and signature of receiving officer: [NAME AND RANK]

How to fill it in

  1. Report on 1930 and the portal firstFor money frauds, call 1930 and file on cybercrime.gov.in immediately. Note the reference and acknowledgement numbers — the police will ask for them.
  2. Inform your bank in writingReport unauthorised transactions to your bank at once and block the card or UPI. Under the RBI circular of 6 July 2017, prompt reporting (within three working days) can limit your liability where the fraud was not due to your negligence.
  3. List each transaction separatelyGive the date, time, amount, mode, beneficiary account or UPI ID and the UTR number for every debit. These are what the police and banks use to trace and hold funds.
  4. Capture the suspect's identifiersRecord phone numbers, UPI IDs, profile links (URLs, not just names), email IDs and website addresses before they are deleted.
  5. Preserve evidence properlyTake screenshots with date and time visible, export chats if possible, and do not delete messages, reset or sell the phone. The police may need the device.
  6. Hand in and get a receivingFile at the cyber crime police station or any police station, which can register a zero FIR. Get the receiving block signed and stamped.

Documents to attach

  • Copy of identity proof
  • Bank or card statement with the disputed transactions marked
  • Screenshots of messages, emails, call logs, profiles and websites
  • 1930 reference number and cybercrime.gov.in acknowledgement
  • Bank complaint number and any reply
  • Platform complaint or ticket number (for hacked accounts or objectionable content)
  • List of the suspect's phone numbers, UPI IDs, accounts and URLs

Sections commonly involved

The police decide the sections, but these are the ones usually applied. Mentioning them is optional.

  • Cheating: Section 318 BNS [Section 420 IPC for older cases]; cheating by personation: Section 319 BNS [Section 419 IPC].
  • Extortion, including sextortion: Section 308 BNS [Section 384 IPC].
  • Stalking, including monitoring a woman's online activity: Section 78 BNS [Section 354D IPC]; voyeurism: Section 77 BNS [Section 354C IPC].
  • Criminal intimidation: Section 351 BNS [Section 506 IPC].
  • IT Act: Section 66 (computer-related offences), 66C (identity theft), 66D (cheating by personation using a computer resource), 66E (violation of privacy) and 67 (publishing obscene material).

Common mistakes

  • Waiting a day or more before calling 1930 and the bank, by which time the money has moved.
  • Deleting chats or blocking the fraudster before taking screenshots and noting identifiers.
  • Assuming the portal complaint is an FIR and not following up with the police.
  • Paying anyone who promises to 'recover' the money for a fee — this is often a second fraud.
  • Giving incomplete transaction details without UTR numbers or beneficiary accounts.
  • Sharing further OTPs or installing apps on the advice of anyone claiming to be from the police or bank.

Frequently asked questions

Is a complaint on cybercrime.gov.in the same as an FIR?
No. The portal is an intake system that sends the complaint to the state police. An FIR is registered by a police station under Section 173 BNSS. If you do not hear back, file this written complaint at the cyber police station.
Where should I file a cyber crime complaint?
At the cyber crime police station or cyber cell of your district, or at any police station, which must register a zero FIR if a cognizable offence is disclosed and transfer it. You can file where you live, even if the fraudster is elsewhere.
Will I get my money back?
If the money is reported quickly and is still in the first beneficiary account, it can be held and later released to you by court order. Separately, under the RBI's customer-liability circular of 6 July 2017, your liability may be zero or limited if you report promptly and the fraud was not due to your negligence.
What if someone is threatening to post my photos online?
Do not pay or send more material. Keep screenshots and the profile links, report the profile to the platform, call 1930 or use the portal's women and child section, and file this complaint. Such threats can amount to extortion under Section 308 BNS and offences under the IT Act.
Do I need a lawyer to file a cyber crime complaint?
No. Any victim can file it directly. A lawyer becomes useful later, for applications to release held money, or if the police do not register the FIR.

Reminder: This is a sample format for general information. It is not legal advice and does not create a lawyer–client relationship. Facts, court practice, court fees and stamp duty differ by state and by case. Check the current law and your local court rules, or speak to an advocate, before you file, send or sign it. Spotted an error? Tell us.