Cyber Crime Lawyer in Kolkata — Defence in IT Act Cases & Bank Freeze Notices

If you have received a police notice in an online fraud investigation, discovered that your bank account has been frozen, or been named as an accused in a complaint under the Information Technology Act, 2000, your position is that of a person accused — and your priority is defence. The person who filed the complaint already has the machinery of the State behind him. You do not. Adv. Priyadarshi Mahapatra represents persons accused in IT Act and cyber fraud cases before the police, the Cyber Crime Cell, the Special Courts, the jurisdictional Magistrates, the Sessions Court and the Calcutta High Court.

Who This Practice Area Is For

• Persons named in an FIR, a general diary entry or a preliminary enquiry relating to online fraud, cheating by personation or identity theft
• Persons whose bank accounts or merchant accounts have been frozen or marked as “mule accounts” following a cyber fraud complaint
• Persons served with a notice to appear under Section 35(3) of the Bharatiya Nagarik Suraksha Sanhita, 2023 (formerly the notice of appearance under Section 41A of the Code of Criminal Procedure, 1973)
• Persons served with a summons to produce documents, devices or records under Section 94 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (formerly Section 91 CrPC)
• Persons against whom a complaint has been filed before a Magistrate alleging offences under the IT Act, 2000 or the Bharatiya Nyaya Sanhita, 2023
• Persons whose photographs, private images or personal data have been used without consent, and who are facing counter-allegations in consequence
• Persons who are themselves victims of an account takeover and find themselves under investigation because their credentials were misused

The Statutory Framework You Are Facing

Information Technology Act, 2000 (as amended by the IT (Amendment) Act, 2008)

• Section 43 — unauthorised access to, downloading, copying or extraction of data from a computer resource, and the civil liability arising from it
• Section 43A — compensation for failure of a body corporate to protect sensitive personal data
• Section 65 — tampering with computer source documents
• Section 66 — computer-related offences, where the act in Section 43 is done dishonestly or fraudulently — punishable with imprisonment up to three years or a fine up to five lakh rupees, or both
• Section 66B — dishonestly receiving or retaining a stolen computer resource or communication device — up to three years or a fine up to one lakh rupees, or both
• Section 66C — identity theft — fraudulent or dishonest use of another person's electronic signature, password or any other unique identification feature — punishable with imprisonment up to three years and a fine up to one lakh rupees. This is the section most frequently invoked in KYC misuse, Aadhaar-linked fraud and account-takeover cases
• Section 66D — cheating by personation by using a computer resource or a communication device — punishable with imprisonment up to three years and a fine up to one lakh rupees. This covers the mass phishing, fake UPI request and fake customer-care number frauds
• Section 66E — violation of privacy — intentionally capturing, publishing or transmitting the image of the private area of a person without consent — up to three years or a fine up to two lakh rupees, or both
• Section 66F — cyber terrorism — punishable with imprisonment which may extend to imprisonment for life
• Section 67 — publishing or transmitting obscene material in electronic form — up to three years and a fine up to five lakh rupees on first conviction; Section 67A — sexually explicit material — up to five years and a fine up to ten lakh rupees on first conviction; Section 67B — child sexual abuse material — up to five years and a fine up to ten lakh rupees on first conviction and up to seven years on subsequent conviction
• Section 69 — power of the Central Government to issue directions for interception, monitoring or decryption of information through any computer resource
• Section 72 — breach of confidentiality and privacy — up to two years or a fine up to one lakh rupees, or both
• Section 72A — disclosure of information in breach of a lawful contract — up to three years or a fine up to five lakh rupees, or both
• Section 79 — exemption from liability of intermediaries, subject to the conditions in the section — an intermediary loses the safe harbour where it has not observed due diligence or has been directed to remove content and has failed to do so

Bharatiya Nyaya Sanhita, 2023 — The General Criminal Law

• Section 318 — cheating. Section 318(4) is the aggravated offence of cheating and dishonestly inducing delivery of property, the successor to Section 420 of the Indian Penal Code, 1860, punishable with imprisonment up to seven years and fine. Most online fraud FIRs combine Section 318(4) BNS with Section 66C or 66D of the IT Act, 2000
• Section 319 — cheating by personation, the successor to Section 416 IPC
• Section 316 — criminal breach of trust, the successor to Section 406 IPC; Section 316(2) carries imprisonment up to five years
• Section 308 — extortion, the successor to Section 384 IPC — frequently invoked in sextortion and ransomware complaints
• Section 351 — criminal intimidation — the successor to Section 506 IPC
• Section 356 — defamation — the successor to Section 500 IPC — commonly pleaded in online defamation cases
• Section 336 — forgery — the successor to Section 463 IPC — engaged where electronic records or identity documents are fabricated
• Section 238 BNS — causing disappearance of evidence or giving false information to screen the offender, the successor to Section 201 IPC. This is the provision that makes deleting or destroying electronic evidence a separate offence

Bharatiya Nagarik Suraksha Sanhita, 2023 — Procedure and Protection

• Section 173 — information relating to the commission of a cognisable offence and the registration of an FIR. Section 173(3) permits a preliminary enquiry, with the prior permission of the Superintendent of Police, for offences punishable with imprisonment of three years or more but less than seven years — a provision of great practical importance in IT Act cases
• Section 35(3) — the notice of appearance requiring a person to appear before the police without arrest, the successor to Section 41A CrPC
• Section 94 — summons to produce documents or things, the successor to Section 91 CrPC — used to call for bank records, KYC documents, devices and digital records
• Section 106 — power of a police officer to seize property, the successor to Section 102 CrPC — this is the provision under which bank accounts are frozen
• Section 480 — bail in non-bailable offences, the successor to Section 437 CrPC
• Section 482 — direction for grant of bail to a person apprehending arrest, the successor to Section 438 CrPC — the anticipatory bail provision
• Section 483 — special powers of the High Court and the Court of Session regarding bail, the successor to Section 439 CrPC
• Section 528 — the power to quash proceedings, the successor to Section 482 CrPC

Bank Account Freezes — Your Rights and Your Recourse

A frozen account is the most common way in which an innocent person is drawn into a cyber fraud investigation. The mechanism is straightforward: a complainant reports a UPI or internet banking fraud; the investigating officer traces the flow of funds and issues a direction to the bank to freeze the accounts that received the money. The power relied upon is Section 106 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (formerly Section 102 CrPC), read with Section 94 BNSS (formerly Section 91 CrPC) for the production of records. Banks freeze the whole account, not merely the disputed credit — often immobilising an entire business or salary account.

The first step is to establish the identity of the investigating officer and the police station. The bank's letter or the freeze advice, or a request made to the bank's nodal officer, ordinarily discloses the FIR number, the police station and the contact details. A written representation is then made to the investigating officer, supported by documents establishing the source of the funds, the genuineness of the transactions and the absence of any connection with the complainant — salary slips, invoices, GST returns, bank statements, KYC records and any correspondence with the person who transferred the money.

Where the officer declines to defreeze, the remedy lies before the jurisdictional Magistrate or the Sessions Court, by an application for release of the seized property under Section 106 read with Section 503 of the BNSS or by an application for defreezing of the bank account. It is important to record that criminal liability under Sections 66C and 66D of the IT Act, 2000 and Section 318 BNS requires dishonest intention. The mere fact that funds were credited to an account does not make the account holder an accused; the prosecution must establish the essential ingredients of the offence, including mens rea, against the person charged.

Notices, Summons and Your Right Against Self-Incrimination

A notice under Section 35(3) BNSS or a summons under Section 94 BNSS is not an accusation in itself — but how you respond to it will shape the case. Article 20(3) of the Constitution of India protects a person accused of an offence from being compelled to be a witness against himself. The scope of that protection has been carefully delineated: in State of Bombay v. Kathi Kalu Oghad, AIR 1961 SC 1808, the Supreme Court held that taking specimen handwriting, signatures and impressions of fingers, palms and feet does not amount to testimonial compulsion, while in Selvi v. State of Karnataka, (2010) 7 SCC 263, the Court held that involuntary administration of narco-analysis, polygraph testing and brain-mapping violates Article 20(3) and Article 21.

In practice this means: you must produce the documents and devices that the notice lawfully calls for, but you are not obliged to make self-incriminating statements. Statements recorded by the police during investigation under Section 180 BNSS (formerly Section 161 CrPC) are not to be signed by the person making them and, under Section 181 BNSS (formerly Section 162 CrPC), cannot be used for any purpose except to contradict the maker in the manner provided. A statement made voluntarily in writing, however, or an explanation offered without legal advice, can be used to build the case against you. This is why legal advice should be obtained before the first appearance, and not after.

Step by Step — What to Do the Moment You Are Accused

• Step 1 — Do not panic and do not destroy anything. Deleting messages, formatting a phone, or wiping a cloud backup can invite a separate prosecution under Section 238 BNS (formerly Section 201 IPC) for causing disappearance of evidence. Electronic records are the evidence in a cyber case; preserve them exactly as they are.
• Step 2 — Do not contact the complainant directly and do not pay anyone to “settle” the matter. Direct contact is capable of being converted into an allegation of criminal intimidation under Section 351 BNS or of extortion, and unsolicited payment may be treated as an admission.
• Step 3 — Collect and preserve the documents. The FIR or the notice, bank statements for the relevant period, KYC records, transaction histories, e-mail and SMS logs, UPI transaction references, device details and any correspondence with the person who transferred the funds.
• Step 4 — Engage a cyber crime defence advocate immediately — before recording any statement, before giving any written explanation, and before appearing before the investigating officer.
• Step 5 — Assess the offences and the forum. Determine which sections are actually attracted on the facts and in which court the matter is triable.
• Step 6 — Anticipatory bail or regular bail. Where arrest is apprehended, an application lies under Section 482 BNSS before the Court of Session or the High Court; where the person is already in custody, bail is sought under Section 480 BNSS.
• Step 7 — Move for defreezing of the bank account before the investigating officer, and failing that before the jurisdictional court.
• Step 8 — Build the defence. Establish that your credentials were misused, that the KYC details on the account do not match your documents, that you were a victim of the same fraud, or that the alleged transactions never took place — and identify the true beneficiary of the funds.
• Step 9 — Challenge electronic evidence at trial. Electronic records must satisfy the certificate requirement under Section 63(4) of the Bharatiya Sakshya Adhiniyam, 2023 (formerly Section 65B of the Indian Evidence Act, 1872); a certificate that does not comply with the statutory requirements renders the electronic record inadmissible, as held in Anvar P.V. v. P.K. Basheer, (2014) 10 SCC 473, and clarified in Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal, (2020) 7 SCC 1.

Kolkata-Specific Considerations

Cyber crime complaints in Kolkata are received at the local police stations and at the Cyber Crime Cell, and complaints relating to online financial fraud may be routed through the National Cyber Crime Reporting Portal and the national cyber crime helpline. Investigations into offences under the Information Technology Act, 2000 and the connected BNS offences are conducted by the Cyber Crime Cell, and the accused may be summoned either to the local police station or to the Cyber Crime Cell at Lalbazar or Bidhannagar. Bail applications are ordinarily moved before the jurisdictional Chief Metropolitan Magistrate, the City Sessions Court, or the Calcutta High Court, depending on the stage and the offence.

Local practice matters. An advocate who appears regularly before the Kolkata cyber police and the City Sessions Court knows which documents the investigating officer will accept as sufficient to release a frozen account, how quickly the cyber cell responds to a written representation, and how to frame an anticipatory bail application so that it addresses the electronic evidence on which the prosecution actually relies.

Common Mistakes Made by Persons Accused in Cyber Crime Cases

What Your Cyber Crime Defence Lawyer Does for You

• Reads the FIR or complaint and advises on the offences actually attracted and the forum in which they are triable
• Represents you at every appearance before the investigating officer and ensures that no self-incriminating statement is recorded
• Moves for anticipatory bail under Section 482 BNSS or regular bail under Section 480 BNSS as the stage requires
• Applies for defreezing of the bank account before the investigating officer and, if necessary, before the jurisdictional court
• Builds and documents the defence — misuse of credentials, KYC mismatch, victim-of-the-same-fraud evidence, alibi, and forensic analysis of the device
• Challenges the electronic evidence on the statutory certificate requirement under Section 63(4) of the Bharatiya Sakshya Adhiniyam, 2023
• Files a petition for quashing under Section 528 BNSS where the complaint discloses no offence or is an abuse of process

Frequently Asked Questions