Cyber Crime - A Pragmatic Study

Author: LawSphereX

Category: Criminal Law

Published: 2026-08-23T19:08:16.335475+00:00

Updated: 2026-08-26T17:11:36.082+00:00

CYBER CRIME: A PRAGMATIC STUDY

Somya Singh, BA LLB, Seedling School of Law and Governance, Jaipur National University, Jagatpura, Jaipur, Rajasthan, India

ABSTRACT

India is a developing nation and many other things were also developing simultaneously. One of them is the tremendous emergence and use of internet and computers. One can’t even imagine a life without these things. Today, in all the sphere and fields of life, internet playing a very pivotal role whether it is entertainment, education, business, sports, finance etc. Now, as we all know that every coin has two sides, here also the same formula applies. The one side is the positive one where there are numerous opportunities and prospects for the brilliant and successful life but the other side is too perilous and has many unseen dark shades of atrocities and heinous crimes and one of the most dangerous one is the Cyber Crime.

Cyber Crime is basically a crime which is committed by using the computer and internet and target the other computer for stealing the valuable and personal information or for other financial gains. Phishing, hacking, cyber bullying, spamming, virus and worms are some of the noteworthy examples of the cyber crime. But what ignites this feeling of committing cyber crime? What are the causes and problems associated with it? What are the unseen and unheard psychological feelings behind it? What are the measures to be taken for the same? Everything is discussed in this study. There is a glimpse of some nuances of the cyber crime and the psychological factor behind it. An overview of the theories, studies, examples, researches, criminal behavior concerning cyber crime is presented in this study.

Keywords: tremendous, emergence, pivotal, prospects, perilous, atrocities, Cyber Crime, nuances, criminal behavior

Introduction The single biggest existential threat that's out there, I think, is cyber. 1 Michael Mullen India is a developing country and it is rising by leaps and bounds not only in terms of education, military forces, westernization but also in the sense of technology and dependency on internet for various daily chores. It has welcomed to the new opportunities in the various emerging domains, including commerce, games, learning and teaching facilities, and amusement industries. Due to the commencement and budding usages of the internet, businesses are now able to reach clients worldwide and are no longer limited to local marketplaces. Computers are utilized extensively in businesses to process information as well as to obtain a competitive and strategic edge. Computers can be utilized for both beneficial and harmful purposes.

Cybercrime is a expression which is used to refer to such unlawful activities which are prohibited by the law and injurious to public welfare varies from electronic cracking to DOS, when computer system or networks are used as a weapon or a prey or a scene of occurrence for illicit behavior. Additionally, this term also includes and provides the remedy for the customary offenses. Networks or computers are utilized to facilitate the illegal activities. The primary acts of computer crime include intellectual property theft, data destruction, and unlawful access to computer systems. In the context of national security, cybercrime can include information warfare, activism, and conventional espionage, among other related actions. Cybercrime is limited to criminal activity involving computers and networks. A more thorough definition of cybercrime is provided later in this module.

Cybercrimes are primarily committed in cyberspace, in addition to crimes committed physically with computers. 2 In his literary work "Neuromancer" (1984), William Gibson, the writer who originally used the word "cyberspace," initially discussed electrical activities that occur in virtual worlds. The "Space Transition Theory" was developed by Jaishankar (2008) to explain the reasons behind cybercrimes. The thesis, which consists of seven postulates, describes how a person's conduct

1 TOP 25 QUOTES BY MICHAEL MULLEN | A-Z Quotes (azquotes.com)

2https://www.researchgate.net/publication/351902133_CYBER_CRIMES_IN_INDIA_TRENDS_AND_PREV

ENTION

varies in the physical and virtual realms and how this could result in crimes being committed in virtual spaces. The Indian government's recent push to support e-governance has increased residents' susceptibility even further. With a smartphone in hand and an internet connection, we are essentially living in cyberspace. We can communicate with other netizens (regular internet users) and pay our bills quickly with a few clicks, a process that once required waiting in line. The internet has supplanted all other labor-intensive methods as the preferred method of doing tasks. People are willing to use the internet because it is convenient, but if one is unaware of the hazards and know how to reduce them, that convenience can also have negative effects. One of India's biggest issues is a lack of knowledge regarding cybercrimes.

Many folks are becoming victims of cybercrimes including email fraud, phishing, cyber stalking, etc. because they are unaware of precautionary measures. The IT Act (Information Technology Act) of 2000 looks upon and took the responsibility of the emerging trends of crime of modern era that have emerged as a result of internet abuse. The increased accessibility of information globally has also increased its susceptibility to misuse. Cybercriminals are keeping an eye on India due to an increase in cyber attacks against Indian institutions. India comes in third place after the US and China as a source of hostile activity on the internet, second place for malicious code, and fourth and eighth place for web attacks and network attacks, respectively.

In light of these concerning circumstances, raising internet users' understanding of "cybercrimes and security" should take precedence above just combating cybercrimes. 3 History Although the history of cybercrime is not set in stone, the majority of experts identify specific occasions as the first recorded hacks. An outline of historical cybercrime incidents is provided below: The system of telegraphs The origin of the cyber crime can be traced back in 1834 when two robbers took the opportunity of the establishment of the financial market and broke the connection of French Telegraph 3https://www. researchgate. net/publication/334124155_Cyber_Crime_Scenario_in_India_and_Judicial_Response

network. Numerous experts believe that this incident was the first cybercrime, with subsequent incidents centered on newly developed technologies. The phone network Attacks on the phone system occurred in the 19th and 20th centuries. Alexander Graham Bell who was known for the invention of the phone got the patent for the same. Bell's telephone firm experienced call misdirection due to hacking by adolescent males two years after the innovation was commercialized. Later on, from the era of 1960s to the 1980s, other cyber crimes such as hacking and phishing came into the picture. Hacking with ethics French specialist of computers Rene Carmille broke into the registers of the data regarding Nazi government in 1940. Punch card computer specialist Carmille utilized his knowledge to reprogramme Nazi punch card machines so they would not correctly register information.

His efforts prevented the Nazis from tracking down and registering Jews. Phishing schemes and viruses Today, electronic messages and mails gained prominence as a messenger tools in the 1980s, while the processor viruses and web browsers gained attraction in the 1990s. Almost this time, cybercriminals began targeting computer users and starts infecting web browsers and email attachments and links which were carrying malware virus and other dangerous things such as Trojan horse, worms, phishing etc. Internet of Things (IoT) hacking Cybercriminals now have an abundance of hacking chances because to IoT. IoT technology adds Internet capability to commonplace items like heating systems, refrigerators, washing machines, and light bulbs. These gadgets are linked to the Internet, which means that hackers may break into them and harm the real world as well.

Today, a dime a dozen populations were present in the different areas of the countries who were entrapped in the maze of the internet and were prone more to became prey of these types of cyber crime, the insignificant reason for the same is the lack of the awareness and sufficient

knowledge regarding the safe and reliable use of internet and how to protect oneself from the malice of the internet. 4 Reasons for the cyber crime There are many reasons were put forward by the ordinary people or the common perception made by the general public about the commission of the cyber crime; • Excessive use of social media • Hackers have more technology and the security of the devices are less • Lacking of effective technology and laws in the country • Unemployments • Lacking of awareness and knowledge about the crime • greediness • people like shortcut to gain the money in short time • They are attract to the free and easy way to gain money • No efficient and capable laws to prevent the crime • No strict enforcement of the existing laws Cyber crime and criminology Criminology helps the cyber experts to understand the mindset of the criminals behind the cyber crimes.

By the help of this subject criminologist have developed a number of theories to explain why individuals engage in computer crime. Some theories which are behind the working of the mind of the cyber criminal are rational

4 https://arcticwolf.com/resources/blog/decade-of-cybercrime/

choice theory, Social learning theory, Strain theory, Routine Activities theory etc. There are certain theories and reasons which were put forward by the researchers and the experts. These are as follows: I.

Rational Choice Theory: the person believes in profitable and low risk activities. They used to weighed the potential benefit over the risk of getting punished as they are aware that there are not such strict enforcement of rules and regulations their risk of getting caught was very much low and that’s why they have the audacity to commit such crimes using AI. II.

Strain Theory: As society did not provide the legitimate ways to each and everyone to fulfill one’s needs and resources due to which many of them faces economic hardships and social exclusions such people tend to inclined towards these types of illegitimate or the alternative ways to face their economic hardships and to fulfill their basic needs and requirements. III.

Routine Activity Theory: There are 3 motivating factors: i) Motivated offender: The offender is the one who commits the crime; here he/she has the motive to use the AI for the negative advancements. ii) Suitable target: The target which they use are the vulnerable class or the weaker section so that they can take the advantages of their helplessness iii) Absence of capable guardian: As everyone is aware that there are no strict rules and regulations to manage the functioning and working of the AI, they have the assurance of maximum profit and minimum risk. IV.

Social Learning Theory: As people were living in a society, so they were affected by the society more. They observe the behavior of others and try to portrait the same so that they can get the fame and name and this could only be possible by using the modern technologies which were easily provided by AI. V.

There are various other reasons which were put forward by the experts like shortcut to earn the money, attract to easy way of earning, unemployment, lack of awareness, non

enforcement of strict rules and regulations etc. because of which the negative usages of AI is increasing day by day. Overall, these theories help us to understand the various motives, opportunities and situational factors to better understand the causes and consequences of the crime and also to make effective strategies to prevent the occurrence the same. India's grounds for cybercrime Even though it is illegal, hackers usually go for a simpler way to make money. They prey on cash-rich establishments, such as banks and other financial institutions, where substantial quantities of money are often transacted. They use weaknesses in IT security systems to hack confidential data. The following factors contribute to IT platforms' extreme vulnerability: • Convenience: A computer system can be compromised in a number of ways because of the intricacy of modern technology.

Hackers can get their hands on retina scans, complex voice recorders, access codes, and other sensitive and valuable information that can be exploited even there are certain security tools and software like firewall or antivirus. • Computers run on operating systems, which are composed of millions of lines of code. These operating systems are complex. Due to the fallibility of the human intellect, mistakes might happen at any time. In these situations, hackers exploit any and all programming faults. • Competency to store data in a reasonably small area: One of a computer's special features is its capacity to store data in an incredibly small area. This facilitates the process of obtaining data from other storage devices and using it for one's own benefit. • Negligence– One of the characteristics of human activity is neglect.

Consequently, we run the risk of making a mistake in our computer system security efforts, giving cybercriminals access to and control over the system. • Verification loss: It is easy to erase information connected to the crime. Consequently, the loss of evidence has emerged as a pervasive and apparent issue that impedes the

process of investigating cybercrimes.5 Categories of Cyber Crime There are certain categories of cyber crime which are based on its types of targeted victim and its impact factor:

1. Crimes committed against persons:

These crimes are committed with the intent to damage certain people. Hacking, cracking, email harassment, cyber stalking, cyber bullying, defamation, the spread of pornographic content, email and SMS spoofing, carding, deception and fraud, child pornography, assault by threat, denial of service attack, forgery, and phishing are some examples of these.

2. Offenses related to Property:

Cybercrimes are committed with the intent to damage a person's property. The following categories apply to them: crimes involving intellectual property, cyber-squatting, cybervandalism, hacking, computer forgery, transmission of viruses and malicious software that compromise data, Trojan horses, cyber trespass, theft of time on the Internet, robbery or money theft during money transfers, etc.

3. Crimes against the management, a business, a group of people, or a firm:

These kinds of offenses include online jacking, salami attacks, logic bombs, cyber terrorism, illegal information possession, and software distribution. These crooks desire to frighten the nation's citizens.

4. Offenses against the Community:

Every one of the offenses listed above has an impact on society as a whole, either directly or indirectly. As a result, all of these offenses—including pornography, online gaming, forgery, selling illicit goods, phishing, cyber terrorism, etc.—are covered by this.6 5 https://www.drishtiias.com/daily-updates/daily-news-editorials/india-s-cybersecurity-challenge-threats-andstrategies

6 https://www.lawyersclubindia.com/articles/Classification-Of-CyberCrimes--1484.asp

Past leading examples of cyber crime The past is behind, learn from it. The future is ahead, prepare for it. The present is here, live it. - Thomas S. Monson As one has rightly said that we can always learn from our past and try to make our future best by avoiding the mistakes and by preparing oneself with more fortification and consciousness, so let’s take a glimpse at some of the history’s biggest cyber attacks: I.

The virus known as Melissa Version 1: In 1999, the Melissa Virus was developed by programmer David Lee Smith, marking it as one of the earliest and most perilous cyber threats. Smith distributed a file containing a virus, urging customers to open it using Microsoft Word. Once activated, the malware wreaked havoc on numerous businesses, including Microsoft, inflicting severe damage. The estimated expense to rectify the affected systems amounted to a staggering $80 million. II.

Cyber attack on NASA In 1999, James Jonathan, a mere 15 years of age, successfully incapacitated NASA's computer systems for a staggering duration of 21 days. This audacious act resulted in approximately 1.7 million software downloads during the attack, compelling the esteemed space organization to bear the financial burden of approximately $41,000 for necessary repairs. III.

A cyber attack targeting the PlayStation Network of Sony

In April 2011, 77 million customers' personal information was exposed by a cyber attack on Sony's PlayStation Network. IV.

The Yahoo cyber attack in 2014 In 2014, a staggering 500 million Yahoo accounts fell victim to a cyber attack, marking it as one of the most significant breaches of the year. The breach resulted in the compromise of passwords and personal data; although no bank information was accessed.

V.

The Power Grid Attack in Ukraine In 2015, the power grid of Ukraine experienced its inaugural cyber attack, leading to a significant disruption. The Ukrainian region of Ivano-Frankivsk witnessed around 50% of its residential areas losing access to electricity for a few hours due to the consequences of this attack. VI.

A Marriott Hotel Cyber attack

The cyber attack on the Marriott and Starwood hotel chains went undetected for several years until it was finally uncovered in 2018. As a result, the personal information of approximately

339 million guests had already been compromised by the time the breach was discovered.

Consequently, the UK's data protection commission imposed a fine of 18.4 million pounds on Marriott Hotels. VII.

The largest password leak to date A collection of roughly 8.4 billion passwords was made public in June 2021 as a result of the

RockYou2021 hack. As a matter of fact, it was the biggest hack since 32 million accounts were impacted by the RockYou website in 2009. 7 India's cybercrime cases The following are noteworthy cybercrime instances that cost well-known Indian companies a significant amount of money. The global financial sector was left in shock by the cyber attack that targeted Pune's Cosmos Bank in 2018. By infiltrating the bank's ATM server and acquiring the personal information of numerous debit cardholders, hackers managed to steal a staggering amount of Rs 94. 42 crore. Following the successful theft, hackers from 28 various countries swiftly withdrew the stolen funds. Another significant data breach affecting 1. 1 billion Aadhar card holders happened in 2018. Personal data including Aadhar, phone numbers, PANs, bank account details, and IFSC codes were among the stolen files.

Unknown vendors were surprisingly making quick cash on

7 https://ifflab.org/cyber-crimes-in-the-history-of-cyber-attacks/

WhatsApp by charging Rs 500 for each Aadhar user. Additionally, anybody may get a printout of anyone's Aadhar card for a pitiful Rs 300. Midway through 2018, there was a cyber attack on the ATM servers of Canara Bank. More than Rs 20 lakhs are hidden away in many bank accounts by the thieves. Hackers utilized devices known as skimming devices to get data from 300 debit cards. The con artists stole between Rs 10,000 and Rs 40,000 from 50 victims. Pegasus spyware, a malicious software, infiltrates a device, collects data, and subsequently transmits it to an external entity without the user's consent. The NSO Group, an Israeli cyberweapons firm, is responsible for its creation. The functionality of this spyware relies heavily on the inclusion of links. Once users click on these links, their phones are promptly infected with Pegasus.

According to The Wire, an Indian news portal, a leaked global database containing 50,000 phone numbers allegedly provided by different government clients of NSO Group includes over 300 verified Indian mobile phone numbers. These numbers belong to ministers, opposition leaders, journalists, members of the legal community, businesses, government employees, scientists, rights activists, and various other individuals. 8 Types of Cyber Crime

1) Child Pornography

Any form of media that portrays the mistreatment or sexual exploitation of a child is classified as child sexually abusive material (CSAM). As per Section 67(B) of the IT Act, it is illegal to post or transmit any material electronically that depicts children engaged in sexually explicit acts or similar content.

2) Cyber Bullying

Cyber bullying refers to the act of using computers, cell phones, laptops, or other electronic devices to harass or bully someone. It involves communication through these devices to intimidate or harm others.

3) Cyber Stalking

8 https://kratikal.com/blog/5-biggest-cyber-attacks-in-india/

Cyber stalking is the act of using electronic communication to continuously follow or attempt to contact someone, even when they have clearly shown disinterest. This can include monitoring someone through emails, the internet, or any other form of electronic communication.

4) Cyber Grooming

Cyber grooming occurs when an individual establishes an online friendship with a young person and manipulates or deceives them into engaging in sexual activities. This is a form of exploitation that takes place through online platforms.

5) Job fraud online

Online job fraud aims to deceive job seekers by offering false hope or promising better job opportunities with higher pay. The intention is to trick individuals into providing personal information or financial resources.

6) Sextortion online

Sextortion online involves someone demanding money, sexual favors, or explicit images from others in exchange for not sharing sensitive or private information online. This form of extortion exploits individuals by threatening to expose their personal content.

7) Phishing

Phishing is a fraudulent activity where deceptive emails are used to trick individuals into revealing personal information such as Customer ID, IPIN, Credit/Debit Card number, Card expiration date, CVV number, and other sensitive details. The intention is to steal personal information for malicious purposes.

8) Vishing

Vishing refers to the attempt made by fraudsters to get personal information over the phone by calling victims' ID, CVV, ATM PIN, Net Banking password, OTP, and card expiration date, among other details.

9) Smishing

Smishing is a kind of fraud where criminals utilize text messages sent to victims' phones to trick them into returning calls, going to phony websites, or downloading dangerous software.

10) Sexting

Sexting refers to the act of exchanging sexually suggestive digital photos, videos, texts, or emails, typically done using a cell phone.

11) Scam of SIM Swap

When scammers are able to use a registered mobile number to illegally obtain a new SIM card through the mobile service provider, it's known as a SIM swap scam. They get notifications and a One Time Password (OTP), which is necessary in order to conduct financial transactions using the victim's bank account, with the use of this new SIM card. SIM Swap is the term for obtaining a new SIM card through illicit means using a registered cell phone number. 12) Credit Card Fraud or Debit Card Fraud The illegal utilization of someone else's credit or debit card details to make purchases or withdraw funds is referred to as credit card (or debit card) fraud. 13) Identity theft The act of unlawfully or dishonestly using another individual's password, electronic signature, or any other unique identifying characteristic is known as impersonation and identity theft.

14) Spamming Receiving unsolicited commercial messages through email, SMS, MMS, or any other comparable electronic communication medium is known as spamming. The senders may attempt to persuade the recipient to visit a website for making purchases, buying a product or service, or deceive them into revealing credit card or bank account information. 15) Ransomware A computer virus called "ransomware" encrypts data and media on communication devices

such as laptops, desktop computers, mobile phones, and other devices, thereby posing a threat

to sensitive data. To decrypt their device, the victim is required to pay the specified ransom. 16) Viruses, Worms, and Trojans A computer virus is software specifically designed to infiltrate your system, alter or corrupt

your data, and then spread throughout it. Malicious programs known as worms replicate themselves repeatedly on local drives, network shares, and other locations. A virus is distinct from a Trojan horse. It is a malicious application that appears genuine. Trojan

horses can be equally dangerous as viruses, but they cannot self-replicate. Trojan horses enable malicious individuals or programs to enter your computer through a backdoor, thereby facilitating the theft of private and sensitive data. 17) Website Defacement Website Defacement is an attack aimed at altering the visual appearance of a website and/or rendering it non-functional. The attacker may upload indecent, hostile, and obscene images, messages, videos, etc. 18) Hacking Gaining access to a computer system or account without authorization, usually with the intention of causing more harm to the target 19) Spyware Cybercriminals use spyware, a type of software, to track and log the activities of their victims and their personal data. Frequently, a victim puts spyware onto their device by mistake, allowing a cybercriminal to access their data without their knowledge.

Depending on the kind of spyware used, hackers can obtain a victim's passwords, webcam, microphone, and credit card information. 20) Adware Adware refers to software that can be unintentionally downloaded and installed when

attempting to install another application. The creators of adware software generate revenue through their programs by displaying advertisement windows that are viewed or clicked on by users. Although certain adware software is considered safe and lawful, others can be intrusive due to the excessive and intrusive nature of the advertisements they display. Due to the inclusion of malware, spyware, and other potentially harmful software, several countries classify certain adware applications as illegal.9 Landmark Cases of Cyber Crime

1. Shreya Singhal v. UOI

In the present case, the Supreme Court considered a challenge to the legality of Section 66A of the IT Act. Two women were detained under this section for posting comments on Facebook that were considered indecent and undesirable following the death of a political leader. Section 66A of the IT Act imposes penalties on individuals who use computer resources or communication to spread derogatory, inaccurate, or provocative information that causes annoyance, discomfort, danger, insult, hatred, hurt, or malice. The Supreme Court's ruling was based on three key concepts: incitement, advocacy, and discussion. The court emphasized that the essence of freedom of speech and expression lies in the ability to debate or promote a cause, regardless of its popularity.

It was observed that Section 66A had the potential to restrict all forms of communication without distinguishing between incitement of public disorder, security concerns, health issues, or other matters that may offend some individuals, and mere advocacy and discussion of a cause.

2. Syed Asifuddin and Ors. v. State of Andhra Pradesh and Anr.

The subscriber under the Dhirubhai Ambani Pioneer Scheme opted for a Reliance phone and Reliance mobile services. However, due to the attractive tariff plans offered by another service provider, the user wished to switch. The TATA Indicom employees, who were the petitioners, in this case, compromised the Electronic Serial Number (ESN). This ESN was responsible for linking the Reliance phones' Mobile Identification Numbers (MIN) permanently. Consequently, after reprogramming the ESN, the petitioner's service provider would verify the device instead of Reliance Infocomm.

9 https://www.ijser.org/researchpaper/Cyber-Crime-in-India-An-Empirical-Study.pdf

3. Christian Louboutin SAS v. Nakul Bajaj & Ors

The high-end shoe producer, who lodged the complaint, requested a restraining order against the e-commerce website www.darveys.com for committing trademark infringement by selling counterfeit products. Given the website's extensive authority over the merchandise sold on its platform, the Court acknowledged that the defendant is not merely an intermediary. It identifies third parties and actively promotes their merchandise. Furthermore, the Court emphasized that an e-commerce platform that actively engages in such activities would not be entitled to the legal protections granted to intermediaries under Section 79 of the IT Act.

4. Avnish Bajaj v. State (NCT) of Delhi

Avnish Bajaj, the CEO of Bazee.com, was apprehended for the dissemination of cyber pornography as per Section 67 of the IT Act. Through the bazee.com platform, an individual had sold duplicates of a CD that contained explicit content.

5. CBI v. Arif Azim (Sony Sambandh case)

NRIs were able to send Sony products to their Indian friends and relatives by making an online payment through a website called www. sony-sambandh. com. In May 2002, a person named Barbara Campa visited the website and placed an order for a Sony Color TV and a cordless phone for Arif Azim in Noida. Arif Azim received the ordered items after Barbara Campa used her credit card to make the payment. However, the actual owner of the credit card denied making the purchase, leading the credit card company to inform the business that the payment was unauthorized. Arif Azim was found guilty by the court, but due to being a young child and it being his first conviction, the court showed mercy and discharged him to serve a year of probation.

This case became significant in the field of Cyber Law as it highlighted the importance of the Indian Penal Code, 1860 as a legal resource when the IT Act falls short.

6. SMC Pneumatics (India) Pvt. Ltd. vs. Jogesh Kwatra

In this particular case, the plaintiff's business employed Jogesh Kwatra as the defendant. However, Jogesh Kwatra started to make derogatory remarks about the company and its managing director, Mr. R K Malhotra, by sending offensive, abusive, vulgar, and disrespectful emails to his employers and various subsidiaries of the aforementioned organization worldwide. It was revealed during the investigations that the email originated from a cyber café

in New Delhi. The cyber café attendant identified the defendant during the investigation. Consequently, the plaintiff terminated the defendant's employment on May 11, 2011.

7. Pune Citibank Mphasis Call Center Fraud

In the year 2005, a sum of US$3,50,000 was illicitly transferred online to several non-existent accounts from the Citibank accounts belonging to four American customers. By presenting themselves as supportive individuals who would assist these consumers in resolving their challenging issues, the employees managed to gain the trust of the customers and acquire their personal identification numbers (PINs). Instead of resorting to password cracking or breaching firewalls, they exploited vulnerabilities within the MphasiS system. 10 Statistics and Figures ● Approximately 1 billion emails were compromised in a single year, impacting 20% of internet users. ● Firms are projected to face an average cost of $4. 35 million due to data breaches in 2022. ● The first half of 2022 witnessed over 236. 1 million ransomware assaults globally.

● In 2021, half of internet users in America encountered account breaches. ● 39% of UK businesses reported experiencing a cyber attack in 2022. ● Cyber attack insurance is lacking in approximately 10% of US-based organizations. ● The first half of 2022 saw cybercrime affecting 53. 35 million individuals in the US. ● UK firms faced an average cost of £4,200 due to cybercrime in 2022. ● Malware attacks witnessed a significant surge of 358% in 2020 compared to 2019. ● Phishing remains the most prevalent cyber threat impacting both consumers and

10 https://enhelion.com/blogs/2021/03/01/landmark-cyber-law-cases-in-india/

organizations. ● Cyber attacks worldwide increased by 125% in 2021 compared to 2020, with further harm inflicted on individuals and organizations in 2022. ● According to the National Cyber Security Index, Poland is recognized for having the best cyber security. ● Asian organizations experienced the highest number of global attacks in 2021. Cybercrime in India India is witnessing a surge in cybercrime, mirroring the trend observed in numerous other countries. The year 2018 saw a total of 208,456 reported cyber-related offenses. Surpassing this figure, the first two months of 2022 alone witnessed a higher number of cybercrimes compared to the entirety of 2018. During the ongoing pandemic, the escalation in cybercrime has been even more pronounced. Reported cases of cybercrime surged from 394,499 in 2019 to 1,158,208 in 2020, and further rose to 1,402,809 crimes in 2021.

Notably, India experienced a 15. 3% increase in cybercrime between the first and second quarters of 2022. Furthermore, the incidence of Indian websites falling victim to hacking has been on the rise in recent years. In 2018, approximately 18,560 websites were compromised, while the number escalated to 26,121 hacked sites in 2020. Financial fraud is the type of cybercrime that occurs most frequently in India. Between 2020 and 2023, this accounted for 75% of cybercrimes in India, with a peak of over 77% of crimes committed in that time frame. According to data from the Indian Cyber Crime Coordination Centre (I4C), Delhi had the greatest amount of cybercrime complaints in the nation for any state or Union territory in 2023, with 755 incidents reported per 100,000 people. With 432, Chandigarh has the second-highest rate, behind 381 in Haryana and 261 in Telangana.

There are 129 cybercrimes for every 100,000 people in the country. 1. 56 million complaints, or about half of the total, were filed in 2023. Based on these allegations, around 66,000 FIRs

have been registered in states and Union territories since 2019. The NCRB report reveals an 18% increase in cyber offenses in Mumbai in 2021. However, it is important to note that the actual figures could be significantly higher due to numerous unreported cases or instances where written complaints were not filed. The crimes reported in Mumbai and Maharashtra encompass a wide range of categories, including debit and credit card fraud, sexual exploitation, reputation damage, anger-driven actions, personal revenge, extortion, disruption of public services, and various others. 11 Global laws against cybercrime Cybercrime is a global problem that requires a coordinated global response. Many cyber laws that outline the offenses and penalties for cybercrime have been passed by various nations across the world.

Here are a few of these: ● The United States of America The Computer Fraud and Abuse Act (CFAA), also known as 18 USC 1030, prohibits acts of computer fraud and abuse. These regulations specifically address the realm of cyber defense. It provides protection for federal systems, bank computers, and Internet-connected systems. Its purpose is to safeguard against unauthorized access, threats, vandalism, eavesdropping, and the deceptive use of these systems. The CFAA serves as a supplement to other federal criminal legislation, filling in the gaps in their protective measures. It should be noted that the CFAA is not an all-encompassing provision, as there are other cyber laws in the United States Code, such as The Framework for Improving Critical Infrastructure Cyber security Version 1. 1 and the Cyber security Information Sharing Act (CISA), that are widely utilized.

● Canada Cyber security and data protection are governed by a convoluted legal and regulatory framework in Canada. If a corporation does not understand this framework and take proactive steps to avoid risks, it may face significant legal and financial consequences when those risks materialize. Therefore, it is essential for businesses that operate in Canada (wholly or partially) or have business partners that do so to comprehend this rapidly expanding field of law and

11 https://aag-it.com/the-latest-cyber-crime-statistics/

governance. The Criminal Code of Canada and the Personal Information Protection and Electronic Documents Act, SC 2000 c 5 (PIPEDA), encompass data privacy legislations that primarily impose two key cyber security responsibilities on private sector entities in Canada. As per the PIPEDA, organizations are obligated to implement suitable security measures and promptly inform the regulator and affected parties about specific cyber security incidents. ● The United Kingdom All "unauthorized" access is illegal in the UK under the Computer Misuse Act, 2013, which is reinforced by even more expansive provisions that make preparation work and the trafficking of technology necessary for unauthorized computer access illegal. ● European Union The European Union aims to establish a unified set of rules and regulations concerning data protection and cyber security.

These regulations, known as directives, impose legally binding standards on all participating countries. In order to accomplish this objective, each nation must adopt its own laws and regulations once they are approved. The General Data Protection Regulation (GDPR) is the most comprehensive and coherent cyber law within the European Union. It applies to all organizations that handle the personal data of EU residents, regardless of their location, and has a direct impact on international businesses operating within the EU. The GDPR, which came into effect in 2018, was designed to harmonize privacy and data protection laws across member states. It grants member states the power to impose severe penalties on organizations that fail to comply with its provisions. Another important development in cyber security measures that has an immediate impact on businesses is the Cyber security Act.

Its implementation date was June 27, 2019, and its objective was to improve network security for critical industries. 12 Cyber crime's Effects Cybercrime may have a range of effects on people, companies, and society.

12 Cybercrime : types, consequences, laws, protection and prevention - iPleaders

Monetary sufferers: Cybercrime has the potential to inflict financial damage on individuals as well as organizations. An example of this is when a cyber attack occurs, leading to identity theft and credit card fraud due to the theft of payment card information. Effects on the human being: Following a cyber attack, people might need to invest effort in safeguarding themselves and halting more harm. Being the victim of cybercrime can also have negative psychological effects, such as worry and anxiety. Trade commotion: Cybercrimes, like denial of service (DoS) attacks, have the potential to disrupt a company's operations for an extended period. This can lead to financial losses, a decrease in customer base, website downtime, and damage to the company's reputation. Community protection: Cybercriminals may attack vital infrastructure, such manufacturing facilities or electricity networks.

This may cause problems for public safety as well as interrupt necessary services. Steps to be taken by the Victim There are steps which were recommended by the people during the different interviews for those who became the victim of the cyber crime; • One should make the immediate reports to the cyber authorities • Seize the accounts and other sources immediately • One should first calm down and not being afraid of these nuisances • Information should be made to the family members, relatives and friends • One should make the immediate contact to the helpline numbers which are available online Cyber Helpline Information ● National Cyber Crime Reporting Portal The Indian government launched this platform to make it easier for victims and complainants

to file online reports of cybercrimes. Only complaints about cybercrimes are accepted through this portal, with a concentration on those involving women and children. Police and law enforcement organizations handle complaints submitted through this portal depending on the information provided in the complaints. Correct and precise information must be included when making a complaint in order for it to be handled quickly. ● Helpline Number The victims have been provided with specific helpline numbers to report their incidents. These include the National police helpline number, which is 112, the National women helpline number, which is 181, and the Cyber Crime Helpline, which is 1930. In order to enhance the NCH's cyber fraud redressal system, the Consumer Affairs Ministry has collaborated with the Home, Finance, and IT/Telecom sectors.

Currently, cyber fraud cases can be reported by calling the Home Ministry's nationwide helpline, 155260. The organizations involved in this initiative are the Telecom Regulatory Authority of India (TRAI), National Payments Corporation of India (NCPI), and Indian Cyber Crime Coordination Centre (I4C), all of which fall under the Ministry of Home Affairs. Their aim is to raise awareness about cyber crimes and provide a platform for people to file their grievances and seek justice. 13 Laws and organizations pertaining to cybercrime The Information Technology (IT) Act of 2000 was introduced by the authority to provide the guidelines and preventing rules and regulations to keep the people safe from the cyber crimes and to deter the cyber criminals from committing the crime.

Its main objectives are to report cybercrimes in India and to establish an environment that facilitates the successful use of the internet. India's cyber laws are governed by the Information Technology Act (IT Act), which was passed in 2000. This Act's primary objective is to give eCommerce reliable legal protection by streamlining the process of registering real-time data with the government. But as hackers grew craftier and people's inclination to play with technology increased. The Indian Parliament approved the IT Act, which places a strong focus on the severe fines and punishments designed to safeguard the e-banking, e-governance, and e-commerce industries. The most modern communication devices are now covered by the enlarged scope of ITA. A comprehensive piece of legislation, the IT Act regulate the online or electronic activities taking

13 https://www.cybercrime.gov.in

place in the form of governance, banking or shopping etc. The cyber laws in India also provide with the penalties and consequences for cybercrime. The most significant is the IT Act, which mandates that cybercrime be tightly regulated under all Indian laws: Section 43: Those who destroy computer systems without the owner's consent are subject to this section. The owner is entitled to full compensation for the whole loss in such cases. Section 66: Should it be found that an individual has dishonestly or fraudulently committed any of the offenses specified in Section 43, this section will come into play. In certain situations, the maximum sentence is three years in jail and the maximum fine is five lakh rupees.

Section 66B – It lays down the penalties for those who got the communication devices or computers which were stolen, in the other words, if a person in a dishonest way acquire the devices then he will be guilty and exposed to the imprisonment for 3 years and if it is more harmful and have a serious implication then fine of Rs. 1 lakh can also be added. Section 66C: This part examines identity thefts that involve password hacking, digital signature forgeries, and other distinct identifying factors. If found guilty, there may be a punishment of Rs. 1 lakh in addition to a three-year term. Section 66 D: This provision was introduced on the spot with the intention of punishing cheaters who pose as someone else using computer resources.

Additionally, the Indian Penal Code was revised to include offenses like theft, fraud, forgery, and other such crimes carried out via electronic media or the internet. A person who breaches Sections 43 and 66 of the IT Act may be sentenced to a maximum of

three years in prison, fined Rs. five lacs, or both, for offenses such as data theft, virus transmission, hacking, data destruction, or obstructing authorized network access. Data theft is also punishable under Sections 378 and 424 of the IPC, with a maximum imprisonment of two years, a fine, or both, and three years in jail or both. Additionally, Section 426 of the IPC states that denying access to an authorized user or causing harm to a computer system can result in a maximum of three months in jail, a fine, or both. The tampering of computer source materials is prohibited under Section 65 of the IT Act. In the case of violating privacy, Section 66E outlines the consequences. It states that individuals

who capture, disclose, or distribute images of someone's private space without their consent have infringed upon their right to privacy. As a result, they may be subject to a maximum imprisonment of three years, a maximum fine of two lakhs, or both. Cyber terrorism poses a significant concern and is specifically dealt with in Section 66F, which enforces penalties. As per the provided definition, cyber terrorism encompasses activities such as blocking access, unauthorized network intrusion, or dissemination of viruses or malware with the intention of causing harm or death, all with the objective of undermining India's integrity, sovereignty, unity, and security, or instilling fear among its citizens. The unlawful acquisition of computer resources or devices is subject to punishment under Section 411 of the IPC and Section 66B of the IT Act.

Section 66C of the IT Act outlines the consequences for identity theft, stating that individuals who utilize someone else's identity credentials for fraudulent or unethical purposes may face imprisonment for a maximum of three years and a fine of up to Rs. three lacs. Similarly, Section 66D of the IT Act prohibits the act of impersonating someone else using computer resources, which is considered cheating. These offenses are also addressed by the IPC under Sections 419, 463, 465, and 468. The IT Act not only penalizes individuals but also organizations that fail to establish a well-thought-out and reasonable process to protect sensitive personal information under their control. In cases where a company's negligence results in losses for individuals, the company is obligated to compensate the affected party.

In addition to the punitive actions, the IT Act grants authority to the Central Government to issue instructions that prohibit the general public from accessing any material on an intermediary or computer resource, on the condition that the Central Government deems such access detrimental to the state's interests. Furthermore, this data can be monitored, deciphered, and intercepted. 14 Defense against online fraud To safeguard ourselves against the dangers of cybercrime, the following proactive steps might be implemented: ● Installing an antivirus application is necessary. The purpose of an antivirus application

14 Cybercrime : types, consequences, laws, protection and prevention - iPleaders

is to protect consumers against online fraud. Current applications provide real-time security against threats like phishing and scan the machine's data for malicious material. ● Make use of a Virtual Private Network. Your online privacy is protected with a VPN connection. It's a crucial privacy tool that keeps people safe from identity theft. ● Avoid answering unsolicited calls, texts, and emails, especially if the sender is trying to use the situation to get recipients to disable common security measures. ● Modify the already set password to something which is more secure, reliable and unique. Limit the quantity of other devices that can be able to access the Wi-Fi network, and only allow the reliable and secure devices to join. ● Make long, complex passwords with unusual characters, letters, and digits in them.

● Ensure that all systems and applications are updated and sorted, and that each device will consist of antivirus software and kept up to date. ● Given how rapidly data may be altered, corrupted, or destroyed, data backups have to be standard operating procedures. ● Maintain secrecy of online profiles: Be sure to maintain the privacy of your social media accounts on sites like Facebook, Twitter, YouTube, and others. Ensure the settings of the security that it is according to your requirement. Anything that is posted online stays there forever. Don’t forget that there are digital footprints which were created every time you do any activity on the net, so be sure with the information you are posting online. ● Data protection: To safeguard your information, encrypt important files like tax returns and bank statements.

● Safe online identity: People should exercise caution when it comes to safeguarding their online identities. You should use great caution when disclosing personal information online, such as your name, address, phone number, and/or financial information. While doing an electronic shopping or banking etc. , make sure that the website on which you are working are safe and secure by ensuring that the website contains the sign of padlock and https: mark. It also means enabling privacy settings on social networking sites that you use or visit.

● Using security software to protect computers: The most common essential requirement needed before using the computers is security in which there should not be any type of compromise. Two vital neccesity of security software are firewall and antivirus programs. Usually, a firewall is your computer's initial line of defense. It sets restrictions on who may use the internet to access the computer and interact. 15 Conclusion Regardless of whether something is good or evil, one should be aware of what is going on around them, as these crimes are typically the result of people's ignorance and lack of awareness. Only we have the power to halt the rising number of these offenses. The actions that we can do are to refrain from excluding anyone from the society that forces them to take these actions (stain theory).

Second, rules that are stringent and onerous should be created and well implemented. Furthermore, the causes, effects, and knowledge of the crime should be available to all age groups. Cyber laws in India and around the globe need to be improvised and improved all the time as people become more dependent on technology. The pandemic has also forced a significant percentage of workers to work remotely, which has increased the demand for app security. To stay ahead of the imposters and halt them in their tracks, legislators need to go above and beyond. Cybercrime can be controlled, but only with the cooperation of governments, Internet or network service providers, middlemen like banks and online retailers, and most importantly, the general public.

Last but not least, because our goal is to end crime, not the offenders, we should also provide cybercriminals with an opportunity to repent or change.

15 What is Cybercrime? Types, Prevention & Digital Forensics | EC-Council (eccouncil.org)

REFERENCES

1) What is Cybercrime? Types, Prevention & Digital Forensics | EC-Council

(eccouncil.org)

2) Cybercrime : types, consequences, laws, protection and prevention - iPleaders

3) Cyber Crime in India: An Empirical Study (ijser.org)

4) JETIR2202222.pdf

5) Cyber Crimes and Its Legal Challenges in India by Jayanta Boruah :: SSRN

6) IRJET-V4I6303.pdf

7) A Study on Cyber Crime and its Legal Framework in India - International Journal of

Law Management & Humanities (ijlmh.com)

8) Research trends in cybercrime victimization during 2010–2020: a bibliometric analysis

| SN Social Sciences (springer.com)

9) The Latest Cyber Crime Statistics (updated January 2024) | AAG IT Support (aagit.com)

10) https://www.cybercrime.gov.in

11) Landmark Cyber Law cases in India | Famous cyber crime cases in india (enhelion.com)

12) The

History Of Cybercrime And Cybersecurity, 1940-2020 (cybersecurityventures.com)