Cyber crime complaint Uttar Pradesh: cyber cell and courts

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 4 Nov 2026 · Cyber crime

A cyber crime complaint Uttar Pradesh victims register can go to the local police station, to the district cyber cell, or, where money has moved, first to the 1930 helpline so the bank can freeze the funds. The correct first step depends on whether the loss is financial, and the correct second step is always written proof.

A cyber offence in Uttar Pradesh rarely arrives as a stranger at the door. It comes bundled inside a phone call that sounds official, a job offer that seems generous, or a message from a number that mimics someone you trust. By the time the victim understands something is wrong, the money has usually already left the account. That is the moment the law gives you a set of choices, and the choice you make in the first hour decides more of the outcome than anything you do in the following months.

If the offence cost you money, the first step is not a police station but the number 1930, and the second is a written complaint to your bank. If the offence cost you something other than money — an account, a private image, your reputation, your peace of mind — then the police station and the district cyber cell are the correct entry points, and the bank is irrelevant.

The two tracks your complaint can take

The financial track is governed by banking regulation as much as by criminal law. The Reserve Bank of India's directions on limiting customer liability in unauthorised electronic banking transactions make the victim's recovery depend on two things: how soon the bank was told, and whose fault caused the loss. Where a third-party breach causes the loss and the customer reports within three working days without contributing to the loss by their own negligence, the customer's liability is generally treated as zero. Where the negligence is the customer's, liability is limited, and where the report is delayed beyond three working days, the bank's own board-approved policy governs. The same directions require the bank to resolve the complaint and credit the amount within a fixed turnaround, failing which the RBI's Integrated Ombudsman Scheme, 2021 becomes available.

The criminal track draws on the Information Technology Act, 2000 for the computer-specific offences and the Bharatiya Nyaya Sanhita, 2023 for the ordinary offences that a cyber act also commits. Both tracks can run at the same time, and neither waits for the other.

Where a cyber crime complaint Uttar Pradesh is registered

Uttar Pradesh has four workable doors, and the choice between them is practical rather than legal.

Door	Best used for	What it gives you
1930 helpline and cybercrime.gov.in	Any financial fraud, and any offence you want acknowledged from home	A complaint number and a freeze request to the bank
Local police station	Threats, fake profiles, obscene messages, account takeover	An FIR under section 173 BNSS and a case number
District cyber cell	Evidence-heavy or device-based offences within the district	Forensic handling and bank coordination
State cyber crime cell and the cyber crime police station	Serious, organised, multi-district and high-value cases	State-level investigation and tracing of mule accounts

The state police also run their own app-based complaint facility alongside the national portal. Filing on the national portal matters because the acknowledgment it issues is what the bank recognises when you press the liability claim, and because the national system is the one that carries a freeze request automatically to the banking system.

What the law provides

On the IT Act side, the offences that recur in Uttar Pradesh investigations are section 66 for computer-related offences, section 66C for identity theft, section 66D for cheating by personation using a computer resource, section 66E for capturing or publishing a private image in breach of privacy, and sections 67, 67A and 67B for obscene, sexually explicit and child sexual abuse material. Section 43A supports a compensation claim against a body corporate that fails to protect sensitive personal data, section 65 covers tampering with computer source documents, section 72 covers a breach of confidentiality by a person with access under the Act, and section 79 shields intermediaries that observe due diligence, which is why platforms move on a police requisition.

On the BNS side, an online cheat is charged under section 318, and where the deception causes delivery of property the aggravated form of that provision applies. Criminal breach of trust is section 316, cheating by personation is section 319, extortion by threat is section 308, forgery is section 336, criminal intimidation is section 351, defamation is section 356, and voyeurism and stalking are sections 77 and 78. Where the fraud is run as an organised operation through a call centre, section 111 makes it an organised crime.

The procedure is in the BNSS. Section 173 requires the recording of information in a cognizable case, which is the FIR. Section 175(3) keeps alive the magistrate's power to direct an investigation when the police decline to act on your complaint. Section 35 limits arrest and substitutes a notice of appearance in many offence categories, which concerns an accused person more than a complainant. Section 63 of the Bharatiya Sakshya Adhiniyam, 2023 governs the admissibility of electronic records, and the certificate under section 63(4) is the point on which loosely kept digital evidence fails.

The escalation ladder in Uttar Pradesh

Each rung is used only after the previous one has been exhausted in writing, because the written trail is what makes the next rung available.

Secure the evidence first. Screenshot the chat, the transaction, the caller's number, the profile and the URL, with timestamps visible. Do not delete the app, the chat or the account.
Call 1930 the same day if money has moved, and file on cybercrime.gov.in to obtain an acknowledgment number.
Write to the bank's nodal officer quoting the transaction reference, the amount, the date, the beneficiary account and the acknowledgment number, and ask for a complaint number in writing.
Go to the police station with jurisdiction with a printed copy of the complaint and ask that an FIR be registered under section 173 BNSS, or, for a non-cognizable offence, that the complaint be entered in the station diary with a copy given to you.
Escalate to the Superintendent of Police if the station refuses or delays, sending the complaint in writing and keeping the dispatch proof.
Approach the jurisdictional magistrate if there is still no action, seeking a direction to investigate under section 175(3) BNSS.
Follow up every fortnight in writing, quoting the case number, so that the record of diligence is yours and not the police's.

The evidence a Uttar Pradesh cyber case turns on

Investigators work from records, not recollections, and the records that matter most are the ones a victim usually throws away. The original device on which the messages arrived is itself evidence, and a factory reset or a reinstall destroys what a forensic examiner extracts. Along with the device, keep the bank statement showing the debit, the UTR or transaction reference, the beneficiary account number and IFSC, the caller's number, the chat and email threads with visible timestamps, and every acknowledgment number you have been issued.

Screenshots by themselves are weak because they are easy to challenge. What strengthens an electronic record is the certificate under section 63(4) BSA, identifying the record and describing how and from which device it was produced, signed by a person who can vouch for those facts. A victim who keeps the source data intact makes that certificate possible.

After registration: what the Uttar Pradesh police actually do

Once the FIR is registered the case is assigned to an investigating officer, and the work becomes technical rather than physical. The officer requisitions the subscriber details behind the phone number or the UPI handle, asks the bank for the beneficiary account's KYC and transaction history, and where the money has moved, follows it forward one layer at a time through the mule accounts. Each step runs on a statutory requisition tied to the case number, and each takes time that the victim cannot compress however urgently the money is needed. The complainant's own task is narrow: stay reachable, appear when summoned to give a statement, and supply exhibits promptly, instead of refiling the same incident at every counter in the district.

What decides the outcome

Whether the complaint is registered turns on completeness. A complaint naming the transaction, the time, the beneficiary account and the screenshots moves; a complaint describing a loss without references stalls at the counter. Officers triage on what can be traced.

Whether the money returns turns on traceability. If the report reaches the bank while funds remain in the beneficiary account, a freeze can hold them. If the money has already been layered through mule accounts, recovery becomes a restitution question for the criminal court or a claim in a civil suit, and depends on the accused being traced and on assets surviving.

Whether the bank pays turns on conduct. Where the victim shared an OTP, installed a remote-access application on a caller's instruction, or paid after a call that claimed to be from the bank or the police, the bank will argue contributory negligence, and the RBI's tiered liability rules turn on exactly that question. It is a question of fact, and it is not answered uniformly, because the facts are not uniform.

Whether the case survives court turns on the record. Electronic evidence without the section 63(4) certificate, the original device or a credible chain of custody tends to be excluded, and an excluded record leaves the prosecution with an accusation and nothing to prove it.

Jurisdiction is rarely the obstacle it appears to be. Under the BNSS scheme, the place of investigation is ordinarily where the offence, or any part of it, occurred, and an online offence occurs where the victim's device and money are, so a victim in Uttar Pradesh may complain in their own district even when the offender is elsewhere.

What goes wrong, and how to avoid it

Waiting to file until you have identified the accused. You do not need to know who the offender is to lodge the complaint; the investigation identifies them.
Reporting to the bank a week after the debit. That delay alone can convert a nil-liability case into a limited-liability one.
Filing at several stations and portals simultaneously. Duplicate numbers create a file that no single officer owns.
Paying a "recovery agent" who promises to retrieve the money. Recovery agents are a second fraud aimed at the same victim.
Publicly naming the suspect before the police act. That can invite a defamation claim under BNS section 356 and damage your own case.

When to bring in a lawyer

Most straightforward cyber complaints in Uttar Pradesh need no lawyer: the police register them, the cyber cell investigates, and the bank resolves the liability claim on the documents. A lawyer earns their place at the points where the process meets resistance — when a station refuses to register the FIR and a magistrate's complaint under section 175(3) BNSS is the correct next step, when the bank has rejected the liability claim and an RBI Ombudsman or consumer complaint under the Consumer Protection Act, 2019 must be drafted, when the accused is traced and a civil recovery suit should run beside the criminal case, or when you are yourself an accused person answering a notice or applying for bail. A cyber crime lawyer in Kolkata can review the documents of an Uttar Pradesh complainant and set out the parallel civil and banking options, and the criminal defence page covers what to do if a cyber case is registered against you.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

Where do I file a cyber crime complaint in Uttar Pradesh?

For money fraud, call 1930 and file on cybercrime.gov.in first, then complain in writing to your bank's nodal officer. For offences without money loss, such as a fake profile, threats or a hacked account, file at the police station with jurisdiction or at the district cyber cell, carrying printed evidence and the original device.

Is a cyber crime cognizable in Uttar Pradesh?

Most cyber offences under the IT Act, such as identity theft under section 66C and cheating by personation under section 66D, are cognizable, so the police are bound to register an FIR. Some offences are non-cognizable, and for those the complaint is entered in the station diary and requires a magistrate's order before investigation proceeds.

Can the Uttar Pradesh police refuse to register my FIR?

They cannot lawfully refuse to register an FIR for a cognizable cyber offence merely because it occurred online or the accused is unknown. If a station declines, send the complaint in writing to the Superintendent of Police and keep proof of dispatch. If there is still no action, the jurisdictional magistrate can be asked to direct investigation under section 175(3) BNSS.

How long do I have to report cyber fraud to my bank in Uttar Pradesh?

Report within three working days. Under the RBI's directions on unauthorised electronic transactions, reporting within that window generally gives zero liability where the loss is not caused by your own negligence. Report later and the bank's own policy fixes the liability, so the dated written nodal complaint is the document that matters most.

Which court hears a cyber crime case in Uttar Pradesh?

Trial is before the Judicial Magistrate First Class or the Chief Metropolitan Magistrate in the district where the case is registered, depending on the offence and the place of filing. Appeals and bail applications go up to the Sessions Court and then to the Allahabad High Court at Prayagraj, which also holds a bench at Lucknow.

What evidence do I need for a cyber complaint in Uttar Pradesh?

Keep the bank statement showing the debit, the transaction reference and beneficiary account, screenshots with visible timestamps, the caller's number, the chat and email threads, the device itself, and every acknowledgment number. The electronic record will need a certificate under section 63(4) of the Bharatiya Sakshya Adhiniyam, 2023, so the original data must stay intact.

Can money lost to cyber fraud in Uttar Pradesh be recovered?

Recovery depends on whether the funds are still traceable when the bank is alerted. Fast reporting lets the bank freeze the beneficiary account before the money is moved. Once the funds are gone, recovery becomes a restitution order from the criminal court or a civil suit, and depends on the offender being traced and on assets remaining.

Should I hire a lawyer for a cyber case in Uttar Pradesh?

For a routine complaint that the police register and pursue, no lawyer is needed. Hire one when a station refuses to register the FIR, when the bank denies liability and an RBI Ombudsman or consumer claim must be drafted, when a civil recovery suit should run alongside the criminal case, or when you are an accused person who must answer a notice or apply for bail.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact