LinkedIn harassment: complaint, evidence and the law

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 2 Nov 2026 · Cyber law

A threatening or sexually explicit message does not become lawful because it arrived on a professional networking site. Indian criminal law applies to what is said and sent, not to the app that carried it. A direct message on LinkedIn travels over a computer resource, is stored on a server, and leaves a record that a complainant can preserve and an investigating officer can requisition. That record is what separates a case that moves from one that dies in a forwarded screenshot.

The practical sequence is short. Preserve the full conversation and the sender's profile before you block anyone. Report the content to LinkedIn's grievance officer. Then file a written complaint at a police station or through the national cyber crime portal, and keep the acknowledgement. If the police decline to register a case, the remedy is an application to a magistrate under section 175(3) of the Bharatiya Nagarik Suraksha Sanhita 2023. Which penal provision applies depends on what was actually sent, and that is where most complainants go wrong.

What the law says about LinkedIn messages

LinkedIn is an intermediary within the meaning of section 2(1)(w) of the IT Act 2000. It is not the author of what its users post, and it enjoys the safe harbour in section 79 of the Act so long as it observes its due diligence obligations. Those obligations, framed under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, require a grievance officer, acknowledgement of a complaint within twenty-four hours and disposal within fifteen days. A complaint to LinkedIn is therefore a real legal step with a defined timeline, but it is not a substitute for a criminal complaint, because the platform cannot punish anyone.

The penal sections are spread across two statutes. The IT Act deals with conduct that is specifically digital: identity theft, impersonation by computer, and obscene material. The BNS 2023 deals with the underlying conduct that any older penal code would have caught: intimidation, insult, defamation, stalking and sexual harassment. Because the BNS replaced the Indian Penal Code with effect from 1 July 2024, conduct before that date is still tried under the IPC and the Code of Criminal Procedure 1973, while conduct after it is tried under the BNS and the BNSS 2023.

• Section 66C, IT Act 2000 — identity theft, meaning the fraudulent or dishonest use of another person's electronic signature, password or unique identification feature. Punishable with imprisonment up to three years and a fine up to one lakh rupees. This is the section that fits a profile built with a real person's name and photograph.
• Section 66D, IT Act 2000 — cheating by personation by using a computer resource. Punishable with imprisonment up to three years and a fine up to one lakh rupees. A fake recruiter asking for documents, a fee or bank details falls here.
• Section 67, IT Act 2000 — publishing or transmitting obscene material in electronic form. First conviction carries imprisonment up to three years and a fine up to five lakh rupees. The section covers transmission, so an unsolicited obscene image sent by direct message is within its words, though whether a single private message meets the threshold is a question of fact.
• Section 351, BNS 2023 — criminal intimidation, including a threat to the reputation of a person. Punishable with imprisonment up to two years or a fine or both, and up to seven years where the threat is of death or grievous hurt.
• Section 352, BNS 2023 — intentional insult with intent to provoke a breach of the peace. Punishable with imprisonment up to two years or a fine or both.
• Section 356, BNS 2023 — defamation. A false and damaging statement published to third parties, including in a public post or a comment thread, can be prosecuted, and it can also be sued upon in civil defamation.
• Sections 75, 77 and 78, BNS 2023 — sexual harassment, voyeurism and stalking respectively. These cover unwelcome sexual advances in a message, the sharing of private images without consent, and repeated unwanted contact or following.
• Section 78, IT Act 2000 — investigation of offences under the Act by a police officer not below the rank of Inspector.

Two limits matter. First, rudeness alone is not an offence. A curt rejection after a job application, a harsh difference of opinion on a post, or a single unpleasant message may be bad manners and still fall short of section 352 or section 351. Second, the criminal law protects reputation and dignity, not feelings. A complainant who quotes the words rather than characterising them will be taken more seriously by the platform and the police.

The patterns that actually produce complaints

Most LinkedIn harassment arrives in one of a few recognisable shapes. Naming them helps a complainant decide what evidence to gather and which section to cite.

• The fake recruiter. A profile with a stolen photograph and an implausible employer asks for a passport copy, a signed offer letter, a security deposit or bank details. The job does not exist. This is personation and cheating, and often identity theft as well.
• The abusive message after rejection. A candidate or a vendor is refused, and the refusal is followed by obscene language, sexual slurs or a threat. The offence is in the words, not in the rejection.
• The public pile-on. A post names a person, accuses them of misconduct and invites others to comment. If the accusation is false and published to third parties, defamation is the natural provision, and the poster's employer may also have internal rules that apply.
• The morphed photograph. An image is altered and posted or sent. This moves into obscene publication and, where the image is private, voyeurism.
• The persistent contact. A blocked account returns under a new name, or the same person sends connection requests and messages from several profiles. Repetition converts a single incident into stalking.
• The doxxing post. A home address, a phone number or a family member's details are published to intimidate. Intimidation and, depending on the material, other offences follow.

What to do, in order

1. Stop responding. Do not argue, do not negotiate and do not delete anything. A reply can be quoted later and rarely improves the record.
2. Capture the evidence properly. Take full-screen screenshots that show the sender's name, headline, profile URL and the timestamp. Save the profile page itself. Use a browser archive service if the content is public, so that a later deletion does not erase it.
3. Export your own account data. LinkedIn allows a member to request a copy of their data from its privacy settings. The export contains message records and connection history.
4. Report inside LinkedIn. Report the message and the profile, then block. Reporting first keeps the content available for the platform's review; blocking first may remove it from your view.
5. Write to the grievance officer. Use the contact published under the IT Rules 2021. State the profile URL, the dates and the specific conduct. The Rules require acknowledgement within twenty-four hours and disposal within fifteen days.
6. Call 1930 and use cybercrime.gov.in. The national cyber crime helpline logs financial and cyber complaints and can route them to the appropriate unit. For a non-financial harassment complaint, the portal still creates a traceable record.
7. File a written complaint at a police station. Give it in writing, keep a stamped copy, and ask for the FIR number if a cognizable offence is disclosed. Under section 173 BNSS the officer must register an FIR for a cognizable offence. Under section 78 of the IT Act 2000, the investigation is to be conducted by an officer of Inspector rank or above.
8. If the police refuse, go to the magistrate. Section 175(3) BNSS allows a magistrate to direct investigation. Attach the written complaint, the police acknowledgement and the preserved evidence. This is the step most complainants never take, and it is often the one that moves the file.
9. Ask for preservation, not only prosecution. A written request that the platform's logs and the account's registration details be preserved prevents the trail from expiring while the complaint is processed.
10. Consider a civil suit in parallel. An injunction and damages for defamation are separate from the criminal case and can be pursued at the same time.

Which route does what

What decides the outcome

The single largest factor is identification. A case against an unnamed handle is difficult to investigate and almost impossible to prosecute. What helps is a profile tied to a real email address, a verified phone number or a company page. Investigators can requisition subscriber and IP log data from the intermediary, but they need a specific handle and time window, which is why timestamps matter more than the text of the message.

The second factor is how the conduct is characterised. A complainant who alleges harassment in general terms gives the police nothing to register. A complainant who quotes the exact words, identifies the section they engage and explains who saw them gives the officer a draft. Public posts are easier than private messages because publication to third parties is an element of several offences. Private messages are still actionable, but the identity and the pattern carry more weight.

The third factor is the complainant's own conduct. Voluntary engagement, an existing professional dispute or a counter-complaint can all be raised by the other side. None is a defence to obscene abuse or a threat, but each affects how a first-time complaint is read. A clean, chronological record that stops at the first objectionable message is far stronger than a long argumentative thread.

The fourth factor is speed. Platforms retain logs for limited periods and purge reported content. A complaint made weeks later, with no preserved copy, is often unprovable even where the conduct clearly happened.

What not to do

• Do not block or delete before capturing the full conversation and the profile.
• Do not publish the sender's details on your own feed in retaliation. That can expose you to a defamation complaint and to the platform's own rules.
• Do not treat a LinkedIn report as the whole remedy. The platform can remove content; it cannot prosecute.
• Do not accept a settlement in exchange for deleting evidence. A withdrawal of complaint does not erase the record already created.
• Do not file at a police station chosen at random. Jurisdiction follows where the offence was committed or where the consequence occurred, and a wrong-station complaint is the easiest one to close.

When to involve a lawyer

A lawyer is useful at three points: when the police are unwilling to register an FIR and a section 175(3) application has to be drafted, when the conduct is mixed with a workplace or commercial dispute and the choice of forum matters, and when a public post has damaged a reputation and an injunction is needed quickly. For a straightforward obscene message from an identifiable account, a written complaint and a preserved record are often enough to start. If the sender cannot be identified at all, an early legal assessment will tell you whether the trail is worth pursuing before the logs disappear. For a fuller view of the forum and the offences, see the cyber crime lawyer in Kolkata page and the criminal defense section.

Frequently asked questions

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Related articles

• Loan app harassment: evidence to preserve in 48 hours
• Harassment on YouTube: complaint, evidence and the law
• LinkedIn account recovery: complaint, evidence, escalation
• X (Twitter) harassment: complaint, evidence and the law
• WhatsApp harassment: complaint, evidence and the law
• Truecaller harassment: complaint, removal and the law

Cyber crime lawyer in your city · Bank account freeze help · Contact