Organised Online Crime in India: Punishment and Defences

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 3 Nov 2026 · Cyber law

Organised online crime is a continuing unlawful activity carried on by a group acting in concert for monetary benefit, and the BNS treats it as a cognizable, non-bailable offence triable by the Sessions court with a minimum punishment of five years. Members, facilitators, those who harbour offenders and those who hold the proceeds each carry separate liability.

Organised online crime is a group activity, and Indian law treats a group that acts together far more severely than a person acting alone. When two or more people act in concert, singly or jointly, in a continuing unlawful activity that includes cyber crimes and economic offences and that is carried on to obtain monetary benefit, the Bharatiya Nyaya Sanhita 2023 attaches an aggravated offence with a much higher floor of punishment than the underlying cheating, forgery or breach of trust. That continuing unlawful activity expressly includes cyber crimes, and an economic offence is defined to include criminal breach of trust under section 316 of the BNS, forgery under sections 336 and 338, and mass-marketing fraud.

This matters from the first police notice, because the organised crime offence is cognizable, non-bailable and triable by the Sessions court, and its punishment begins at imprisonment of not less than five years and can extend to life. The same conduct done by one person without a syndicate might attract only the cheating provisions and a far shorter sentence. What follows explains how a syndicate is identified, how liability is shared across the group, how the case is investigated, and the defences that decide outcomes.

What makes an online crime "organised" in law

The label does not depend on the number of posts or victims alone. It attaches when there is a continuing unlawful activity, that is conduct that is repeated rather than a one-off, carried on by a person or a group of persons acting in concert, singly or jointly, as part of an organised crime syndicate or on its behalf, using violence, the threat of violence, intimidation, coercion or any other unlawful means, to obtain a direct or indirect monetary benefit. A syndicate is defined as a group of persons who act together as a team or gang.

Two elements do the work. The first is the group. A solo fraudster who cheats once is dealt with under the cheating provisions and the IT Act, whereas a coordinated operation with roles divided among recruiters, callers, mule-account handlers and cash-out agents is squarely organised. The second is continuity. The activity must be a continuing course of conduct, not a single transaction. Where a scam is run as a business, month after month, the organised crime threshold is met even if each individual loss is small.

The conduct that is swept in

The statutory list of unlawful activities is broad. It includes cyber crimes, economic offences, extortion, trafficking of persons, trafficking in drugs, weapons or illicit goods and services, and human trafficking for prostitution or ransom. An economic offence is itself defined to cover a spectrum that includes criminal breach of trust, forgery, the counterfeiting of currency notes, hawala transactions and mass-marketing fraud. The typical online fact pattern that meets the definition is a cross-border scam operation running fake trading platforms, fake job offers or fake investment schemes, supported by a calling setup, bank accounts opened in other people's names, and a money-routing layer.

How liability is shared across the group

The law does not merely punish the person who clicked the mouse. It creates distinct exposures at every level of the operation, and in an investigation the roles are mapped before charges are framed.

Role in the operation	Exposure under the law
Person who commits the organised crime	Where the offence caused death, death or imprisonment for life with a fine of not less than ten lakh rupees; otherwise imprisonment of not less than five years extending to life, with a fine of not less than five lakh rupees
Member of the organised crime syndicate	Not less than five years extending to life, with a fine of not less than five lakh rupees
Person who abets, attempts, conspires or knowingly facilitates	Not less than five years extending to life, with a fine of not less than five lakh rupees
Person who harbours or conceals an offender	Not less than three years extending to life, with a fine of not less than five lakh rupees
Person who possesses the proceeds or property of the crime	Not less than three years extending to life, with a fine of not less than two lakh rupees

Two consequences follow. A member who never spoke to a victim is still exposed as a member of the syndicate. A person who lets a bank account be used, or who holds the profits, is exposed under the harbouring and proceeds provisions even without taking part in the fraud itself. The facilitator who says that he only rented out his bank account is answering an offence that carries a statutory minimum of five years, not a minor one.

How an organised online crime is investigated

The procedure begins with information about a cognizable offence recorded as a First Information Report under section 173 of the BNSS. Because the punishment for organised crime extends to life, the offence is not one for which the fourteen-day preliminary enquiry route under section 173(3) is available, and the matter should move to investigation rather than sit in enquiry. The information may be given at any police station irrespective of where the offence was committed, which is the zero-FIR facility, and the case is later transferred to the station that has jurisdiction. Where a station refuses, the aggrieved person sends the substance of the information to the Superintendent of Police under section 173(4) and, if that fails, applies to the Magistrate under section 175(3), who may order an investigation.

Compelling records and seizing evidence

Section 94 of the BNSS allows the court or the officer in charge of a police station to order any person, including a bank, a telecom provider or a platform, to produce documents and electronic records. Section 105 requires that searches and seizures be recorded through audio-video electronic means, which is a safeguard for both sides because it fixes exactly what was taken and when. Electronic records are then proved under section 63 of the BSA 2023, and the IT Act supplies parallel charges under section 66 for computer-related offences, section 66C for identity theft and section 66D for cheating by personation using a computer resource.

Arrest, notice and bail

Where the police intend to take a person into custody, section 35 of the BNSS governs the exercise. For a cognizable offence carrying up to seven years, the officer must ordinarily serve a notice of appearance rather than arrest, and a person who complies and attends is protected from arrest unless the officer records reasons. Organised crime, however, carries a higher maximum, and non-bailable offences do not attract that notice regime in the same way. Because the offence is non-bailable with a high statutory minimum, bail is not a matter of right and the court weighs the gravity of the allegations, the role of the accused and the risk of the investigation being defeated.

Why money-flow evidence decides these cases

An organised online crime is proved less by a victim's description and more by the trail the operation leaves behind. Police build the case from bank statements that show where the money entered and where it moved, from call and IP records that connect the devices used, and from platform records that identify the accounts used to recruit and to communicate. Under section 94 of the BNSS these records can be compelled from banks, telecom operators and platforms, and under section 63 of the BSA they are proved as electronic records.

Tracing the money is also the fastest remedy for a victim. Reporting through the 1930 helpline and cybercrime.gov.in allows the transaction to be flagged and a freeze request to be routed to the beneficiary bank through its nodal officer, and the RBI directions on unauthorised electronic transactions require a bank to act within defined timelines once a fraud is reported. The earlier the report is filed, the higher the chance that the second and third layers of the money trail still hold funds, because organised operations move money out quickly.

What decides the outcome

Whether the activity was continuing, or a single incident. One bad transaction is not organised crime; a pattern of repeated operations is.
The role actually played. A principal who runs the operation, a financier, a facilitator and a mule-account holder are treated differently even though all are exposed.
The evidence of coordination, such as shared accounts, common devices, salary records or instruction messages, which is what turns separate individuals into a syndicate.
Whether the accused knowingly joined an unlawful group or was an unwitting dupe, since knowledge distinguishes a member from a victim of the same network.
The quality of the electronic trail, because accounts, IP logs and money-flow records must be proved under section 63 of the BSA to be relied on.
Whether any death resulted, which shifts the punishment to death or life imprisonment and removes any latitude.

Defences that matter

The strongest defence is a factual one: that the accused was not part of any group or continuing activity, but an isolated individual whose conduct falls under the ordinary cheating provisions and not the organised crime offence. That distinction is not technical; it changes the forum to the Magistrate, the punishment to a fraction, and the availability of bail. Where membership is alleged, the defence examines whether the accused actually shared the common purpose or merely shared a device, a surname or an account. A bank-account holder who was deceived, whose account was taken over without consent, will argue absence of knowledge and of monetary benefit. A facilitator who was a genuine service provider will argue that the "other unlawful means" element is missing. Anything that touches a minor or a woman victim brings in additional statutory safeguards and aggravations, which the defence must address directly.

Common mistakes people make

Treating a Section 35 notice as optional. Ignoring it converts a manageable situation into an arrest and a remand application.
Deleting chats, accounts or transfer records to look innocent. Destruction of evidence strengthens the case for arrest and looks like consciousness of guilt.
Assuming that because one's role was small, exposure is small. The statutory minimum applies to mere membership and to possession of proceeds.
Allowing the same lawyer to advise persons with conflicting interests, which can create a serious conflict as the roles separate.
Waiting to arrange representation. In a non-bailable offence, the first hearing and the remand decision are where much is decided.
Believing that repayment to victims ends the matter. Returning money may be a mitigating factor, but it does not by itself dissolve a continuing organised offence.

When to involve a lawyer

Organised crime charges convert an ordinary cheating allegation into a non-bailable Sessions trial with a minimum sentence, so the earliest advice is the most valuable. If you have received a notice or a summons, a criminal defence lawyer can examine whether the group and continuity elements are actually made out against you, map your role against the statutory exposures, and prepare for the bail stage through the bail application route. If you are a victim of a coordinated scam, the same skill set helps preserve the money-flow evidence and pursue the cyber crime lawyer in Kolkata route for tracing and freezing. The forum, the punishment and the availability of bail all turn on getting the classification right at the start.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

What is organised online crime under Indian law?

It is a continuing unlawful activity, repeated rather than one-off, carried on by a person or group acting in concert as part of an organised crime syndicate, using violence, intimidation, coercion or other unlawful means to obtain monetary benefit. Cyber crimes and economic offences such as forgery and criminal breach of trust are expressly listed among the unlawful activities that make up the offence.

What is the punishment for organised online crime?

The punishment is not less than five years imprisonment extending to life, with a fine of not less than five lakh rupees, and death or life imprisonment with a ten lakh rupee fine where the offence caused death. Abetment, attempt, conspiracy and facilitation, mere membership of a syndicate, harbouring an offender and possessing the proceeds each carry their own statutory minimum.

Is organised crime a bailable offence in India?

No. Organised crime is cognizable, non-bailable and non-compoundable, and it is triable by the Sessions court. Because the statutory punishment begins at five years and extends to life, bail is not a matter of right, and a court weighing bail considers the gravity of the allegations, the accused's role in the operation and the risk that the investigation may be defeated.

Can I be charged for merely renting out my bank account?

Yes. A person who possesses the proceeds of an organised crime, or who knowingly facilitates one by allowing an account to be used, falls within the statutory exposures, and membership of a syndicate carries a minimum of five years. The defence turns on knowledge: if the account was taken over through deception and the holder never shared the purpose or the benefit, liability is contested.

How do the police investigate organised online crime?

They record an FIR under section 173 of the BNSS, which may be filed at any station irrespective of jurisdiction, and use section 94 to compel banks, telecom providers and platforms to produce documents and electronic records. Searches and seizures are recorded on video under section 105, and electronic records are proved under section 63 of the BSA 2023.

What turns separate fraudsters into an organised crime syndicate?

What matters is coordination plus continuity. Shared bank accounts or devices, instruction messages, salary or commission records and a division of roles show that individuals were acting together as a team. A single transaction by one person is not organised crime, but a fraud run as a business month after month readily meets the definition.

What is the difference between organised crime and ordinary cheating?

Ordinary cheating under section 318 of the BNS is triable by a Magistrate and generally bailable. Organised crime is an aggravated offence triable by the Sessions court, non-bailable, with a minimum sentence of five years. The difference is not the act itself but whether it was committed as part of a continuing unlawful activity by a group acting in concert.

Should I engage a lawyer on receiving a Section 35 notice?

Yes. A Section 35 notice of appearance is not an arrest but ignoring it permits arrest under the same provision, and in an organised crime matter the classification drives the forum and the punishment. A lawyer can assess whether the group and continuity elements are made out against you and prepare for the bail stage before the first remand hearing.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact