Home/Practice Areas/Cyber Crime Lawyer
Cyber Crime Lawyer in Gurgaon
UPI and online fraud, IT Act FIRs, sextortion, crypto scams and frozen accounts — defended across Gurugram and all twenty-two Haryana cyber cells.
The basics
What is cyber crime under Indian law?
Cyber crime is not a single offence. It is a category of conduct in which a computer, a phone or a network is either the instrument used to commit a crime or the target of it. Indian law prosecutes it through two statutes working together: the Information Technology Act, 2000, which deals with offences specific to computer resources, and the Bharatiya Nyaya Sanhita, 2023, which supplies the general offences of cheating, forgery and criminal breach of trust that most digital frauds also amount to.
That pairing is the single most important thing to understand about your own case. An FIR charged only under the IT Act looks very different from the same facts charged with Section 318 BNS added, because the first is largely bailable and the second is not.
In practice, the cases that come through a Gurugram cyber cell fall into three broad shapes. There is financial fraud — UPI and net-banking transfers, OTP and SIM-swap fraud, fake investment and trading platforms, crypto scams. There is identity and access misuse — hacking, phishing, data and source-code theft, impersonation and fake profiles. And there is content-based offending — sextortion, morphed images, obscene material and online harassment.
What unites them is that the evidence is data. Server logs, transaction records, IP allocation records, call detail records and device forensics. Data has to be proved in a particular way to be admissible, and it has to be attributed to a particular person before it means anything. Those two requirements — proof and attribution — are where cyber cases are actually won and lost, and they are why a cyber matter defended as though it were an ordinary cheating case tends to lose ground before the trial even starts.
If a cyber crime FIR has been registered against you in Gurugram, or money has disappeared from your account and the police are moving slowly, the position is recoverable — but it is time-sensitive. Advocate Rajat Kadyan defends cyber crime cases across the Gurugram cyber police stations, the Gurgaon District Court and the Punjab & Haryana High Court, and acts for victims pursuing recovery.
Cyber matters are prosecuted by units that specialise in them and defended, too often, by advocates who treat them as ordinary cheating cases. That mismatch shows up early: in how freeze orders are challenged, in whether Section 65B certification of electronic evidence is questioned, and in whether the payment trail is actually examined rather than accepted.
Cyber crime cases we handle in Gurgaon
The practice covers the full range of offences under the Information Technology Act, 2000 and the corresponding provisions of the Bharatiya Nyaya Sanhita, 2023 (which replaced the Indian Penal Code from 1 July 2024).
- UPI, wallet and net-banking fraud — unauthorised transfers, OTP and SIM-swap fraud, mule account allegations, payment gateway disputes.
- Investment, trading and cryptocurrency scams — fake trading apps, Ponzi and referral schemes, crypto exchange disputes, forex fraud.
- Identity theft and impersonation — Sections 66C and 66D IT Act, fake profiles, KYC misuse, e-signature fraud.
- Sextortion, morphing and obscene content — Section 67 and 67A IT Act, handled with complete discretion for both complainants and the accused.
- Online harassment and defamation — stalking, doxxing, review bombing, and content takedown notices to intermediaries.
- Hacking, phishing and data theft — Sections 43 and 66 IT Act, employee data theft, source code and database misappropriation.
- Job, loan-app and matrimonial fraud — fake recruitment, loan app harassment and recovery abuse, matrimonial site cheating.
- Corporate and business cases — frozen merchant accounts, payment aggregator disputes, and complaints against a company's directors.
The legal framework, in plain terms
Most cyber prosecutions in Haryana are built on a combination of IT Act provisions and BNS provisions charged together. Understanding which section carries which consequence is the first step in assessing exposure.
Why this matters for bail: most standalone IT Act offences carry three years and are bailable or readily bailable. The moment BNS Section 318 or Section 111 is added, the offence becomes non-bailable and the bail application becomes a materially different exercise. The sections listed in the FIR are the first thing to check.
Electronic evidence: where cases are actually won
A cyber prosecution rests on data — server logs, transaction records, CDRs, IP allocation records and device forensics. That data has to be proved in a specific way, and the requirements are frequently not met.
Section 63 BSA certification (formerly Section 65B Evidence Act)
Electronic records produced as secondary evidence require a certificate from a person occupying a responsible official position in relation to the device or system. Following the Supreme Court's ruling in Arjun Panditrao Khotkar, this is mandatory, not a formality. Certificates that are missing, unsigned, issued by the wrong person, or generic to the point of meaninglessness are a genuine line of defence.
The payment trail
In fraud cases the prosecution's theory is usually that money moved from the complainant to an account controlled by the accused. That chain often involves several intermediate accounts, and the link to the accused can be assumption rather than evidence — particularly where an account has been rented, sold or used without the holder's knowledge. Reconstructing the trail from bank statements is slow work and it is where defences are found.
Attribution
An IP address identifies a connection, not a person. A device identifies a handset, not a user. Where multiple people had access to a shared connection, a shared device or a shared login, attribution is contestable.
If you are the victim of cyber fraud
The window in which money can be intercepted is measured in hours. What to do, in order:
- Call the national cyber crime helpline on 1930 immediately, or file at cybercrime.gov.in. The Citizen Financial Cyber Fraud Reporting system can push a hold request to the beneficiary bank before funds are withdrawn.
- Inform your bank in writing the same day and retain the acknowledgement. Under the Reserve Bank of India's limited-liability framework, an unauthorised third-party transaction reported within three working days generally leaves the customer with zero liability; delay shifts the loss onto you.
- Register a formal complaint at the cyber police station having jurisdiction and obtain the acknowledgement or FIR copy.
- Where the amount justifies it, follow up with an application before the Magistrate for release of the traced funds — police recovery alone is often slow, and a court direction moves it.
If an FIR has been registered against you
The instinct to explain everything to the investigating officer is understandable and usually costly. The sequence that protects you is different:
- Obtain a certified copy of the FIR. Nothing can be planned without the exact sections invoked and the allegations as recorded.
- Assess bail exposure immediately. If any non-bailable section is present, anticipatory bail under Section 482 BNSS should be considered the same day.
- Respond properly to a Section 35(3) BNSS notice. Attend with counsel. Ignoring it converts a notice situation into an arrest situation.
- Preserve your own evidence. Do not delete chats, apps or transaction records. Deletion is both discoverable and damaging.
- Consider quashing. Where the FIR discloses no offence, or the dispute is fundamentally civil or commercial, a petition under Section 528 BNSS before the High Court may be the correct route rather than a long trial.
Our services
What service we provide
Cyber matters handled
From a single unauthorised UPI debit to multi-crore syndicate prosecutions with dozens of accused.
UPI & banking fraud
Unauthorised transfers, OTP fraud, SIM swap, mule account allegations and payment gateway disputes.
Investment & crypto scams
Fake trading platforms, Ponzi and referral schemes, cryptocurrency and forex fraud matters.
Identity theft
Sections 66C and 66D IT Act — password misuse, fake profiles, KYC and e-signature fraud.
Sextortion & morphing
Section 67 matters handled confidentially for complainants and for those wrongly accused.
Hacking & data theft
Unauthorised access, phishing, employee data theft, source code and database misappropriation.
Frozen accounts
Release of accounts lien-marked on an NCRP complaint or a cyber cell reference.
How it runs
From your first message to closure
Free first assessment
Send the FIR, notice, freeze letter or complaint on WhatsApp. The papers are read and you are told what the sections actually mean for you, at no charge.
Immediate protective steps
Where arrest is a live risk, an anticipatory bail application is prepared the same working day. Where an account is frozen, the freeze reference is obtained and an application drafted.
Building the technical defence
The payment trail, the certification of electronic evidence, and the attribution of devices and IP addresses are examined in detail rather than accepted as pleaded.
Filing and appearance
Applications and petitions are filed in the appropriate forum — cyber police station, Magistrate, Sessions Court or High Court — and argued personally.
Through to closure
Bail conditions complied with, accounts credited, orders collected, and the matter followed to discharge, acquittal, quashing or settlement.
Why choose this office
Why we are the best choice in Gurugram for cyber crime cases
Four things that make a practical difference to how your matter is run — and every one of them is something you can hold us to.
A practice built specifically around cyber matters
Most criminal practices in Gurugram treat cyber cases as ordinary cheating with a phone attached. This one was built around the technical side — freeze references, NCRP-linked complaints, payment-trail reconstruction and certification of electronic evidence under Section 63 BSA.
The evidence is actually examined, not accepted
The payment trail is followed transaction by transaction, the Section 63 certification is checked against who signed it and whether they were competent to, and attribution of an IP address or device to a person is tested rather than assumed.
Coverage across every Haryana cyber cell
Cyber complaints are routinely registered in a district you have never visited. Appearances are made across all twenty-two Haryana district cyber cells, and outstation and NRI clients are handled without needing to travel.
Reachable when the freeze or the notice actually lands
Accounts get frozen on Saturdays and notices arrive at night. The line is answered around the clock, the first consultation is free, and urgent de-freeze and bail applications are filed the same day where the facts allow.
Questions
Frequently asked
Is a cyber crime case bailable in India?
It depends entirely on the sections invoked. Most standalone offences under the Information Technology Act carry a maximum of three years and are bailable. Once Section 318 BNS (cheating, formerly Section 420 IPC) or a more serious provision is added to the FIR, the offence becomes non-bailable and bail must be applied for and argued. Check the FIR's section list before assuming either way.
How long does a cyber crime case take in Gurgaon?
Bail and interim relief usually move in days to weeks. A full trial commonly runs two to four years, depending on the number of accused, the volume of electronic evidence and how many complainants are joined. Quashing before the High Court, where available, is frequently faster than waiting for a trial to conclude.
Can a cyber crime FIR be quashed?
Yes, in appropriate cases. The High Court's inherent power under Section 528 BNSS (formerly Section 482 CrPC) can be invoked where the FIR discloses no offence, where the dispute is essentially civil or contractual, or where the parties have genuinely settled a compoundable matter. It is discretionary and turns on the material on record, not on how strongly the case is argued.
The police say my account received fraud money but I did nothing. What now?
This is common where an account has been used as an intermediate hop, or where a customer received payment for genuine goods or services from a buyer who was himself using stolen funds. The defence is documentary: invoices, delivery records, communications with the payer, and the pattern of the account's ordinary use. Gather them before responding to the police.
Do I have to travel to Gurgaon for a cyber crime case?
Frequently not. Consultations are held by phone and video, documents move by WhatsApp or email, and appearance is made on your behalf wherever personal presence is not legally required. Outstation and NRI clients are a routine part of this practice, since cyber complaints are often filed in a district the accused has never visited.
What does a cyber crime lawyer in Gurgaon charge?
It depends on the stage and the forum — a single bail application and a multi-accused trial with thousands of pages of bank records are not comparable. What is fixed is the method: the first consultation is free, and a written fee quote is given before any work begins.
Which cyber police station will handle my case?
In Gurugram, cyber matters are registered at the district cyber police stations, with jurisdiction usually following the complainant's location or where part of the offence occurred. This is why a complaint filed in Sirsa or Nuh can concern a person living in Bengaluru. Appearances are made across all twenty-two Haryana district cyber cells.
Related
Other areas of practice
Cyber cases move faster than court dates
The first week decides how much of your money and your record can be protected. Call for a free assessment.