If you have ever received a message from a “bank official” asking for your OTP, or found someone running a fake social media profile in your name to trick your friends, you have brushed up against the exact conduct that Section 66D of the IT Act was written to punish. As online scams, phishing, and fake profiles have grown, this provision has become one of the most frequently invoked sections in Indian cybercrime complaints. This article explains what Section 66D covers, how it connects to other statutes, what victims can do, and what penalties apply, all grounded in the current statutory text.
What Is Section 66D of the IT Act?
Section 66D of the Information Technology Act, 2000, states that whoever, by means of any communication device or computer resource, cheats by personation shall be punished with imprisonment of up to three years and a fine of up to Rs 1 lakh. In plain terms, “personation” means pretending to be someone else, real or fictitious, to deceive a person into acting in a way they otherwise would not, such as sharing money, personal data, or login credentials. The phrase “communication device or computer resource” is written broadly enough to cover phones, computers, email accounts, websites, and social media platforms.
This section was inserted through the Information Technology (Amendment) Act, 2008, to bring the older concept of cheating by personation, already recognised in criminal law, squarely into the digital space. Common real-world examples include phishing emails pretending to be a bank, fake customer-care numbers, fraudulent job offers, and impersonation on dating or social apps to extract money.
Related Statutory Provisions
Section 66D rarely operates alone. Several other provisions are typically invoked alongside it:
- Section 66C, IT Act: Punishes identity theft, meaning the fraudulent or dishonest use of another person’s password, digital signature, or unique identifying feature. This often accompanies a Section 66D charge when stolen credentials were used to carry out the personation.
- Section 43, IT Act: A civil liability provision covering unauthorised access to a computer system, relevant when the personation involved hacking into an account.
- Sections 318 and 319, Bharatiya Nyaya Sanhita (BNS), 2023: The BNS replaced the Indian Penal Code from 1 July 2024. Cheating, formerly under IPC Sections 415 to 420, is now covered under BNS Section 318, and cheating by personation specifically, formerly IPC Sections 416 and 419, now falls under BNS Section 319. Prosecutors frequently add these general cheating provisions alongside Section 66D when the personation also caused financial loss.
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021: These rules place due diligence obligations on social media platforms and require them to remove impersonating content and assist law enforcement when notified, which is relevant when the personation happens through a fake profile or page.
Nature of the Offence: Rights and Obligations
Section 66D is a cognisable offence, meaning the police can register a First Information Report (FIR) and investigate without needing prior permission from a magistrate. It is also classified as a bailable offence, meaning the accused has a right to bail as a matter of course, subject to conditions set by the police or court.
For victims, this means a complaint can be lodged directly with the police cybercrime cell or through the national portal without waiting for judicial intervention. For platforms and intermediaries, the 2021 Rules create a parallel obligation to act on takedown requests and preserve data that may assist an investigation.
How a Section 66D Complaint Typically Proceeds
- Incident occurs: victim is deceived through a fake identity online
- Complaint filed: at the National Cyber Crime Reporting Portal (cybercrime.gov.in) or the local police cybercrime cell
- FIR registered: since the offence is cognisable, police can register the FIR directly
- Investigation: digital evidence such as IP logs, account records, and transaction trails is gathered
- Charges framed: often combining Section 66D with Section 66C and relevant BNS cheating provisions
- Trial and judgment: culminating in conviction, acquittal, or plea-based resolution
Comparison of Key Provisions
| Provision | Core Conduct Covered | Maximum Punishment | Nature of Offence |
|---|---|---|---|
| Section 66D, IT Act | Cheating by personation using a computer resource | 3 years imprisonment, fine up to Rs 1 lakh | Cognizable, bailable |
| Section 66C, IT Act | Identity theft using another’s password or unique identifier | 3 years imprisonment, fine up to Rs 1 lakh | Cognizable, bailable |
| Section 319, BNS 2023 | Cheating by personation (general, not limited to digital means) | Up to 5 years imprisonment or fine, or both (verify current notified text, as sources vary) | Cognizable |
| Section 318(4), BNS 2023 | Cheating that dishonestly induces delivery of property | Up to 7 years imprisonment and fine | Cognizable |
Exceptions and Practical Limits
Section 66D does not criminalise every case of mistaken identity or satire. The prosecution must show dishonest or fraudulent intent to deceive and to cause the victim to act to their detriment. Parody accounts or clearly labelled fictional personas, without intent to defraud, generally fall outside this section, though they may still raise concerns under other laws such as defamation.
Frequently Asked Questions
It means pretending to be another person, real or imaginary, through a computer or communication device, in order to deceive someone and cause them harm or loss.
Yes, it is both cognizable and bailable, meaning police can register an FIR directly, and the accused is generally entitled to bail.
Yes, they often are. Section 66C covers the theft of the identity or credentials used, while Section 66D covers the act of cheating carried out through that stolen identity.
Complaints can be filed on the National Cyber Crime Reporting Portal at cybercrime.gov.in or directly with the local police cybercrime cell.
Yes, the law does not require the personated identity to belong to a real, existing person for the offence to apply.
Curious for more? The reference book has it.
