IT Act Section 66D: Punishment for Cheating by Personation

Updated: July 15, 2026Published: July 13, 2026

Quick Answer

Section 66D of the IT Act criminalizes cheating by personation using a computer resource or communication device, imposing penalties of up to three years in prison and a fine of up to ₹1 lakh. Victims must act quickly to freeze compromised funds and mandate platforms to delete fake profiles within 24 hours.

Table of Contents

Key Takeaways

  • Section 66D specifically targets digital impersonation, phishing, and fake social media profiles used to defraud victims.
  • The offence is punishable by up to three years of imprisonment and a ₹1 lakh fine.
  • Section 318 of the Bharatiya Nyaya Sanhita (BNS), 2023, is commonly invoked alongside Section 66D for cheating.
  • Under the IT Rules, social media intermediaries must remove impersonating content within 24 hours of a formal complaint.

Introduction

Identity theft and digital impersonation lie at the heart of most modern cyber frauds. Whether a scammer creates a fake social media profile mimicking a friend to extract money, or sends a phishing email pretending to be your bank, the entire crime relies on deception. To combat this, the Indian legal framework employs a highly specialized provision: Section 66D of the Information Technology (IT) Act, 2000. This law targets cybercriminals who weaponize digital anonymity to cheat victims through impersonation, providing severe criminal penalties.

When you are a victim of digital impersonation, the law provides parallel paths to penalize the offender and mitigate your damages.

1. Criminal Remedies (Punishing the Impersonator)

Initiating criminal proceedings ensures the fraudster is tracked and penalized by the state:

  • Section 66D IT Act: This section explicitly states that whoever, by means of any communication device or computer resource, cheats by personation, shall be punished with imprisonment of either description for a term which may extend to three years and shall also be liable to a fine which may extend to one lakh rupees.
  • Bharatiya Nyaya Sanhita (BNS), 2023: Section 66D of the IT Act is almost always invoked alongside Section 318 of the newly enacted BNS, which broadly covers cheating and dishonestly inducing the delivery of property. Together, these form a robust criminal charge against the syndicate.
  • Bharatiya Sakshya Adhiniyam (BSA), 2023: Proving personation in court requires presenting digital evidence (such as fake email headers or fraudulent WhatsApp chats). The BSA strictly mandates that electronic records must be legally certified to be admissible in a court of law.

2. Civil Remedies (Restitution and Platform Accountability)

Civil remedies focus on removing the threat and recovering lost assets:

  • Intermediary Liability (IT Rules): Under the Information Technology Intermediary Guidelines, social media platforms and digital intermediaries must act expeditiously to remove unlawful content. Content that impersonates individuals must be removed within 24 hours of receiving a formal grievance.
  • Adjudicating Officer: Victims who suffer severe financial loss due to digital identity theft can approach the State Adjudicating Officer under Section 46 of the IT Act to claim monetary damages.

Time Limits

  • The Golden Hour: If the personation leads directly to a financial scam (e.g., a fake bank executive stealing your OTP), you must call the 1930 National Cyber Crime Helpline within the first 2 to 24 hours to freeze the illicit transaction.
  • RBI 3-Day Rule: For banking frauds caused by impersonation, you must report the unauthorized debit to your bank within 3 working days to secure zero liability under RBI directives.
  • Content Takedown: Social media platforms are mandated by government regulations to remove content that impersonates others within 24 hours of receiving a formal grievance.

Practical Tips

  • Preserve Digital Evidence: Do not immediately block and delete the fake profile or message. Take extensive screenshots of the impersonator's profile, save chat transcripts, and capture UPI reference IDs or IP logs if available.
  • Where to File Complaints:
    • Report impersonation profiles directly to the social media platform using their in-app reporting tools.
    • If financial loss occurs, call 1930 immediately.
    • File a detailed e-FIR on the National Cyber Crime Reporting Portal (cybercrime.gov.in) citing Section 66D of the IT Act and Section 318 of the BNS.
  • Escalation Remedies: If an intermediary fails to remove the fake profile within 24 hours, you can escalate the matter to the Grievance Appellate Committee (GAC) or seek an injunction from a civil court.

When Should You Consult a Cyber Lawyer?

  • Corporate Spoofing: If your business is targeted by scammers using fake domains or spoofed emails (Business Email Compromise) to cheat clients, a cyber lawyer is essential to trace the IP addresses and file high-level corporate cyber FIRs.
  • Defending Against False Charges: If a hacker spoofs your IP address or uses your stolen identity to commit Section 66D offenses, you need a lawyer instantly to secure anticipatory bail and prove your innocence through digital forensics.
  • Drafting Takedown Notices: When platforms ignore your requests to remove fake accounts that are damaging your reputation, a lawyer can issue formal legal notices threatening litigation for violating the IT Intermediary Guidelines.

Conclusion

Cheating by personation is a severe digital offense that shatters trust and causes immense financial harm. Section 66D of the IT Act provides a sharp legal tool to prosecute fraudsters who hide behind fake digital identities. By acting swiftly to freeze compromised funds, preserving electronic evidence under BSA standards, and utilizing mandatory 24-hour platform takedown rules, victims can successfully combat online impersonation and secure their legal rights.

Frequently Asked Questions

Q: What is the punishment under Section 66D of the IT Act?

A: The punishment is imprisonment for a term which may extend up to three years, along with a fine that may extend up to one lakh rupees.

Q: Does Section 66D apply if someone creates a fake social media profile in my name?

A: Yes. If the fake profile is created to cheat, defraud, or maliciously personate you using a computer resource, it squarely falls under Section 66D.

Q: How quickly must a social media platform delete a fake profile impersonating me?

A: Under the IT Intermediary Guidelines, social media platforms are legally mandated to remove content impersonating individuals within 24 hours of receiving a formal complaint.

Need personalized legal help?

Find advocates on JurisOS and send an enquiry.

Find Cyber Law Lawyers