If someone hacks your social media account, steals money through an online payment scam, misuses your personal information or threatens you online, you may need help from the cyber crime police. These specialised police units investigate offences involving computers, mobile phones, digital accounts, online platforms and electronic transactions.
Cybercrime investigation in India involves different levels of law enforcement. A local police station may receive information about an offence, a cyber crime police station may register and investigate cases within its assigned jurisdiction, and a cyber cell may provide technical assistance. State cybercrime wings and specialised units also support complex investigations.
The Central Government supports this system through the Indian Cybercrime Coordination Centre (I4C), the National Cyber Crime Reporting Portal, financial-fraud response arrangements and other coordination initiatives. However, the actual investigation and legal action remain primarily the responsibility of the concerned State or Union Territory police.
If you have lost money through online financial fraud, call 1930 immediately and report the incident through the National Cyber Crime Reporting Portal. Quick reporting can help the authorities and participating banks take action to prevent the further movement of suspected fraudulent funds.
Who Is Responsible for Investigating Cybercrime in India?
State and Union Territory police agencies carry the primary responsibility for preventing, detecting, investigating and prosecuting cybercrime in India. This includes online financial fraud, hacking, identity theft, social media offences and other crimes involving digital technology.
The reason is constitutional. Under the Seventh Schedule of the Constitution of India, Police and Public Order are State subjects. Therefore, State and Union Territory governments organise their police forces and establish cyber crime police stations or specialised units according to their requirements.
The Ministry of Home Affairs (MHA) provides national-level support through policy guidance, coordination, technology, advisories and financial assistance for police capacity building.
The Ministry has reiterated this responsibility in its March 2026 statement on cyber crime police stations. It confirms that State and UT law enforcement agencies are responsible for investigation, complaint handling, recovery actions, victim support and prosecution of cybercrime cases.
This means that India does not have one central cyber police force that investigates every online crime. The concerned State or Union Territory police generally handle the investigation, even when a complaint is submitted through a national portal.
What Is the Difference Between a Cyber Cell and a Cyber Crime Police Station?
People often use the terms cyber cell, cyber crime unit and cyber crime police station interchangeably. However, they may perform different functions depending on the State's police structure and the orders under which the units operate.
A cyber cell commonly provides technical assistance and supports investigations. A cyber crime police station is a police station established to handle cybercrime cases within its assigned jurisdiction and powers. A State cyber wing may supervise or coordinate specialised investigations across a wider area.
| Police unit | Typical responsibilities |
|---|---|
| Cyber cell | Provides technical assistance, preliminary analysis, digital evidence support and investigative assistance to police officers. |
| Cyber crime police station | Receives information, registers cases where authorised and investigates cybercrime within its assigned jurisdiction. |
| State cybercrime wing | Supports State-level coordination, specialised investigations, supervision and technical capacity building. |
| Local police station | Receives information about offences and handles investigations under its legal powers and applicable police arrangements. |
| Specialised cyber forensic unit | Examines electronic devices, digital records and other technical evidence to assist investigations. |
These are general descriptions, not a uniform national division of powers. One State may operate dedicated cyber police stations, while another may assign cybercrime investigations to district police units supported by a State cyber cell.
For example, the Kozhikode City Police Cyber Cell describes technical assistance involving electronic records, digital evidence and device-related examination. This illustrates how a cyber cell can support investigations conducted by police officers.
Which Types of Cybercrime Do Cyber Police Investigate?
Cyber crime police investigate a wide range of offences. Some crimes directly target computers, mobile devices or digital networks. Others use the internet, messaging applications, social media or online payment systems to commit offences against individuals and organisations.
The nature of the incident and the applicable criminal law determine how the police classify and investigate a complaint.
1. Online Financial Fraud and Payment Scams
Financial cybercrime includes fraudulent UPI transactions, phishing, fake customer-care numbers, online banking fraud, credit card scams, investment fraud and other deceptive digital payment activities.
Investigators may examine transaction details, beneficiary accounts, mobile numbers, payment identifiers, communications and other available records. They may coordinate with banks and payment service providers to trace transactions and take appropriate action under the law.
For information about payment-related safety, read our guides on RBI's role in digital payment safety and NPCI's role in UPI and digital payments.
2. Hacking and Unauthorised Access
Cyber police investigate cases involving unauthorised access to computers, mobile devices, email accounts, websites and other digital systems. Such cases may involve stolen login credentials, compromised accounts, malicious software or attempts to access confidential information.
Investigators may examine device records, server logs, login information, network activity and other electronic evidence to understand how the unauthorised access occurred.
3. Identity Theft and Online Impersonation
Criminals may misuse another person's photographs, name, phone number or other personal information to create fake profiles, contact victims or commit financial fraud.
Cyber police can investigate such incidents by examining available account information, communications, digital records and other evidence. Victims should preserve the profile URL, screenshots, messages and relevant account details before reporting the incident.
4. Social Media Crimes and Online Harassment
Cybercrime investigations may involve online threats, stalking, impersonation, blackmail, abusive communications, privacy violations and other offences committed through social media or messaging platforms.
Cases involving women and children may require specialised handling and appropriate safeguards. The National Cyber Crime Reporting Portal provides dedicated reporting options for certain offences involving women and children.
5. Ransomware, Data Theft and Cyber Extortion
Ransomware attacks can prevent users or organisations from accessing their own data. Attackers may demand money to restore access or threaten to publish stolen information.
Cyber police may work with technical experts and digital forensic laboratories to examine affected systems, identify available evidence and investigate the people or groups responsible.
6. Cryptocurrency and Other Technology-Related Offences
Cybercrime complaints may also involve cryptocurrency-related fraud, fake trading platforms, fraudulent investment schemes and other technology-enabled offences.
Investigators may need specialist assistance to examine digital wallets, transaction records, online platforms and related technical information. The National Cyber Crime Reporting Portal includes cryptocurrency-related crimes among the categories that users can report.
For investment-related online scams, you can also read our article on SEBI investor protection and online investment safety.
What Are the Main Responsibilities of Cyber Crime Police?
Cybercrime investigation involves much more than identifying a suspicious phone number or asking a bank to block an account. Police officers must establish what happened, identify possible offenders, collect reliable evidence and take action under the applicable law.
1. Receiving Complaints and Registering Cases
Cyber police receive information about suspected online offences through police stations, dedicated cyber units and digital reporting channels. They examine the complaint and take appropriate action according to the nature of the offence and applicable legal provisions.
Depending on the facts and the nature of the offence, the police may register an FIR or take other action permitted by law. A complaint acknowledgement or online reporting reference is not automatically an FIR.
The Bharatiya Nagarik Suraksha Sanhita (BNSS), 2023 provides the criminal procedure framework. Section 173 deals with information relating to cognizable offences, including information provided electronically and information concerning an offence irrespective of the area where it occurred.
2. Identifying Suspects and Tracing Digital Leads
Cyber investigators examine information that may help identify the people involved in an offence. Depending on the case, this may include:
- Mobile numbers and subscriber-related records.
- Email addresses and online account information.
- IP addresses and available login records.
- Bank accounts and payment transaction details.
- UPI IDs and other payment identifiers.
- Website addresses, social media profiles and communication records.
- Data recovered from computers, mobile phones and other devices.
A digital identifier is a lead, not automatic proof of who committed an offence. For example, a phone number or bank account may have been misused, rented, obtained through deception or operated by someone other than its registered holder.
Investigators must examine the available evidence and establish the relevant connections before taking further action.
3. Collecting and Preserving Digital Evidence
Electronic evidence plays an important role in cybercrime investigations. It may include emails, text messages, photographs, videos, transaction records, device data, website information and server logs.
Police officers must collect and preserve such material carefully. Improper handling, alteration or loss of digital evidence can affect its reliability and its use during legal proceedings.
The Bureau of Police Research and Development's First Responder Handbook provides guidance on handling computer systems and electronic evidence.
One important concept is the chain of custody. It means maintaining a documented record of how evidence was collected, handled, transferred, stored and examined. This helps establish that the evidence presented during proceedings is the same material collected during the investigation and that its handling can be accounted for.
4. Working With Digital Forensic Laboratories
Some cybercrime cases require specialised technical examination. Investigators may seek assistance from digital forensic laboratories to examine mobile phones, computers, storage devices and other electronic material.
Depending on the case, forensic examination may help recover relevant information, analyse device activity, identify files or examine other digital traces.
For example, the West Bengal Cyber Forensics and Digital Evidence Examiners' Laboratory describes facilities for examining computer media and mobile devices.
Forensic experts provide technical findings. Investigating officers use those findings alongside other evidence, and the court evaluates the material under the applicable law.
5. Coordinating With Banks During Financial Cyber Fraud Investigations
When someone reports an online financial fraud, police may coordinate with banks, payment service providers and other financial intermediaries to trace the transaction and take appropriate action concerning suspected fraudulent funds.
Quick reporting is important because money may move through several accounts in a short period. The National Cyber Crime Reporting Portal and the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS) support the reporting and coordination process.
Under this system, the relevant law enforcement agency examines the complaint and coordinates with the concerned financial institutions for appropriate action.
A bank hold or lien does not automatically mean that the victim has received a refund. Preventing further movement of suspected funds and restoring money to the rightful claimant are separate stages. The outcome depends on the available funds, verification, competing claims and applicable legal procedures.
6. Preparing Investigation Reports and Supporting Prosecution
After collecting and examining evidence, investigating officers document their findings and take further action under the criminal procedure framework.
This may include recording statements, obtaining relevant records, examining devices, coordinating with forensic experts and preparing the final police report for the competent court.
The BNSS governs criminal investigation and related procedures. The Bharatiya Sakshya Adhiniyam, 2023 provides the legal framework for evidence, including electronic and digital records.
Police investigate and submit their findings. Prosecutors present the case where required, and courts determine guilt according to the law and evidence. An arrest or chargesheet does not, by itself, establish that a person is guilty.
Can You Report Cybercrime at Any Police Station in India?
Yes. You should not assume that only a dedicated cyber crime police station can receive information about a cyber offence.
Section 173 of the BNSS provides that information relating to the commission of a cognizable offence may be given to the officer in charge of a police station irrespective of the area where the offence is committed. This provision supports the process commonly associated with Zero FIR.
The law also recognises information provided through electronic communication. Where information is given electronically, the person providing it must sign it within three days for it to be taken on record under the provision.
Therefore, if you cannot immediately reach a dedicated cyber crime police station, you can approach the nearest police station and explain the incident. The police can follow the applicable procedure and jurisdictional arrangements.
For an emergency or immediate police assistance, you can call the national emergency number 112.
How Do Cyber Police Coordinate Across States?
Cybercrime frequently crosses State boundaries. A victim may live in one city, the suspected caller may operate from another State, the receiving bank account may belong to a different region and the online platform may store relevant information elsewhere.
Such cases require cooperation between police agencies and other organisations. Depending on the investigation, cyber police may coordinate with:
- Police stations and cyber units in other States and Union Territories.
- Banks and financial institutions.
- Telecom operators and internet service providers.
- Social media platforms and other online intermediaries.
- Digital forensic laboratories and technical experts.
- Central agencies and international law enforcement channels, where legally required.
The Ministry of Home Affairs has established national coordination arrangements through I4C. These include Joint Cyber Coordination Teams and the Samanvaya platform, which support information sharing and the identification of interstate connections in cybercrime cases.
Such coordination helps police connect complaints and investigative leads that may otherwise appear unrelated.
What Is the Role of I4C in Cybercrime Investigation?
The Indian Cybercrime Coordination Centre (I4C) is an initiative of the Ministry of Home Affairs. The Government approved the I4C scheme in 2018 to strengthen the national framework for preventing, detecting, investigating and prosecuting cybercrime.
I4C became an attached office of the Ministry of Home Affairs on 1 July 2024. It supports coordination between law enforcement agencies and other stakeholders involved in cybercrime prevention and response.
Its activities include:
- Supporting coordination between State and Union Territory police agencies.
- Operating the National Cyber Crime Reporting Portal.
- Supporting the financial cyber fraud reporting and response mechanism.
- Facilitating information sharing and interstate analysis.
- Supporting cybercrime investigation through technical and forensic resources.
- Conducting training and capacity-building activities for law enforcement agencies.
- Promoting cybercrime awareness and prevention.
I4C does not replace State police investigation. It provides a national coordination and support framework, while the concerned State or UT law enforcement agency handles the investigation and subsequent legal action.
Read our detailed article on the Indian Cybercrime Coordination Centre (I4C) to understand its structure, services and responsibilities.
What Is the Role of the National Cyber Crime Reporting Portal?
The National Cyber Crime Reporting Portal (NCRP) is the Government of India's online platform for reporting cybercrime complaints. The Ministry of Home Affairs established it as part of the I4C framework.
People can use the portal to report different types of cybercrime, including:
- Online financial fraud.
- Mobile-related cybercrime.
- Social media and online account offences.
- Hacking and ransomware.
- Cryptocurrency-related complaints.
- Cyber offences involving women and children.
After submission, complaints are handled by the concerned State or Union Territory police authorities based on the information provided. The portal provides a reporting and coordination facility; it does not independently conduct every investigation.
It is also important to understand that NCRP and I4C do not have the authority to freeze, unfreeze or place a lien on bank accounts. These actions fall within the responsibilities of the relevant law enforcement agencies under the applicable law. The official Cyber Police Portal disclaimer explains this distinction.
For a detailed explanation of reporting options and complaint tracking, read our guide to the National Cyber Crime Reporting Portal.
How to Report Cybercrime to the Police in India
If you become a victim of cybercrime, report the incident as soon as possible. The correct reporting method depends on the type of offence, but you can use the following general steps.
Step 1: Contact the Appropriate Police or Cybercrime Helpline
For online financial fraud, immediately call the national cybercrime helpline 1930. You can also report the incident through the National Cyber Crime Reporting Portal.
For other cyber offences, use the portal's relevant complaint category or approach your nearest police station or cyber crime police station.
If there is an immediate threat to your safety, contact the police through emergency number 112.
Step 2: Preserve Evidence Related to the Incident
Keep all available information that may help the police understand what happened. Depending on the incident, useful evidence may include:
- Bank statements and transaction receipts.
- UPI transaction IDs and UTR numbers.
- SMS messages, emails and chat conversations.
- Phone numbers and email addresses used by the suspected offender.
- Website URLs and social media profile links.
- Screenshots of suspicious messages, payment requests or online profiles.
- Relevant photographs, videos and documents.
- Dates and approximate times of the incident.
Do not delete original messages or modify digital files unnecessarily. Preserve the original information wherever possible and provide copies when requested by the investigating officer.
Step 3: Submit the Complaint With Accurate Details
Explain the incident in chronological order. Mention when it happened, how the offender contacted you, what information or money was involved and what action you took after discovering the fraud.
For financial fraud, provide the bank or wallet name, transaction ID, transaction date, amount and other relevant details. For account hacking or impersonation, provide the affected account information and relevant profile or website links.
Accurate information helps the police understand the incident and identify possible investigative leads.
Step 4: Save the Complaint Acknowledgement
After submitting an online complaint, save the acknowledgement number and any confirmation message or email. You may need these details to check the complaint status or communicate with the concerned police authority.
Remember that an online complaint acknowledgement does not automatically mean an FIR has been registered. The concerned law enforcement agency takes further action according to the applicable procedure.
Step 5: Follow Up With the Concerned Police Authority
If you need an update, use the complaint reference number and contact the concerned police station or State/UT cybercrime authority. The National Cyber Crime Reporting Portal also provides contact details for State and UT nodal officers and grievance officers.
Keep records of your follow-up communications and provide additional documents if the investigating officer requests them.
What Should You Do Immediately After Online Financial Fraud?
Financial cyber fraud requires quick action because the suspected amount may move through several accounts or payment channels.
If someone has transferred money from your bank account or tricked you into making a fraudulent payment, take these steps:
- Call 1930 immediately: Report the financial cyber fraud through the national helpline.
- Submit the online complaint: Complete the reporting process on the National Cyber Crime Reporting Portal and retain the acknowledgement.
- Contact your bank: Inform the bank's official fraud-reporting or customer-support channel and request appropriate action.
- Secure your accounts: Change compromised passwords, block affected cards where necessary and secure your banking or payment applications.
- Preserve transaction evidence: Keep transaction IDs, bank messages, screenshots and communication records.
- Follow up with police: Provide the complaint reference and additional information requested by the concerned authority.
Do not assume that calling 1930 automatically guarantees a refund. The purpose of early reporting is to enable the relevant authorities and financial institutions to take timely action, including attempts to prevent further movement of the suspected funds.
How Many Cyber Crime Police Stations Are There in India?
The number of dedicated cyber crime police stations differs across States and Union Territories. Each State or UT establishes these stations according to its requirements and administrative arrangements.
According to the State/UT-wise figures published by the Bureau of Police Research and Development (BPR&D), India had 459 cyber crime police stations as of 1 January 2024. The Ministry of Home Affairs published these figures in its March 2026 parliamentary response.
Some State-wise figures from that official dataset are:
| State or Union Territory | Cyber crime police stations |
|---|---|
| Uttar Pradesh | 75 |
| Tamil Nadu | 54 |
| Maharashtra | 47 |
| Bihar | 44 |
| Gujarat | 39 |
| West Bengal | 36 |
| Rajasthan | 34 |
| Haryana | 29 |
| Kerala | 20 |
| Delhi | 15 |
| Uttarakhand | 2 |
Data note: These figures are not a live count of operational police stations in November 2026. They represent the BPR&D dataset as of 1 January 2024, reproduced in the Ministry's March 2026 parliamentary response. The number of cyber police units may change as States and UTs establish or reorganise their facilities.
The absence of a dedicated cyber crime police station in a particular State or UT does not mean that cybercrime cannot be reported or investigated there. Local police and other authorised law enforcement units also have responsibilities under the applicable law.
How Can You Find Your Nearest Cyber Crime Police Station?
Cyber crime police stations and specialised cyber units operate under State and Union Territory police departments. Their addresses, contact numbers and jurisdictional responsibilities may change.
To find the appropriate office:
- Visit your State or UT police department's official website.
- Look for the Cyber Crime, Cyber Cell, Cyber Police Station or Crime Branch section.
- Check the official contact details and jurisdiction of the listed unit.
- Contact your nearest regular police station if you cannot identify a dedicated cyber unit.
- For an online complaint already registered through NCRP, check the relevant State/UT nodal officer details on the official cybercrime portal.
Avoid relying on phone numbers circulated through unofficial websites or social media posts. Use contact information published by the concerned State police department or Government portal.
What Are the Limits of Cyber Crime Police Investigation?
Cyber police have legal powers to investigate offences, but every investigation has practical and procedural limitations. The use of digital technology does not mean that every suspect can be identified immediately or every financial loss can be recovered.
- Digital identifiers are not conclusive proof: A phone number, IP address or bank account may provide a lead, but investigators must establish its connection with the offence.
- Information may be held by different organisations: Investigators may need to obtain records from banks, telecom operators, online platforms and other service providers through lawful processes.
- Interstate and international cases take coordination: Suspects, accounts and digital infrastructure may be located in different jurisdictions.
- Forensic examination may take time: Complex devices and large volumes of digital data may require specialised analysis.
- Financial recovery is not guaranteed: The amount available for recovery, transaction trail and applicable legal process affect the outcome.
- Courts decide guilt: Police investigate and submit evidence. The court determines whether the prosecution has established the case under the law.
These limitations do not reduce the importance of reporting cybercrime. Timely reporting, accurate information and preservation of evidence can help the investigating agency take appropriate action.
Frequently Asked Questions About Cyber Crime Police in India
Q. What is a cyber crime police station?
Ans. A cyber crime police station is a police station established to handle cybercrime cases within its assigned jurisdiction and powers. It may investigate offences involving online fraud, hacking, identity theft, social media misuse and other digital crimes.
Q. What is the difference between a cyber cell and a cyber crime police station?
Ans. A cyber cell generally provides technical assistance and investigative support, while a cyber crime police station may receive, register and investigate cases within its assigned jurisdiction. Their exact responsibilities depend on the relevant State or UT police structure.
Q. Who investigates cybercrime in India?
Ans. State and Union Territory law enforcement agencies have the primary responsibility for investigating cybercrime in India. The Central Government supports them through I4C, national reporting systems, coordination, technical resources and capacity-building initiatives.
Q. Can I report cybercrime at my nearest police station?
Ans. Yes. You can approach your nearest police station to report a suspected cyber offence. Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023 provides for information relating to cognizable offences to be given to a police station irrespective of the area where the offence occurred, subject to the applicable legal procedure.
Q. Can I report cybercrime online in India?
Ans. Yes. You can report cybercrime through the Government's National Cyber Crime Reporting Portal. It accepts complaints involving online financial fraud, social media crimes, hacking, ransomware, mobile-related offences and other cybercrime categories.
Q. What is the cybercrime helpline number in India?
Ans. The national cybercrime helpline number is 1930. It is particularly important for reporting online financial fraud. For immediate police emergencies, call 112.
Q. Does filing an online cybercrime complaint automatically register an FIR?
Ans. No. An online complaint acknowledgement confirms that the information has been submitted. The concerned State or UT police examines the complaint and takes further action, including FIR registration where required under the applicable law.
Q. Does I4C investigate every cybercrime complaint?
Ans. No. I4C provides national coordination and support for cybercrime prevention and response. Complaints submitted through the National Cyber Crime Reporting Portal are handled by the concerned State or UT law enforcement agencies, which take investigative and legal action.
Q. Can cyber police freeze a bank account involved in online fraud?
Ans. The concerned law enforcement agency can take appropriate action concerning suspected fraud-related funds under the applicable law and procedures, including coordinating with banks. I4C and the National Cyber Crime Reporting Portal do not themselves have the authority to freeze or unfreeze bank accounts.
Q. Does reporting financial cyber fraud through 1930 guarantee a refund?
Ans. No. Quick reporting can help the authorities and financial institutions attempt to prevent further movement of suspected funds. However, the recovery of money depends on the available funds, verification, transaction trail and applicable legal procedures.
Q. What evidence should I provide to cyber police?
Ans. Depending on the incident, useful evidence may include bank statements, transaction IDs, UPI details, SMS messages, emails, chat records, screenshots, website URLs, social media profile links, phone numbers and relevant device information. Preserve original records wherever possible.
Q. How many cyber crime police stations are there in India?
Ans. According to BPR&D data reproduced in the Ministry of Home Affairs' March 2026 parliamentary response, India had 459 cyber crime police stations as of 1 January 2024. This is a dated official dataset, not a live count of operational stations.
Q. Can cyber police recover money lost in online fraud?
Ans. Police can investigate the transaction, coordinate with financial institutions and take lawful steps to help secure suspected fraud-related funds. However, recovery is not guaranteed and depends on the amount available, the transaction trail and the applicable process.
Q. What is the emergency police number in India?
Ans. The national emergency response number is 112. Use it when you need immediate police assistance or face an emergency involving personal safety.