1. Meaning of Deepfake Identity Fraud in India

Deepfake identity fraud in India refers to the use of AI-generated or manipulated audio, video, or images to falsely represent a real person in order to:

• Steal identity (impersonation of individuals)
• Commit financial fraud (banking scams, UPI fraud, CEO fraud)
• Create fake online accounts or profiles
• Mislead victims into transferring money or sharing sensitive data
• Damage reputation or extort victims using fabricated content

In India, there is no separate “deepfake law”, so these acts are prosecuted under:

Key Legal Provisions

• IT Act, 2000
  • Section 66C → Identity theft
  • Section 66D → Cheating by personation using computer resources
• IPC (now largely replaced by BNS, 2023 but still relevant in case law context)
  • Section 419 → Cheating by personation
  • Section 420 → Cheating and dishonestly inducing delivery of property
  • Section 465/468/471 → Forgery and use of forged documents
• Defamation laws (for reputational deepfakes)
• Right to privacy (Puttaswamy judgment framework)

Deepfakes are treated as a technological tool of impersonation and deception, not a separate offence.

2. How Deepfake Identity Fraud Works in India

Common patterns include:

1. Fake video of a known person (politician/celebrity/executive) asking for money
2. Voice cloning of family members demanding urgent transfers
3. AI-generated KYC impersonation to open bank accounts
4. Fake job interviews using deepfake recruiters
5. Social media identity cloning for scams or extortion

3. Indian Case Law Relevant to Deepfake Identity Fraud

Although India has no Supreme Court deepfake-specific ruling yet, courts apply established cybercrime and impersonation principles.

1. State of Tamil Nadu v. Suhas Katti (2004, Chennai Trial Court)

Relevance: First cybercrime conviction in India

• Defendant posted fake and defamatory content about a woman in online groups.
• Used internet to impersonate and harass.

📌 Legal principle:
Cyber impersonation and online misuse of identity is punishable even without physical evidence.

📌 Deepfake relevance:
If a deepfake video is used to harass or misrepresent someone online, this case supports conviction under cyber harassment and impersonation principles.

2. Avnish Bajaj v. State (2008, Delhi High Court)

Relevance: Intermediary liability and online fraud

• Case involved sale of obscene content via an online platform (Bazee.com incident).
• Court examined liability for online content distribution.

📌 Legal principle:
Online platforms and intermediaries may be liable depending on knowledge and due diligence.

📌 Deepfake relevance:
If deepfake identity fraud is circulated via platforms, liability and due diligence obligations arise under IT law.

3. Shreya Singhal v. Union of India (2015, Supreme Court)

Relevance: Digital speech and liability standards

• Struck down Section 66A of IT Act (vague speech offence).
• Upheld importance of clear legal standards for online offences.

📌 Legal principle:
Only specific, clearly defined offences can be used for prosecution.

📌 Deepfake relevance:
Deepfake identity fraud must be prosecuted under precise provisions like 66C and 66D, not vague interpretation.

4. Anvar P.V. v. P.K. Basheer (2014, Supreme Court)

Relevance: Electronic evidence admissibility

• Held that electronic records require certification under Section 65B of Evidence Act.

📌 Legal principle:
Digital evidence must be properly authenticated.

📌 Deepfake relevance:
Courts must verify authenticity of videos/audio before treating them as evidence or fraud material.

5. NASSCOM v. Ajay Sood (2005, Delhi High Court)

Relevance: Email phishing and identity misuse

• Defendant used fake emails impersonating NASSCOM.
• Court recognized passing off in digital identity misuse.

📌 Legal principle:
Impersonation through digital identity is actionable fraud.

📌 Deepfake relevance:
Deepfake videos impersonating companies or officials fall under similar “digital passing off” and fraud principles.

6. SMC Pneumatics (India) Pvt. Ltd. v. Jogesh Kwatra (2001, Delhi High Court)

Relevance: Cyber defamation and impersonation

• Employee sent defamatory emails impersonating employer.
• Court granted injunction and recognized cyber defamation.

📌 Legal principle:
Online impersonation causing reputational harm is actionable.

📌 Deepfake relevance:
Deepfake identity misuse for defamation or reputational attack is covered under similar reasoning.

4. Legal Mapping of Deepfake Identity Fraud in India

5. Judicial Approach in India

Indian courts generally treat deepfake identity fraud as:

(A) Identity Theft Problem

Covered under IT Act Section 66C

(B) Personation Fraud

Covered under Section 66D and IPC 419

(C) Forgery of Digital Content

Covered under IPC 468/471

(D) Privacy Violation

Linked with Justice K.S. Puttaswamy v. Union of India (2017) recognizing privacy as a fundamental right

6. Current Legal Gaps in India

1. No specific “deepfake offence” in IT Act or BNS
2. Difficulty in tracing AI-generated content creators
3. Weak regulation of synthetic media detection
4. Limited forensic infrastructure for deepfake verification
5. Cross-border cybercrime enforcement challenges

7. Conclusion

In India, deepfake identity fraud is prosecuted through existing cybercrime, fraud, and impersonation laws, especially:

• IT Act Sections 66C and 66D
• IPC Sections 419, 420, 468, 471
• Established cyber jurisprudence from cases like Suhas Katti, Ajay Sood, and Shreya Singhal

Courts treat deepfakes as a modern extension of impersonation and electronic fraud, and rely heavily on traditional cyber law principles rather than creating new legal categories.