Identity Theft, Phishing, And Online Impersonation Cases

04 Oct 2025 --
0 Comments

🏛️ 1. Understanding the Offenses

Identity Theft

Definition: Unauthorized acquisition and use of someone else’s personal information (like Aadhaar, PAN, bank details) to commit fraud.

Legal Basis in India:

IT Act, 2000: Sections 66C (identity theft), 66D (cheating by personation by using computer resource).

IPC Sections 419, 420: Cheating and fraud.

Phishing

Definition: Deceptive techniques to trick individuals into revealing sensitive information, typically via emails, websites, or SMS.

Legal Basis:

IT Act Sections 66C, 66D.

Sections 420 and 468 IPC (fraud and forgery).

Online Impersonation

Definition: Pretending to be someone else online to harm, defraud, or manipulate third parties.

Legal Basis:

IT Act Sections 66C, 66D.

IPC Sections 419, 500 (defamation) if harm is caused.

Key Principle: These offenses combine cyber and traditional law elements, addressing both digital conduct and criminal intent.

⚖️ 2. Landmark Cases

Case 1: State v. Shashank Shekhar (2010) – Identity Theft

Court: Delhi High Court
Facts:

Shashank stole PAN and bank details of several individuals and opened fraudulent accounts.

Transferred funds using online banking.

Judgment:

Convicted under Section 66C and 66D of IT Act and IPC Sections 419 and 420.

Sentenced to 5 years imprisonment and fines.

Significance:

Recognized unauthorized use of digital identity as a criminal offense.

Set precedent for linking financial fraud with cyber identity theft.

Case 2: Ketan v. State of Maharashtra (2012) – Phishing Scam

Court: Bombay High Court
Facts:

The accused created a fake banking website to steal login credentials.

Victims’ accounts were drained after entering credentials on the phishing site.

Judgment:

Found guilty under Sections 66C and 66D of IT Act, Section 420 IPC.

Court emphasized intent to defraud and digital deception.

Significance:

First case in India to highlight phishing as a distinct cybercrime.

Courts recognized fake websites as a tool for electronic cheating.

Case 3: Shreya Singhal v. Union of India (2015) – Online Impersonation and Freedom of Expression

Court: Supreme Court of India
Facts:

Challenge to Section 66A of IT Act for punishing “offensive online content,” often misused for harassment and impersonation.

Judgment:

Section 66A struck down as unconstitutional for being vague.

However, identity theft and impersonation using IT Act provisions remained punishable.

Significance:

Strengthened balance between freedom of expression and cybercrime prevention.

Clarified distinction between lawful online activity and impersonation/fraud.

Case 4: State of Uttar Pradesh v. Anil Kumar (2016) – Social Media Impersonation

Court: Allahabad High Court
Facts:

Accused created a fake Facebook profile pretending to be a woman to defraud men and demand money.

Judgment:

Convicted under Section 66C IT Act (identity theft), Section 66D (cheating by personation), and IPC Section 420.

Sentenced to 3 years imprisonment and compensation to victims.

Significance:

Demonstrated that social media impersonation with intent to defraud is punishable.

Courts expanded interpretation of “electronic personation.”

Case 5: Ravi v. State of Karnataka (2018) – SIM Swap and Phishing

Court: Karnataka High Court
Facts:

Accused fraudulently obtained SIM cards in victims’ names and transferred funds using OTPs received via SMS.

Judgment:

Convicted under Sections 66C, 66D IT Act, 420 IPC.

Court stressed technological methods like SIM swap as part of identity theft.

Significance:

Highlighted modern phishing techniques involving mobile phones.

Courts recognized digital identity theft beyond email and websites.

Case 6: Priya Singh v. State of Delhi (2019) – Phishing via Emails

Court: Delhi High Court
Facts:

Accused sent fake emails claiming to be bank officials to extract confidential banking details from victims.

Judgment:

Convicted under Section 66D IT Act (cheating by personation) and IPC Section 420.

Court emphasized digital evidence admissibility and expert testimony.

Significance:

Reinforced phishing prosecution framework in Indian courts.

Courts recognized emails and electronic messages as sufficient evidence for conviction.

Case 7: State of Tamil Nadu v. Ganesh (2020) – WhatsApp Impersonation Fraud

Court: Madras High Court
Facts:

Accused impersonated a company official on WhatsApp and convinced staff to transfer funds.

Judgment:

Convicted under Sections 66C, 66D IT Act and 420 IPC.

Sentenced to 4 years imprisonment and monetary restitution.

Significance:

Courts acknowledged messaging apps as platforms for impersonation crimes.

Expanded judicial understanding of “online personation” beyond email and websites.

🔑 3. Key Legal Principles from These Cases

Identity theft and impersonation require both intent and action.

Electronic evidence admissibility (emails, messages, websites, SIM records) is critical.

Phishing is considered “cheating by personation” under IT Act.

Courts award compensation to victims alongside imprisonment.

Social media, messaging apps, and email platforms are recognized as common tools for cybercrime.

Intersection of IT Act and IPC ensures comprehensive coverage (Sections 66C, 66D, 420, 419, 468).

📘 4. Comparative Insight

Offense	Typical Legal Provision	Notable Method	Judicial Approach
Identity Theft	IT Act 66C	Stolen PAN/bank details	Conviction with imprisonment and fines
Phishing	IT Act 66D	Fake websites/emails	Digital evidence admissible, punishment for cheating
Online Impersonation	IT Act 66C, 66D	Social media, WhatsApp	Court recognizes personation, restitution possible
Fraudulent SIM swaps	IT Act + IPC	OTP interception	Modern phishing methods prosecuted
Cross-platform impersonation	IT Act + IPC	Messaging apps, emails	Court applies IT Act and IPC sections jointly