1. Introduction

Deepfake technology refers to AI-generated or AI-manipulated audio, video, or images that realistically mimic a person’s face, voice, or expressions. When used maliciously, it becomes a powerful tool for identity theft and impersonation, where criminals create fake but highly convincing content to:

• Defame individuals
• Commit financial fraud
• Impersonate celebrities, politicians, or private persons
• Manipulate public opinion
• Execute phishing or scam campaigns

In India, while there is no dedicated deepfake legislation yet, such acts are prosecuted under existing cyber laws and criminal laws.

2. How Deepfake Causes Identity Theft

Deepfake-based identity theft typically involves:

(A) Facial impersonation

• AI-generated videos showing a person saying or doing things they never did

(B) Voice cloning

• Fraudsters mimic a victim’s voice to call relatives, employees, or banks

(C) Fake endorsements

• Celebrities made to appear as if they are promoting scams or fake investments

(D) Financial fraud

• Using deepfake identity to trick victims into transferring money

3. Legal Framework in India

(A) Information Technology Act, 2000

• Section 66C – Identity theft (using password, digital signature, biometric misuse)
• Section 66D – Cheating by personation using computer resources
• Section 66E – Violation of privacy (capturing/transmitting private images)
• Section 43 – Unauthorized access and data theft

(B) Indian Penal Code, 1860 (IPC)

• Section 419 – Cheating by personation
• Section 420 – Cheating and dishonestly inducing delivery of property
• Section 465–469 – Forgery (including forgery for reputation damage)
• Section 500 – Defamation

4. Case Laws Relevant to Deepfake-Based Identity Theft

⚠️ Important Note:
India currently has no Supreme Court case specifically on “deepfake identity theft”, but courts apply existing cyber impersonation, forgery, and cheating principles to such cases.

Below are the most relevant judgments used in deepfake-related prosecutions:

1. State of Tamil Nadu v. Suhas Katti (2004)

Facts:

• Accused used online platforms to post false and obscene content using a fake identity.

Held:

• First conviction under the IT Act in India.
• Established that digital impersonation is punishable.

Relevance to Deepfakes:

• Deepfake videos similarly involve fake digital identities used to harm victims.

2. NASSCOM v. Ajay Sood (2005)

Facts:

• Fraudsters sent emails pretending to be NASSCOM representatives to deceive foreign companies (phishing).

Held:

• Court recognized “phishing” and impersonation as cyber fraud and passing off.

Relevance to Deepfakes:

• Deepfakes are the visual/audio equivalent of phishing—digital impersonation to deceive victims.

3. CBI v. Arif Azim (Sony Sambandh Case) (2006)

Facts:

• Fraudster used stolen credit card data online to purchase goods.

Held:

• First conviction for cyber fraud involving identity misuse.

Relevance to Deepfakes:

• Demonstrates that use of stolen or fake identity in digital transactions is identity theft under IT law.

4. Avnish Bajaj v. State (2008) (Bazee.com Case)

Facts:

• Fake listing of illegal content uploaded on an online platform.

Held:

• Discussed intermediary liability and online content responsibility.

Relevance to Deepfakes:

• Deepfake content often spreads through platforms; liability principles apply if platforms fail to act.

5. Shreya Singhal v. Union of India (2015)

Facts:

• Challenge to Section 66A of IT Act (offensive online content regulation).

Held:

• Section 66A struck down as unconstitutional for vague restrictions.

Relevance to Deepfakes:

• While protecting free speech, the judgment clarified that clear laws like 66C and 66D remain valid for impersonation and fraud, including deepfakes.

6. Mohd. Ibrahim v. State of Bihar (2009)

Facts:

• Accused created forged documents and sold property belonging to others.

Held:

• Forgery and impersonation constitute cheating under IPC.

Relevance to Deepfakes:

• Deepfake videos act as “digital forgery” of a person’s identity, similar to forged documents.

7. K.S. Puttaswamy v. Union of India (2017) (Privacy Case)

Facts:

• Challenge to Aadhaar scheme; Supreme Court recognized right to privacy.

Held:

• Privacy is a fundamental right under Article 21.

Relevance to Deepfakes:

• Deepfake misuse of face, voice, and likeness is a direct violation of privacy rights, strengthening legal action against identity misuse.

5. How Courts Would Treat Deepfake Identity Theft

Based on existing jurisprudence, Indian courts are likely to treat deepfake offences as:

(A) Cyber impersonation

→ Under Section 66C & 66D IT Act

(B) Forgery of digital identity

→ IPC Sections 465–469

(C) Cheating and fraud

→ IPC Section 420

(D) Privacy violation

→ Based on K.S. Puttaswamy judgment

6. Emerging Challenges in India

• Lack of specific deepfake law
• Difficulty in tracing AI-generated content creators
• Cross-border cybercrime jurisdiction issues
• Rapid spread through social media platforms
• Evidence authentication problems in court

7. Conclusion

Identity theft through deepfake technology represents a new-age evolution of cybercrime, where traditional impersonation is enhanced by artificial intelligence. Although India does not yet have a dedicated deepfake statute, courts effectively use:

• IT Act provisions (especially Sections 66C & 66D)
• IPC provisions on cheating and forgery
• Constitutional right to privacy

Judicial trends show that Indian law is flexible enough to cover deepfake crimes, but there is a growing need for specific legislation to address AI-generated identity fraud explicitly.