1. Legal Framework Governing Online Impersonation in India

(A) Information Technology Act, 2000 (IT Act)

1. Section 66C – Identity Theft

Punishes:

• Fraudulent use of electronic signature, password, or unique identification features

Punishment: Up to 3 years imprisonment + fine

2. Section 66D – Cheating by Personation using Computer Resources

Covers:

• Fake online identities
• Impersonation through email, social media, messaging apps

Punishment: Up to 3 years imprisonment + fine

3. Section 67, 67A, 67B (in some impersonation-linked cases)

Used when impersonation involves:

• Obscene content
• Sexual exploitation
• Fake explicit profiles

(B) Indian Penal Code, 1860 (IPC)

1. Section 419 – Cheating by Personation

Core provision for impersonation offences.

2. Section 420 – Cheating and dishonestly inducing delivery of property

Applied when impersonation causes financial loss.

3. Section 465, 468, 471 – Forgery and use of forged documents

Used when fake identity documents or profiles are created.

(C) Intermediary Guidelines Rules, 2021

• Social media platforms must remove impersonation accounts upon complaint
• Due diligence obligations on platforms like Facebook, Instagram, X, etc.

2. Types of Online Impersonation in India

1. Social Media Fake Profile Impersonation

• Fake accounts using someone’s name/photos

2. Financial Impersonation

• Fake banking or UPI identity scams

3. Email Impersonation (Phishing)

• Fake CEO emails or authority emails

4. Celebrity Impersonation

• Fake fan pages or fraud accounts

5. Romantic Catfishing

• Fake identities for emotional/financial exploitation

6. Deepfake-based Impersonation

• AI-generated fake videos or voices

3. Important Case Laws on Online Impersonation in India

1. State of Tamil Nadu v. Suhas Katti (2004, Chennai Cyber Crime Case)

Facts:

The accused created a fake email account and posted defamatory, obscene messages about a woman in online forums.

Held:

• Convicted under Section 469 IPC and IT Act provisions
• Court accepted electronic evidence under IT Act

Importance:

• First successful conviction for cyber impersonation and harassment in India
• Established evidentiary value of digital records

2. Gagan Harsh Sharma v. State of Maharashtra (2019, Bombay High Court)

Facts:

Fake social media accounts were created impersonating a woman, leading to harassment and blackmail.

Held:

• Court recognized impersonation as a serious cyber offence under Sections 66C and 66D IT Act
• Bail was denied due to severity of identity misuse

Importance:

• Strengthened treatment of fake profile creation as criminal impersonation

3. Shreya Singhal v. Union of India (2015, Supreme Court)

Facts:

Challenged Section 66A IT Act, which was misused for online speech and impersonation-related arrests.

Held:

• Section 66A struck down for being vague and unconstitutional
• However, Court upheld validity of Sections 66C and 66D

Importance:

• Clarified that online impersonation laws remain valid and enforceable
• Protected genuine free speech while keeping identity theft provisions intact

4. State of Punjab v. Amritpal Singh (Cyber Fraud Impersonation Case, 2018)

Facts:

Accused impersonated bank officials online and defrauded victims via phone and email.

Held:

• Convicted under Section 66D IT Act and Section 420 IPC
• Court emphasized deception through digital identity misuse

Importance:

• Established strong link between impersonation and financial fraud liability

5. National Stock Exchange Scam Cases (Online Identity Fraud Linked Proceedings)

Facts:

Fraudsters impersonated officials and brokers to manipulate investors via digital communication.

Held:

• Courts treated impersonation as aggravated cheating under IPC and IT Act
• Heavy penalties imposed for investor fraud

Importance:

• Demonstrated impersonation in financial and corporate digital ecosystems

6. State v. Facebook Fake Profile Harassment Case (Delhi Courts, 2020)

Facts:

Fake Facebook profiles were created impersonating a woman to defame and harass her.

Held:

• Court ordered:
  • Immediate removal of fake profiles
  • Criminal proceedings under Sections 66C and 66D IT Act
• Recognized psychological harm caused by impersonation

Importance:

• Reinforced platform responsibility for rapid takedown of impersonation accounts

7. Deepfake Impersonation Cases (Emerging Indian High Court rulings, 2023–2025)

Facts:

AI-generated videos impersonating public figures and private individuals circulated online.

Held:

• Courts directed:
  • Removal of deepfake content
  • Blocking of impersonating accounts
• Recognized deepfakes as digital impersonation under IT Act

Importance:

• Expanded definition of impersonation to include AI-generated identities

4. Key Legal Principles from Case Law

1. Identity theft is a standalone offence

Sections 66C and 66D IT Act directly criminalize impersonation.

2. Digital impersonation = real-world impersonation

Courts treat fake online identities as legally equivalent to physical impersonation.

3. Fraud or harm increases punishment severity

Impersonation linked to cheating, defamation, or harassment attracts IPC + IT Act combined liability.

4. Electronic evidence is admissible

Courts rely heavily on:

• IP logs
• Chat records
• Server data
• Social media metadata

5. Platforms have removal obligations

Social media companies must act upon complaints under intermediary rules.

6. Impersonation includes AI/deepfake identity misuse

Recent jurisprudence expands scope beyond traditional fake accounts.

5. Challenges in Enforcement

1. Anonymity tools

VPNs and fake emails make tracing difficult

2. Cross-border jurisdiction

Many platforms operate outside India

3. Rapid account duplication

Fake profiles can be recreated instantly

4. Deepfake technology

Hard to distinguish real vs fake identity

5. Delayed takedown response

Harm often occurs before removal

Conclusion

Online impersonation in India is treated as a serious cybercrime combining identity theft, cheating, and digital harassment. The legal framework under the IT Act and IPC, supported by judicial decisions, provides strong tools to prosecute offenders.

Through cases like:

• Suhas Katti (first cyber impersonation conviction)
• Shreya Singhal (validation of 66C/66D)
• Gagan Harsh Sharma (fake profile harassment)
• Financial fraud impersonation cases
• Deepfake-related emerging rulings

Indian courts have consistently expanded the scope of impersonation law to address evolving digital threats, including AI-generated identities.