Electricity Bill Scam: Evidence to Preserve in 48 Hours
By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 3 Nov 2026 · Digital evidence
In the first 48 hours after an electricity bill scam, you must preserve all SMS messages, call logs, WhatsApp chats, and bank transaction records. This evidence is critical for filing a successful complaint under BSA 2023 Section 63 and establishing the scammer's identity for BNS 2023 Section 318 prosecution.
If you have been targeted by an electricity bill scam, the first 48 hours are decisive for your case. The evidence you preserve during this window determines whether the police can trace the fraudster and whether the bank can process your reimbursement claim. You must secure all digital communications, transaction records, and call logs before the fraudster deletes them or the service provider purges them. Under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023, electronic records are admissible as evidence if they are preserved and authenticated properly. The scam itself is prosecuted under Section 66D of the Information Technology Act, 2000 for cheating by personation using a computer resource, and Section 318 of the Bharatiya Nyaya Sanhita, 2023 for cheating.
Victims often lose crucial evidence because they panic and delete messages or reset their devices. The fraudster may also send messages that disappear automatically or use apps that delete chats after a set time. Preserving evidence requires a deliberate approach: take screenshots, forward messages to a secure email account, download call detail records, and keep the original device intact. The evidence must establish the chain of events, the identity of the fraudster, and the financial loss. Without this evidence, the police investigation may stall, and the bank may reject your claim. This guide explains exactly what to preserve and how to preserve it within the first 48 hours.
What the law says
The legal framework for electronic evidence in India is governed by the Bharatiya Sakshya Adhiniyam, 2023. Section 63 deals with the admissibility of electronic records. It requires that the electronic record be produced from the device or storage medium in which it was originally stored. The record must be authenticated by the person who created it or by an expert. The court may also require a certificate under Section 63(4) to confirm the integrity of the record. This provision replaced the earlier Section 65B of the Indian Evidence Act, 1872, and applies to all electronic evidence, including SMS, WhatsApp messages, call logs, and bank statements.
The substantive criminal provisions are found in the Information Technology Act, 2000 and the Bharatiya Nyaya Sanhita, 2023. Section 66C of the IT Act punishes identity theft, which applies when the fraudster uses stolen credentials to impersonate the victim. Section 66D covers cheating by personation using a computer resource or communication device. Under the BNS 2023, Section 318 covers cheating, Section 336 covers forgery, and Section 351 covers criminal intimidation. The Bharatiya Nagarik Suraksha Sanhita, 2023 provides the procedural framework. Section 173 allows a police officer to register an FIR. Section 175(3) allows a magistrate to direct an investigation. Section 35 covers arrest procedures. Section 187 deals with bail. Section 480 allows compounding of offences. Section 482 covers appeals. Section 528 grants inherent powers to the High Court.
The RBI's directions on unauthorized electronic transactions are also relevant. The 2017 circular on customer protection requires the bank to investigate the fraud and determine liability based on the speed of reporting. The 2019 circular on Harmonisation of Turn Around Time sets timelines for resolving failed transactions. The bank will rely on the evidence you provide to process your claim. If you fail to preserve the evidence, the bank may treat the transaction as authorized or the investigation may be inconclusive. The DPDP Act 2023 may also apply if the fraud involves the misuse of personal data, though its enforcement mechanisms are still evolving.
Evidence you must preserve
The first category of evidence is the fraudulent communication. This includes the SMS or WhatsApp message that claimed to be from the electricity department. Take a screenshot of the full message, including the sender ID, the phone number, the date and time, and the link. If the message contains a link, do not click it again. Instead, copy the link and save it in a text file. If the message was sent via WhatsApp, export the chat to a secure email account and take screenshots of the chat window. If the fraudster called you, save the call log entry and note the phone number, the time of the call, and the duration.
The second category is the transaction record. Download your bank statement or UPI transaction history showing the unauthorized debit. Note the transaction ID, the amount, the date and time, and the recipient's account details. If the transaction was made via UPI, take a screenshot of the payment confirmation page. If the fraudster used a QR code, save the QR code image. These records establish the financial loss and the flow of money. The bank will use these records to initiate a chargeback or transaction reversal.
The third category is the communication with the bank. Save the complaint reference number, the date and time of your call, and the name of the bank representative you spoke to. If you sent an email or a written complaint, keep a copy. These records establish that you reported the fraud promptly and help you escalate the matter if the bank delays the investigation. The fourth category is the identity of the fraudster. If you have the phone number, the UPI ID, or the bank account details of the recipient, preserve them. The police can use this information to trace the fraudster.
How to preserve evidence properly
- Do not delete anything. Keep all messages, call logs, and emails on your device. Even if the messages seem unimportant, they may contain clues about the fraudster's identity.
- Take screenshots. Capture the full message, the sender ID, the date and time, and the link. Use your phone's screenshot function and save the images to a secure folder.
- Export chats and emails. If you communicated via WhatsApp or email, export the conversation to a PDF or text file and send it to a secure email account. This ensures the evidence is preserved even if your device is lost or damaged.
- Download bank statements. Request a statement for the relevant period from your bank. Save the PDF and note the transaction IDs. If you use a UPI app, download the transaction history from the app.
- Preserve the original device. Do not factory reset your phone or delete the app that was used in the fraud. The original device may be required for forensic examination under BSA Section 63.
- Create a timeline. Write down the sequence of events, including the time you received the message, the time you clicked the link, the time you shared the OTP, and the time you noticed the unauthorized debit. This timeline helps the police and the bank understand the case.
- Store evidence securely. Keep copies of all evidence in at least two locations, such as a secure email account and a password-protected folder on your computer. Do not share the evidence on social media or with unauthorized persons.
Evidence types and their purpose
| Evidence type | How to preserve | Why it matters |
|---|---|---|
| Fraudulent SMS or WhatsApp message | Screenshot and export to email | Establishes the scam and the sender's identity |
| Call log entry | Save the entry and note the details | Proves the fraudster called and impersonated an official |
| Bank statement | Download PDF and note transaction IDs | Establishes the financial loss and the recipient's account |
| UPI transaction record | Screenshot the confirmation page | Shows the amount, time, and recipient |
| Phishing website link | Copy the link and save it in a text file | Helps the police trace the website owner |
| Communication with the bank | Save complaint reference numbers and emails | Proves prompt reporting and supports reimbursement |
The table shows that each type of evidence serves a specific purpose. The fraudulent message establishes the scam, the bank statement establishes the loss, and the communication with the bank establishes prompt reporting. Together, these records create a complete picture of the fraud. The police can use the evidence to trace the fraudster, and the bank can use it to process the reimbursement claim.
What decides the outcome
The outcome of an electricity bill scam case depends on the quality and integrity of the evidence. First, the evidence must be authentic. Screenshots can be edited, so the court may require the original device or a certificate under BSA Section 63. Second, the evidence must establish the chain of events. A clear timeline linking the fraudulent message to the unauthorized debit strengthens the case. Third, the evidence must identify the fraudster. The phone number, UPI ID, or bank account details are crucial for the investigation. Fourth, the evidence must show prompt reporting. The bank will rely on the complaint reference number and the date of reporting to determine liability.
The court also considers whether the victim was negligent. If the victim shared the OTP or PIN, the bank may argue that the loss was due to the victim's negligence. In such cases, the evidence must show that the fraudster deceived the victim into sharing the OTP. The victim's communication records and the fraudulent message can establish the deception. The police investigation's ability to trace the funds and identify the accused is another critical factor. If the funds are quickly withdrawn, recovery becomes difficult. Victims should preserve all evidence and provide it to the investigating officer and the bank without delay.
The law on electronic evidence is still evolving. Courts have consistently held that electronic records are admissible if they meet the requirements of BSA Section 63. However, the authentication process can be challenging. Victims should consult a lawyer to ensure that the evidence is preserved and presented correctly. A lawyer can also help with the certification process and represent the victim in court.
Common mistakes to avoid
- Deleting the fraudulent messages or call logs. This destroys the most important evidence.
- Factory resetting the phone. The original device may be required for forensic examination.
- Clicking the phishing link again. This may allow the fraudster to access more information.
- Not downloading the bank statement. Without the transaction record, the bank cannot process the claim.
- Failing to note the time of reporting. The RBI's zero-liability rule depends on prompt reporting.
- Sharing the evidence on social media. This may compromise the investigation and your privacy.
- Not creating a timeline. A clear sequence of events helps the police and the bank understand the case.
If you need legal assistance, consult a cyber crime lawyer in Kolkata. For victims in West Bengal, our cyber law services in West Bengal provide guidance on preserving evidence and filing complaints. You can also contact us for a consultation.
When to involve a lawyer
You should involve a lawyer if the bank rejects your claim, if the police fail to register an FIR, or if the amount lost is substantial. A lawyer can help you preserve electronic evidence under BSA Section 63, file a writ petition in the High Court under Section 528 of the BNSS 2023, and pursue civil recovery. Legal representation is also advisable if you are accused of committing an electricity bill scam, as the offence carries serious penalties under the IT Act 2000 and BNS 2023. A lawyer can guide you through the complexities of electronic evidence and ensure your rights are protected throughout the process.
Need help with a cyber crime matter?
Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.
Call +91-9007000603 WhatsAppFrequently asked questions
What evidence should I preserve after an electricity bill scam?
Preserve the fraudulent SMS or WhatsApp message, the call log, the bank or UPI statement showing the unauthorised debit, the phishing link and every message exchanged with your bank. Keep the original phone and the full chat without deleting anything, because Section 63 of the BSA, 2023 requires an electronic record to be produced from its original source and authenticated.
How do I preserve electronic evidence under BSA 2023?
Take screenshots of the messages and transaction records, export chats to a secure email account, download bank statements as PDFs, and keep the original device intact. Section 63 of the BSA 2023 requires the electronic record to be authenticated, so do not delete or modify the original data.
Why is the first 48 hours critical for evidence preservation?
The first 48 hours are critical because the fraudster may delete messages, the service provider may purge call logs, and the bank may need the transaction details to freeze the funds. Prompt preservation ensures the evidence remains available for the police investigation and the bank's reimbursement process.
Can I use screenshots as evidence in court?
Yes, screenshots are admissible as electronic evidence under Section 63 of the BSA 2023. However, the court may require the original device or a certificate to authenticate the screenshots. You should preserve the original device and provide a certificate confirming the integrity of the screenshots.
What should I do if the fraudster's message disappears automatically?
If the message disappears automatically, take a screenshot immediately or use your phone's screen recording feature to capture the message. You can also check your message backup or ask your service provider for the message logs. Preserve whatever evidence remains and report the fraud to the bank and the police.
How do I download my call detail records for the complaint?
You can request call detail records from your telecom service provider by submitting a written application with your identity proof. Some providers allow you to download the records from their app or website. The records should cover the period when the fraudulent call was made.
What happens if I delete the fraudulent message?
If you delete the fraudulent message, you lose the primary evidence of the scam. The police investigation may stall, and the bank may reject your claim. You should not delete any messages or call logs until the investigation is complete. If you have already deleted them, check your phone's backup or contact your service provider.
Can the bank refuse my claim if I do not have all the evidence?
The bank may refuse your claim if the evidence is insufficient to establish the fraud. However, you can still file a complaint and provide whatever evidence you have. The bank's investigation will determine liability based on the available records. You should gather all possible evidence and escalate the matter to the banking ombudsman if needed.
Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.
Related articles
Cyber crime lawyer in your city · Bank account freeze help · Contact