Fake profile report in India: step-by-step legal guide

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 5 Nov 2026 · Cyber crime

When a stranger copies your name, your photograph and your bio onto a new account and starts messaging your friends, the response that actually works is routine and sequential: secure the evidence, force a takedown, and place a complaint on record with the police and the national cyber crime portal. A fake profile report is not a single form. It is a set of three filings that reinforce one another: the platform's impersonation complaint, the national portal complaint, and a written complaint at the jurisdictional police station. In law, the wrong is impersonation by means of a computer resource, punishable under section 66C and section 66D of the Information Technology Act, 2000, alongside the cheating, personation and forgery provisions of the Bharatiya Nyaya Sanhita, 2023.

Why the urgency? A fake profile is a live tool. It can be used to borrow money from your relatives in your name, to circulate defamatory posts, or to lure strangers into a scam. Every day the account stays up, more of your contacts are exposed to it. Indian law lets you act even before any money is lost, because personation and forgery are complete offences the moment the account is created and used, and the harm to reputation is separately actionable. What decides how quickly the account comes down is the quality of the evidence you send, not the force of your complaint.

What the law says

India has no single "fake profile" offence. The law breaks the conduct into parts, and each part has its own section and its own punishment.

Section 66C of the IT Act punishes the fraudulent or dishonest use of another person's electronic signature, password or unique identification feature. Section 66D punishes cheating by personation by means of a computer resource or a communication device. Where the impostor also fabricates a document, such as a forged identity card, a fake invoice or a forged employment letter, the forgery offences in BNS sections 336 and 338 are added. Where the posts damage your reputation, BNS section 356 applies. Where the content is obscene or sexually explicit, IT Act sections 67, 67A and 67B apply, and if a child is depicted anywhere in that material, the Protection of Children from Sexual Offences Act, 2012 is engaged as well.

Just as important is the takedown mechanism. Under section 79 of the IT Act and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, a platform is expected to remove unlawful content after receiving actual knowledge by way of a court order or a notice from the appropriate government agency. Most platforms also offer their own impersonation report form. That form is faster than any court process for removing a single account, so use it immediately, but treat it as an operational step rather than a legal remedy. Only a police complaint or a court order creates a formal record that can lead to a prosecution.

Two more provisions matter in practical terms. Section 72 of the IT Act protects the confidentiality of information accessed by service providers, and is relevant where the impostor obtained your data from an institution that held it. The Digital Personal Data Protection Act, 2023 gives you a separate route where a company mishandled your personal data and that misuse fed the fake profile. These do not replace a criminal complaint, but they widen your options and can support a civil claim.

What a complete fake profile report contains

Investigators triage complaints on what they can act on. A complaint that identifies the account, the offence and the evidence gets processed; a complaint that only says "someone made my fake account" does not. Before you file, assemble the following.

• The profile URL and username of the fake account, copied as text, not only as a screenshot.
• Full-page screenshots showing the account name, the impersonated photograph, the follower count, and the date visible on your device.
• The messages the impostor sent to your contacts, with the sender's handle and timestamps visible.
• Your own government photo identity, to prove which account is genuine.
• A short chronology: when you first noticed the profile, what it has done since, who was contacted, and whether any money was lost.

Do not delete the impostor's messages from your own device. Those messages are the strongest evidence of the purpose behind the profile, and they are the first thing an investigator asks to see.

Step-by-step: how to file a fake profile report in India

1. Secure your own accounts first. Change your passwords, enable two-factor authentication and check for linked devices. If the impostor obtained access to your account rather than cloning it, this is a different offence, namely unauthorised access under IT Act section 66, and it must be addressed at once.
2. Report to the platform. Use the platform's impersonation or "pretending to be someone else" form. Attach your identity proof and the profile URL. Ask for a written acknowledgement and a complaint reference number, and save it.
3. Preserve the evidence properly. Save the screenshots, the URL and the messages. Where you expect to rely on them in court, a certificate under section 63 of the Bharatiya Sakshya Adhiniyam, 2023 will later be required to make the electronic record admissible; keeping the original device and the original files untouched makes that certificate possible.
4. File on the national portal. Lodge a complaint at cybercrime.gov.in, choosing the category closest to impersonation or identity theft. Upload the evidence and note the acknowledgement number. You may also call the national cyber crime helpline 1930, which is the fastest route where money has already been sent to the impostor.
5. File a written complaint at the jurisdictional police station. This is where the offence becomes an FIR. Carry a printed complaint that names the sections, attaches the evidence and asks for registration under section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023. Keep the receipt of your complaint.
6. Escalate if nothing moves. If the police do not register an FIR, you may approach the Magistrate under section 175(3) of the BNSS, 2023, to direct an investigation. For an interim protection order against the impostor's conduct, a civil court or the High Court can be moved.
7. Follow up in writing. Ask for the status of the complaint in writing and preserve every acknowledgement. A documented trail is what converts a stalled complaint into an order.

Where to file: jurisdiction in practice

Jurisdiction in a fake profile case is broader than most complainants expect. The offence is generally treated as having been committed where the offending content was uploaded and where it was received or read, which means the complainant's own city is usually a proper place to file. That is why a person in Kolkata can ordinarily complain to the local cyber cell even when the server and the account owner are elsewhere. If a police station refuses the complaint on the ground that the account was created in another state, that refusal can itself be challenged, because the effect of the offence was felt locally. Choosing the station nearest the victim also keeps the complainant available for statements and follow-up, which speeds the case considerably.

Documents to keep, and why each one matters

What decides the outcome

Three factors carry the most weight. First, the speed of the report: an account caught within days is usually removed and traced, while an account that ran for months reaches far more victims and is harder to tie to a person. Second, the quality of identification: the more precisely the account is linked to a device, a phone number or a payment handle, the more likely the police can convert a takedown into a prosecution. Third, whether the impostor caused measurable loss or harm, such as money sent, reputational damage or obscene content, because that determines which sections apply and how seriously the case is treated.

Where the impostor is a known person, the case is easier to prove but harder to resolve quietly; where the impostor is anonymous, the case depends almost entirely on platform and telecom data that the police must formally request. Courts weigh whether the complainant acted promptly, whether the evidence is intact, and whether the conduct was a one-off prank or a sustained campaign. A sustained campaign of impersonation, especially one combined with threats, attracts heavier penalties than a single cloned page.

Common mistakes

• Reporting only to the platform and treating the matter as closed. A takedown removes one account; it does not create a criminal record.
• Sending screenshots without the underlying URL. Investigators cannot pull records from a picture.
• Deleting the impostor's messages or blocking the account before saving the evidence.
• Filing at a police station far from where the offence took effect, which delays the question of jurisdiction.
• Ignoring the possibility that the impostor has access to your account, and resetting only one password.
• Waiting for the impostor to stop, instead of forcing removal through the platform and the police in parallel.

Impersonation cases are usually won on paperwork completed in the first seventy-two hours, long before any court hearing.

When to involve a lawyer

You can file every one of these complaints yourself, and for a clear-cut cloned account that is often the right first move. A lawyer becomes useful when the police have not registered an FIR and you need an application to the Magistrate, when the impostor is a person you know and the matter needs both criminal and civil handling, or when obscene content has been published and you need a court order that compels removal across platforms. For a complaint that has simply stalled, a short application drafted correctly often moves it more than repeated visits. If you are in West Bengal, the process runs through the cyber cell and the local courts; see cyber crime lawyer in West Bengal for how that procedure works in practice. For a view of how similar complaints are handled, the blog collects the steps in other impersonation and fraud matters, and cyber crime lawyer in Kolkata sets out the wider services available.

Act in order, keep everything, and let the record build instead of the impostor's reach.

Frequently asked questions

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Related articles

• Fake Social Media Profile Legal Action in India
• Fake LinkedIn profile of me: reporting and legal action
• Fake YouTube profile of me: evidence and legal action
• Fake WhatsApp profile of me: reporting and legal action
• Fake TeamViewer profile of me: reporting and legal action
• Instagram fake profile: reporting, evidence and legal action

Cyber crime lawyer in your city · Bank account freeze help · Contact