Identity Theft in the Digital Age: Legal Challenges and the Evolving Role of Law Enforcement in India
Downloads
DOI:
https://doi.org/10.55662/CYLR.2025.4102Keywords:
US Identity Theft and Assumption Deterrence Act, Artificial Intelligence, Digital Personal Data Protection Act, 2023, Information Technology Act, 2000, GDPR, Singapore’s PDPAAbstract
This paper, Identity Theft in the Digital Age: Legal Challenges and the Evolving Role of Law Enforcement in India, examines the growing complexity of cyber identity theft in India's rapidly digitizing economy. It shows how government initiatives like demonetization and Digital India have sped up online transactions but also created opportunities for cybercriminals. While India’s legal framework, based on the Information Technology Act, 2000, and updated by the Digital Personal Data Protection Act, 2023, provides a base, it faces challenges from quickly changing threats, especially those involving Artificial Intelligence (AI). New tools like AI-driven phishing, deepfake impersonation, and automated identity cloning have lowered the time, skill, and cost needed for cyberattacks, surpassing current enforcement capabilities. This paper examines these challenges closely, focusing on jurisdictional conflicts, the balance between privacy and security, and gaps in enforcement. It also compares India’s approach to global models such as the EU’s GDPR, the US Identity Theft and Assumption Deterrence Act, and Singapore’s PDPA, highlighting best practices for legislative reform. The study ends with recommendations for AI-specific legal provisions, training for law enforcement, and international cooperation as key strategies to protect India’s digital ecosystem from the next generation of identity theft.
External References to this Article
Loading reference data...
References
Yaman Kasturi & Dr. Mohamad Ayub Dar, Cybercrime in the Digital Age: Challenges and Legal Gaps in
India's Cybersecurity Landscape, Vol 27 Issue 6, AJBMR, 212-224 (2024) https://africanjournalofbiomedicalresearch.com/index.php/AJBR/article/download/5724/4494/10957
Diya Charaya, Digital Deception: An In-Depth Investigation of Identity Theft in the Indian Cyberspace, Vol 5 No 4, IJRPR, 2235-2244 (2024) https://ijrpr.com/uploads/V5ISSUE4/IJRPR24860.pdf DOI: https://doi.org/10.55248/gengpi.5.0424.0961
AIR 2015 SC 1523
Divyam Kumar, Navigating the Legal Landscape of the Digital Age, Volume 9 Issue 12, IJNRD, 400-406 (2024) https://ijnrd.org/papers/IJNRD2412139.pdf
Nishant Verma, Jurisdiction in Cybercrimes and Civil Disputes, SCC Online (12 July 2025, 06:23 AM)
https://www.scconline.com/blog/post/2024/03/24/jurisdiction-in-cybercrimes-and-civil-disputes/
Divyani Varma, Dr. Richa Shrivastava, Dr. Niti Nipuna & Dr. Vishal Sharma, The Rising Threat of Cyber Crimes in India: Challenges, Legal Provisions, and Solutions, Vol 4 Issue 1, IJCRM, 176-181 (2025) https://www.multiarticlesjournal.com/uploads/articles/IJCRM20254143.pdf
Ishan Atrey, Cybercrime and its Legal Implications: Analysing the challenges and Legal frameworks surrounding Cybercrime, including issues related to Jurisdiction, Privacy, and Digital Evidence, Volume 10 Issue 3, IJRAR, 183-197 (2023) https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4789133
The Information Technology Act, 2000, § 66C
The Bharatiya Nyaya Sanhita, 2023, § 319(1)
The Information Technology Act, 2000, § 66D
The Bharatiya Nyaya Sanhita, 2023, § 77
The Information Technology Act, 2000, § 66E
The Information Technology Act, 2000, § 66F
The Information Technology Act, 2000, § 66
The Bharatiya Nyaya Sanhita, 2023, § 78
The Information Technology Act, 2000, § 43(c)
The Bharatiya Nyaya Sanhita, 2023, § 303
The Information Technology Act, 2000, § 43
The Information Technology Act, 2000, § 43(d)
Adv Narmada Singh, Law relating to Digital Identity Theft in India and its Invasion of Privacy, Vol 2 Issue 3, IJALR, 1-11 (2022) https://ijalr.in/wp-content/uploads/2022/09/LAW-RELATING-TO-IDENTITY-THEFT-IN-INDIA-AND-ITS-INVASION-OF-PRIVACY.pdf
The Bharatiya Nyaya Sanhita, 2023, § 303(1)
The Bharatiya Nyaya Sanhita, 2023, § 2(21)
1965 AIR 666
The Indian Electricity Act, 1910, § 39
The Bharatiya Nyaya Sanhita, 2023, § 335
The Bharatiya Nyaya Sanhita, 2023, § 336(2)
The Bharatiya Nyaya Sanhita, 2023, § 336(3)
The Bharatiya Nyaya Sanhita, 2023, § 336(4)
The Bharatiya Nyaya Sanhita, 2023, § 340(2)
The Bharatiya Nyaya Sanhita, 2023, § 339
The Bharatiya Nyaya Sanhita, 2023, § 336(3)
The Bharatiya Nyaya Sanhita, 2023, § 340(2)
The Bharatiya Nyaya Sanhita, 2023, § 319(2)
The Bharatiya Nyaya Sanhita, 2023, § 318(4)
The Bharatiya Nyaya Sanhita, 2023, § 318(2)
The Bharatiya Nyaya Sanhita, 2023, § 319(2)
Gaurav Raj Grover, All you need to know about Identity Theft in Cyberspace in India, iPleaders (11 July 2025, 06:45 PM) https://blog.ipleaders.in/all-you-need-to-know-about-identity-theft-in-cyberspace-in-india/#Whether_Identity_theft_is_theft_within_the_meaning_of_IPC_1860
Abhay Vaidya, India’s first BPO scam unraveled, The Times of India (23 April 2005, 10:44 PM) https://timesofindia.indiatimes.com/home/sunday-times/deep-focus/indias-first-bpo-scam-unraveled/articleshow/1086438.cms
The Information Technology Act, 2000, § 43(a) DOI: https://doi.org/10.1177/108835760001500106
2006 (1) ALD (CRI) 96
The Information Technology Act, 2000, § 65 DOI: https://doi.org/10.1142/9781848160101_0002
The Indian Penal Code, 1860, § 420 (Repealed)
The Indian Penal Code, 1860, § 469 (Repealed)
The Information Technology Act, 2000, § 66A (Quashed by the Hon’ble Supreme Court in the Shreya Singhal Case)
2010(2) KHC 881
Lionel Faleiro, IT Act 2000-Penalties, Offences with Case Studies, Network Intelligence (11 July 2025, 07:33 PM) https://www.networkintelligence.ai/blogs/it-act-2000-penalties-offences-with-case-studies/
Mateen Hafeez, Email threat to BSE: Case registered under Cyber Terrorism, The Times of India 6 May 2009, 02:24 IST) https://timesofindia.indiatimes.com/india/email-threat-to-bse-case-registered-under-cyber-terrorism/articleshow/4487899.cms
State of Tamil Nadu v. Suhas Katti CC No. 4680/2004
The Indian Penal Code, 1860, § 509 [Repealed], Read the Bharatiya Nyaya Sanhita 2023, § 79
The Information Technology Act, 2000, § 67
Public Interest Litigation No. 24/2004
Ganesh Arora, Identity Theft: A method of Cybercrime, Vol 2 Issue 4, JSLJ, 386-398 (2022) https://www.juscorpus.com/wp-content/uploads/2022/07/94.-Ganesh-Arora.pdf
The Constitution of India, 1949, Art 21
MP Sharma & Ors v. Satish Chandra, District Magistrate, Delhi & Ors, AIR 1954 SC 300; also read Kharak Singh v. State of Uttar Pradesh & Ors, AIR 1963 SC 1295
Justice K.S. Puttaswamy (Retd.) & Anr. vs. Union of India & Ors, AIR 2017 SC 4161
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, art. 5, 2016 O.J. (L 119) 1, 35
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, art. 33, 2016 O.J. (L 119) 1, 35
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, art. 34, 2016 O.J. (L 119) 1, 35
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, art. 37, 2016 O.J. (L 119) 1, 35
Identity Theft and Assumption Deterrence Act of 1998, Pub. L. No. 105-318, § 4, 112 Stat. 3007, 3007–08 (codified as amended at 18 U.S.C. § 1028(a)(7) (2018))
Identity Theft Penalty Enhancement Act, Pub. L. No. 108-275, § 3, 118 Stat. 831, 832 (2004) (codified as amended at 18 U.S.C. § 1028A (2018))
Identity Theft Enforcement and Restitution Act of 2008, Pub. L. No. 110-326, § 203, 122 Stat. 3560, 3561–63 (codified as amended in scattered sections of 18 U.S.C.)
Federal Trade Commission, IdentityTheft.gov, https://www.identitytheft.gov (11 July 2025, 07:34 P.M.)
Personal Data Protection Act 2012, No. 26 of 2012, § 11(3) (Sing.)
Personal Data Protection Act 2012, No. 26 of 2012, § 26D (Sing.)
Computer Misuse and Cybersecurity Act 1993, No. 19 of 1993, §§ 3–7 (Sing.)
Harshit Choubey, Identity Theft: A Contemporary Threat, Vol 4 Issue 2, IJALR, 1-19 (2023) https://ijalr.in/wp-content/uploads/2023/12/Identity-Theft-Article-FINAL-Harshit-Choubey.pdf
Debargha Chatterjee, Laws that Govern ID theft in India, iPleaders (11 July 2025, 06:52 PM) https://blog.ipleaders.in/laws-that-govern-id-theft-in-india/#The_pandemic_effect_of_identity_theft_in_India
Saima Jan & Dr Anna Bashir, Identity Theft: Cross-Border Legal Paradoxes and India’s Cyber-Economic Crisis in the Algorithmic Age, Vol 29 Issue 4, EATP, 4536–4540 (2023) https://kuey.net/index.php/kuey/article/view/9497/7231 DOI: https://doi.org/10.53555/kuey.v29i4.9497
Radhika Gupta & Ayushi Goyal, Social Media and Identity Theft: The New Age Global Pandemic, Volume 11 Issue 5, IJCRT, 644-652 (2023) https://ijcrt.org/papers/IJCRT2305680.pdf
Priyanka Jain, Identity Theft and Cybercrime in modern society, iPleaders (11 July 2025, 08:17 PM) https://blog.ipleaders.in/identity-theft-and-cybercrime-in-modern-society/
Shaurya Jain & Muskan Sharma, Identity Theft in India: A Security Concern, Pen Acclaims (11 July 2025, 08:18 PM) https://www.penacclaims.com/wp-content/uploads/2020/07/Shaurya-Jain.pdf
Abhishek Kushwaha & Aditi Palit, Identity Theft: Extent and Applicability of Data Protection Laws, Summer: Vol. 1 Issue 1, ILR, 1-14 (2020) https://indraprasthalawreview.in/wp-content/uploads/2020/10/ggsipu_uslls_ILR_2020_V1-I1-13-aditi_palit-abhishek_kushwaha.pdf
Saumya Deep Singh & Shirsh Pandey, The Evolving Cybercrime Landscape in India: Legal Challenges, Digital Evidence, and New Criminal Laws, Vol 7 Issue 2, IJFMR, 1-6 (2025) https://www.ijfmr.com/papers/2025/2/41627.pdf DOI: https://doi.org/10.36948/ijfmr.2025.v07i02.41627
Ankita Shrivastava, Identity Theft in Cyberspace with Special Reference to India, Pen Acclaims (11 July 2025, 08:20 PM) https://penacclaims.com/wp-content/uploads/2020/02/Ankita-Shrivastava.pdf
License Terms
Ownership and Licensing:
Authors of research papers submitted to any journal published by The Law Brigade Publishers retain the copyright of their work while granting the journal specific rights. Authors maintain ownership of the copyright and grant the journal the right of first publication. Simultaneously, authors agree to license their research papers under the Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) License.
License Permissions:
Under the CC BY-SA 4.0 License, others are permitted to share and adapt the work, even for commercial purposes, provided that appropriate attribution is given to the authors, and acknowledgment is made of the initial publication by The Law Brigade Publishers. This license encourages the broad dissemination and reuse of research papers while ensuring that the original work is properly credited.
Additional Distribution Arrangements:
Authors are free to enter into separate, non-exclusive contractual arrangements for distributing the published version of the work (e.g., posting it to institutional repositories or publishing it in books), provided that the original publication by The Law Brigade Publishers is acknowledged.
Online Posting:
Authors are encouraged to share their work online (e.g., in institutional repositories or on personal websites) both prior to submission and after publication. This practice can facilitate productive exchanges and increase the visibility and citation of the work.
Responsibility and Liability:
Authors are responsible for ensuring that their submitted research papers do not infringe on the copyright, privacy, or other rights of third parties. The Law Brigade Publishers disclaims any liability for any copyright infringement or violation of third-party rights within the submitted research papers.
Citation Metrics
Published
Issue
Section
License

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
Copyright © 2026 by Adv Monica Madaan, Arryan Mohanty
The copyright and license terms mentioned on this page take precedence over any other license terms mentioned on the article full text PDF or any other material associated with the article.
