Identity Theft in the Digital Age: Legal Challenges and the Evolving Role of Law Enforcement in India

Authors

  • Adv Monica Madaan LLM Student, KR Mangalam University, Gurugram, India Author
  • Arryan Mohanty 5th Year BALLB Student, Symbiosis Law School, Nagpur, India Author

Downloads

PlumX DOI based Article Level Metrics

DOI:

https://doi.org/10.55662/CYLR.2025.4102

Keywords:

US Identity Theft and Assumption Deterrence Act, Artificial Intelligence, Digital Personal Data Protection Act, 2023, Information Technology Act, 2000, GDPR, Singapore’s PDPA

Abstract

This paper, Identity Theft in the Digital Age: Legal Challenges and the Evolving Role of Law Enforcement in India, examines the growing complexity of cyber identity theft in India's rapidly digitizing economy. It shows how government initiatives like demonetization and Digital India have sped up online transactions but also created opportunities for cybercriminals. While India’s legal framework, based on the Information Technology Act, 2000, and updated by the Digital Personal Data Protection Act, 2023, provides a base, it faces challenges from quickly changing threats, especially those involving Artificial Intelligence (AI). New tools like AI-driven phishing, deepfake impersonation, and automated identity cloning have lowered the time, skill, and cost needed for cyberattacks, surpassing current enforcement capabilities. This paper examines these challenges closely, focusing on jurisdictional conflicts, the balance between privacy and security, and gaps in enforcement. It also compares India’s approach to global models such as the EU’s GDPR, the US Identity Theft and Assumption Deterrence Act, and Singapore’s PDPA, highlighting best practices for legislative reform. The study ends with recommendations for AI-specific legal provisions, training for law enforcement, and international cooperation as key strategies to protect India’s digital ecosystem from the next generation of identity theft.

Readership Data

🌐

Refreshing Cached Analytics Data

The cached analytics data has become stale and journal.thelawbrigade.com is making a fresh request to fetch the latest data from Google Analytics. This may take 20-30 seconds depending on the server response time from Google Analytics. Please do not close the browser during this time. We appreciate your patience.

References

Yaman Kasturi & Dr. Mohamad Ayub Dar, Cybercrime in the Digital Age: Challenges and Legal Gaps in

India's Cybersecurity Landscape, Vol 27 Issue 6, AJBMR, 212-224 (2024) https://africanjournalofbiomedicalresearch.com/index.php/AJBR/article/download/5724/4494/10957

Diya Charaya, Digital Deception: An In-Depth Investigation of Identity Theft in the Indian Cyberspace, Vol 5 No 4, IJRPR, 2235-2244 (2024) https://ijrpr.com/uploads/V5ISSUE4/IJRPR24860.pdf DOI: https://doi.org/10.55248/gengpi.5.0424.0961

AIR 2015 SC 1523

Divyam Kumar, Navigating the Legal Landscape of the Digital Age, Volume 9 Issue 12, IJNRD, 400-406 (2024) https://ijnrd.org/papers/IJNRD2412139.pdf

Nishant Verma, Jurisdiction in Cybercrimes and Civil Disputes, SCC Online (12 July 2025, 06:23 AM)

https://www.scconline.com/blog/post/2024/03/24/jurisdiction-in-cybercrimes-and-civil-disputes/

Divyani Varma, Dr. Richa Shrivastava, Dr. Niti Nipuna & Dr. Vishal Sharma, The Rising Threat of Cyber Crimes in India: Challenges, Legal Provisions, and Solutions, Vol 4 Issue 1, IJCRM, 176-181 (2025) https://www.multiarticlesjournal.com/uploads/articles/IJCRM20254143.pdf

Ishan Atrey, Cybercrime and its Legal Implications: Analysing the challenges and Legal frameworks surrounding Cybercrime, including issues related to Jurisdiction, Privacy, and Digital Evidence, Volume 10 Issue 3, IJRAR, 183-197 (2023) https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4789133

The Information Technology Act, 2000, § 66C

The Bharatiya Nyaya Sanhita, 2023, § 319(1)

The Information Technology Act, 2000, § 66D

The Bharatiya Nyaya Sanhita, 2023, § 77

The Information Technology Act, 2000, § 66E

The Information Technology Act, 2000, § 66F

The Information Technology Act, 2000, § 66

The Bharatiya Nyaya Sanhita, 2023, § 78

The Information Technology Act, 2000, § 43(c)

The Bharatiya Nyaya Sanhita, 2023, § 303

The Information Technology Act, 2000, § 43

The Information Technology Act, 2000, § 43(d)

Adv Narmada Singh, Law relating to Digital Identity Theft in India and its Invasion of Privacy, Vol 2 Issue 3, IJALR, 1-11 (2022) https://ijalr.in/wp-content/uploads/2022/09/LAW-RELATING-TO-IDENTITY-THEFT-IN-INDIA-AND-ITS-INVASION-OF-PRIVACY.pdf

The Bharatiya Nyaya Sanhita, 2023, § 303(1)

The Bharatiya Nyaya Sanhita, 2023, § 2(21)

1965 AIR 666

The Indian Electricity Act, 1910, § 39

The Bharatiya Nyaya Sanhita, 2023, § 335

The Bharatiya Nyaya Sanhita, 2023, § 336(2)

The Bharatiya Nyaya Sanhita, 2023, § 336(3)

The Bharatiya Nyaya Sanhita, 2023, § 336(4)

The Bharatiya Nyaya Sanhita, 2023, § 340(2)

The Bharatiya Nyaya Sanhita, 2023, § 339

The Bharatiya Nyaya Sanhita, 2023, § 336(3)

The Bharatiya Nyaya Sanhita, 2023, § 340(2)

The Bharatiya Nyaya Sanhita, 2023, § 319(2)

The Bharatiya Nyaya Sanhita, 2023, § 318(4)

The Bharatiya Nyaya Sanhita, 2023, § 318(2)

The Bharatiya Nyaya Sanhita, 2023, § 319(2)

Gaurav Raj Grover, All you need to know about Identity Theft in Cyberspace in India, iPleaders (11 July 2025, 06:45 PM) https://blog.ipleaders.in/all-you-need-to-know-about-identity-theft-in-cyberspace-in-india/#Whether_Identity_theft_is_theft_within_the_meaning_of_IPC_1860

Abhay Vaidya, India’s first BPO scam unraveled, The Times of India (23 April 2005, 10:44 PM) https://timesofindia.indiatimes.com/home/sunday-times/deep-focus/indias-first-bpo-scam-unraveled/articleshow/1086438.cms

The Information Technology Act, 2000, § 43(a) DOI: https://doi.org/10.1177/108835760001500106

2006 (1) ALD (CRI) 96

The Information Technology Act, 2000, § 65 DOI: https://doi.org/10.1142/9781848160101_0002

The Indian Penal Code, 1860, § 420 (Repealed)

The Indian Penal Code, 1860, § 469 (Repealed)

The Information Technology Act, 2000, § 66A (Quashed by the Hon’ble Supreme Court in the Shreya Singhal Case)

2010(2) KHC 881

Lionel Faleiro, IT Act 2000-Penalties, Offences with Case Studies, Network Intelligence (11 July 2025, 07:33 PM) https://www.networkintelligence.ai/blogs/it-act-2000-penalties-offences-with-case-studies/

Mateen Hafeez, Email threat to BSE: Case registered under Cyber Terrorism, The Times of India 6 May 2009, 02:24 IST) https://timesofindia.indiatimes.com/india/email-threat-to-bse-case-registered-under-cyber-terrorism/articleshow/4487899.cms

State of Tamil Nadu v. Suhas Katti CC No. 4680/2004

The Indian Penal Code, 1860, § 509 [Repealed], Read the Bharatiya Nyaya Sanhita 2023, § 79

The Information Technology Act, 2000, § 67

Public Interest Litigation No. 24/2004

Ganesh Arora, Identity Theft: A method of Cybercrime, Vol 2 Issue 4, JSLJ, 386-398 (2022) https://www.juscorpus.com/wp-content/uploads/2022/07/94.-Ganesh-Arora.pdf

The Constitution of India, 1949, Art 21

MP Sharma & Ors v. Satish Chandra, District Magistrate, Delhi & Ors, AIR 1954 SC 300; also read Kharak Singh v. State of Uttar Pradesh & Ors, AIR 1963 SC 1295

Justice K.S. Puttaswamy (Retd.) & Anr. vs. Union of India & Ors, AIR 2017 SC 4161

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, art. 5, 2016 O.J. (L 119) 1, 35

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, art. 33, 2016 O.J. (L 119) 1, 35

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, art. 34, 2016 O.J. (L 119) 1, 35

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, art. 37, 2016 O.J. (L 119) 1, 35

Identity Theft and Assumption Deterrence Act of 1998, Pub. L. No. 105-318, § 4, 112 Stat. 3007, 3007–08 (codified as amended at 18 U.S.C. § 1028(a)(7) (2018))

Identity Theft Penalty Enhancement Act, Pub. L. No. 108-275, § 3, 118 Stat. 831, 832 (2004) (codified as amended at 18 U.S.C. § 1028A (2018))

Identity Theft Enforcement and Restitution Act of 2008, Pub. L. No. 110-326, § 203, 122 Stat. 3560, 3561–63 (codified as amended in scattered sections of 18 U.S.C.)

Federal Trade Commission, IdentityTheft.gov, https://www.identitytheft.gov (11 July 2025, 07:34 P.M.)

Personal Data Protection Act 2012, No. 26 of 2012, § 11(3) (Sing.)

Personal Data Protection Act 2012, No. 26 of 2012, § 26D (Sing.)

Computer Misuse and Cybersecurity Act 1993, No. 19 of 1993, §§ 3–7 (Sing.)

Harshit Choubey, Identity Theft: A Contemporary Threat, Vol 4 Issue 2, IJALR, 1-19 (2023) https://ijalr.in/wp-content/uploads/2023/12/Identity-Theft-Article-FINAL-Harshit-Choubey.pdf

Debargha Chatterjee, Laws that Govern ID theft in India, iPleaders (11 July 2025, 06:52 PM) https://blog.ipleaders.in/laws-that-govern-id-theft-in-india/#The_pandemic_effect_of_identity_theft_in_India

Saima Jan & Dr Anna Bashir, Identity Theft: Cross-Border Legal Paradoxes and India’s Cyber-Economic Crisis in the Algorithmic Age, Vol 29 Issue 4, EATP, 4536–4540 (2023) https://kuey.net/index.php/kuey/article/view/9497/7231 DOI: https://doi.org/10.53555/kuey.v29i4.9497

Radhika Gupta & Ayushi Goyal, Social Media and Identity Theft: The New Age Global Pandemic, Volume 11 Issue 5, IJCRT, 644-652 (2023) https://ijcrt.org/papers/IJCRT2305680.pdf

Priyanka Jain, Identity Theft and Cybercrime in modern society, iPleaders (11 July 2025, 08:17 PM) https://blog.ipleaders.in/identity-theft-and-cybercrime-in-modern-society/

Shaurya Jain & Muskan Sharma, Identity Theft in India: A Security Concern, Pen Acclaims (11 July 2025, 08:18 PM) https://www.penacclaims.com/wp-content/uploads/2020/07/Shaurya-Jain.pdf

Abhishek Kushwaha & Aditi Palit, Identity Theft: Extent and Applicability of Data Protection Laws, Summer: Vol. 1 Issue 1, ILR, 1-14 (2020) https://indraprasthalawreview.in/wp-content/uploads/2020/10/ggsipu_uslls_ILR_2020_V1-I1-13-aditi_palit-abhishek_kushwaha.pdf

Saumya Deep Singh & Shirsh Pandey, The Evolving Cybercrime Landscape in India: Legal Challenges, Digital Evidence, and New Criminal Laws, Vol 7 Issue 2, IJFMR, 1-6 (2025) https://www.ijfmr.com/papers/2025/2/41627.pdf DOI: https://doi.org/10.36948/ijfmr.2025.v07i02.41627

Ankita Shrivastava, Identity Theft in Cyberspace with Special Reference to India, Pen Acclaims (11 July 2025, 08:20 PM) https://penacclaims.com/wp-content/uploads/2020/02/Ankita-Shrivastava.pdf

Citation Metrics

Published

10-11-2025

License

Copyright © 2026 by Adv Monica Madaan, Arryan Mohanty

The copyright and license terms mentioned on this page take precedence over any other license terms mentioned on the article full text PDF or any other material associated with the article.

How to Cite

Madaan, Adv Monica, and Arryan Mohanty. “Identity Theft in the Digital Age: Legal Challenges and the Evolving Role of Law Enforcement in India”. Cyber Law Reporter, vol. 4, no. 1, Nov. 2025, pp. 44-79, https://doi.org/10.55662/CYLR.2025.4102.

Citations List