Cyber crimes — meaning, categories, classification, emergence — Intellectual Property Rights I Notes

Cyber crimes — meaning, categories, classification, emergence

In 2015 the Supreme Court, in Shreya Singhal, struck down s.66A of the IT Act — the section police had used to arrest people for Facebook posts — because it was so vague it criminalised ordinary speech. That single judgment reshaped India’s cyber-crime law and is the trap hiding inside every “annoying e-mail” problem you will be set.

What a cyber crime is

A cyber crime is any unlawful act where a computer or network is either the target of the crime or the tool used to commit it (or both). The everyday hook: a burglar needs to be in the house; a cyber-criminal can empty your bank account from a laptop on another continent. That is what makes cyber crime new — it is borderless, anonymous, high-speed and leaves little physical trace.

The IT Act does not define “cyber crime” as a single term; instead Chapter XI (ss.65–74) and Chapter IX (s.43, s.43A) list specific offences and contraventions.

Why cyber crime emerged. The explosion of internet use, e-banking, social media and cheap anonymity created both opportunity and motive. Traditional criminal law (the IPC) could not reach purely digital wrongs — there was no “theft” of data that was merely copied, not taken away — so a special code became necessary.

A. Classification by the role of the computer

Computer as the target — the computer/data is the victim: hacking, virus attacks, denial-of-service, data theft, tampering with source code.
Computer as the tool/weapon — the computer is used to commit a conventional crime: online fraud, phishing, identity theft, cyber-stalking, circulating obscene material.

B. Classification by the victim

Against individuals — cyber-stalking, defamation, identity theft, e-mail harassment, publishing obscene material.
Against property — hacking, transmitting viruses, intellectual-property theft, online fraud.
Against organisations / Government / society — cyber terrorism (s.66F), attacks on “protected systems” (s.70), cyber warfare, spreading pornography.

C. The main offences under the IT Act

s.65 — tampering with computer source documents (concealing/altering/destroying source code): up to 3 years or fine up to ₹2 lakh.
s.66 — computer-related offences (dishonestly or fraudulently doing any act referred to in s.43, e.g. hacking, data theft): up to 3 years or fine up to ₹5 lakh.
s.66B — dishonestly receiving stolen computer resource or device.
s.66C — identity theft (fraudulent use of another’s password, digital signature, or unique ID).
s.66D — cheating by personation using a computer resource (phishing).
s.66E — violation of privacy (capturing/publishing private images).
s.66F — cyber terrorism (threatening the unity/security of India through a computer): up to imprisonment for life.
s.67 / 67A / 67B — publishing or transmitting obscene material, sexually explicit material, and child pornography in electronic form.
s.70 — unauthorised access to a protected system.
s.72 — breach of confidentiality and privacy by an official.

⚠️ s.66A — which punished “offensive” or “annoying” messages sent by computer — was struck down as unconstitutional in Shreya Singhal v Union of India (2015). Do not convict anyone under s.66A: it is dead law. A problem about a merely “annoying” or “false” e-mail sent to irritate a friend usually has no IT Act offence left, unless the content is obscene (s.67), threatening (s.66F) or involves cheating/identity theft (s.66C/66D).

Information Technology Act, 2000, s.66: “If any person, dishonestly or fraudulently, does any act referred to in section 43, he shall be punishable with imprisonment for a term which may extend to three years or with fine which may extend to five lakh rupees or with both.”

Information Technology Act, 2000, s.67: “Whoever publishes or transmits or causes to be published or transmitted in the electronic form, any material which is lascivious or appeals to the prurient interest… shall be punished on first conviction with imprisonment… up to three years and with fine up to five lakh rupees.”

In Simple Terms: A cyber crime is a crime where a computer is either the target or the weapon. The IT Act lists them — tampering with source code (s.65), hacking (s.66), identity theft (s.66C), phishing (s.66D), obscenity (s.67), cyber terrorism (s.66F). Remember the big trap: s.66A (offensive messages) was struck down in 2015 and can no longer be used.

🧩 WORKED EXAMPLE — the “false, annoying e-mail” problem

Facts. ‘A’ sends false information by e-mail to his friend ‘B’ merely to cause annoyance. Is ‘A’ guilty under the IT Act?

Rule. The section that once punished sending false/annoying messages was s.66A, but it was struck down in Shreya Singhal (2015) as violating Article 19(1)(a). No surviving section punishes mere annoyance.

Apply. ‘A’s e-mail is only false and annoying — it is not obscene (s.67), not threatening national security (s.66F), and involves no cheating or identity theft (s.66C/66D). The only section that fit was s.66A, which no longer exists in law.

Decoy. The examiner wants you to cite s.66A confidently — that is the planted trap. Citing struck-down law loses the marks.

Conclusion. ‘A’ commits no offence under the IT Act as it now stands, because s.66A is void.

🧩 WORKED EXAMPLE — the pornographic e-mail

Facts. ‘Q’ sends pornographic material to ‘P’ through e-mail. Decide ‘Q’s liability under the IT Act.

Rule. s.67 — publishing or transmitting obscene material in electronic form is an offence (up to 3 years and fine up to ₹5 lakh on first conviction); s.67A applies if the material depicts a sexually explicit act.

Apply. Sending pornographic material by e-mail is “transmitting” lascivious material in electronic form, squarely within s.67 (and s.67A if sexually explicit). Unlike the “annoying e-mail”, here the content itself is unlawful.

Conclusion. ‘Q’ is liable under s.67 (and possibly s.67A) of the IT Act, 2000.

flowchart TD
    CC["Cyber crime — computer as target OR tool"]:::root
    CC --> TGT["Target: hacking (s.66), source tampering (s.65), protected system (s.70)"]:::leaf
    CC --> TOOL["Tool: identity theft (s.66C), phishing (s.66D), obscenity (s.67)"]:::leaf
    CC --> TERR["Cyber terrorism (s.66F)"]:::leaf
    CC --> DEAD["s.66A struck down — Shreya Singhal (2015)"]:::warn
    classDef root fill:#FFF8DC,stroke:#000,color:#000;
    classDef leaf fill:#E6F3FF,stroke:#1E3A8A,color:#000;
    classDef warn fill:#FDE2E2,stroke:#B91C1C,color:#000;

Case Laws

Shreya Singhal v Union of India (2015) — s.66A struck down as an unconstitutional restriction on free speech; the landmark cyber-crime case.
Shankar v State (2010) — unauthorised access/data theft prosecuted under ss.66 and 43.
State of Tamil Nadu v Suhas Katti (2004) — India’s first cyber-crime conviction, for posting obscene messages about a woman online (s.67).

📄 Full notes + Question Bank (₹199) — every topic in depth, model answers to all past KSLU questions, in one printable PDF. Get the bundle · 10 Solved Problems · All Intellectual Property Rights I topics