You may not think twice before sharing your PAN card with an HR person, uploading your Aadhaar to open a bank account, or saving your passport in your email drafts.
But what if someone takes those details and uses them to open a fake bank account, take a loan in your name, or even commit a crime? That’s identity theft, and it’s not only real but alarmingly common in India.
In simple terms, identity theft happens when someone uses your personal information—like name, Aadhaar, bank account, photos, or biometrics—without your permission, usually for financial gain or to impersonate you.
The good news is, Indian law does give you protection, and you can take strong legal action when this happens.
Let’s break this down so it’s easy to understand and act on.
Common types of identity theft in India
| Type of Identity Theft | What It Looks Like |
|---|---|
| Financial fraud | Someone opens a bank account or credit card in your name |
| Loan scams | A fake loan is taken using your PAN or Aadhaar |
| SIM swap | Your mobile number is hacked to gain access to OTPs |
| Social media impersonation | Someone uses your photos or name to create fake profiles |
| Employment fraud | Your documents are used to get a job or commit crimes in your name |
In all these cases, you may not even know your identity has been stolen—until something terrible happens. A debt collector calls, you lose access to your bank account, or your social media is flooded with abuse.
Legal protections under Indian law
India has clear provisions under both the Information Technology Act, 2000 and the Indian Penal Code (IPC) to protect you:
- Section 66C of the IT Act deals with identity theft. If someone fraudulently uses your digital signature, password, or other unique identifying feature, they can face up to 3 years of jail and a fine of ₹1 lakh.
- Section 66D of the IT Act punishes cheating by impersonation through computer resources. This often applies in fake loan, fake job, or WhatsApp fraud cases.
- Section 419 and 420 of IPC deal with cheating and impersonation, and apply when identity theft leads to financial fraud.
- Section 468 IPC is used when someone forges your identity to commit fraud.
So yes, identity theft is a criminal offence in India, and not just a technical mistake.
What to do if you suspect your identity has been stolen
| Step | Why It’s Important |
|---|---|
| Secure your accounts | Change all passwords, enable two-factor authentication, and freeze affected bank accounts |
| Collect evidence | Screenshots, emails, SMS, call logs, URLs—anything that shows someone used your details |
| File a complaint online | Go to cybercrime.gov.in and select “Other Cybercrime.” Mention all facts clearly and attach documents |
| Call 1930 | If you lost money through UPI or online payment fraud, report immediately to help freeze the transaction |
| Visit a police station | File an FIR under Sections 66C, 66D IT Act and relevant IPC sections. If it happened in another city, ask for a Zero FIR |
If the police refuse to register your FIR, you can escalate under Section 154(3) of the CrPC to the SP or file a private complaint under Section 200 CrPC before a Magistrate.
If your photos or identity were used to create a fake social media profile or abusive content, also read: What to Do If Someone Misuses Your Photos or Videos Online
Preventive tips to avoid identity theft
| Tip | What You Can Do |
|---|---|
| Don’t overshare on social media | Avoid posting ID cards, travel documents, or sensitive info publicly |
| Check your credit report | Platforms like CIBIL or Experian allow free credit score checks—watch for unknown loans |
| Be cautious with Aadhaar/PAN | Don’t share full scans or OTPs unless you’re 100% sure it’s a genuine use |
| Use strong passwords and 2FA | Avoid using the same passwords across platforms and always enable OTP logins |
| Report lost documents immediately | If your PAN or Aadhaar is lost, lodge a police complaint and notify the issuing agency |
Also read: What is the IT Act and How Does It Protect You Online? — for a deeper look into how India’s cyber laws work.
Can you get compensation for identity theft?
Yes. Under Section 43A of the IT Act, if a company or service provider mishandles your sensitive personal data and it results in identity theft or financial loss, you may be entitled to compensation. This applies to banks, telecom companies, and even websites that store your personal info.
You may need legal help to file this claim, but it’s absolutely your right as a citizen.
Identity theft doesn’t just affect celebrities or CEOs—it can happen to anyone. From getting tagged in fake adult content to discovering a loan you never took, the risks are real. But so are your legal rights.
Know the law. Act fast. And don’t hesitate to file a complaint if someone steals your identity—it’s your name, your face, your future.
Also read: Online Defamation – What It Is and How to Respond — in case your stolen identity has been used to spread false or harmful information about you.
FAQs
1. Is identity theft a criminal offence in India?
Yes. Under Section 66C and 66D of the IT Act, it is a punishable cybercrime that can lead to imprisonment and fines.
2. Can I file a complaint if I only suspect misuse but don’t have full proof?
Yes, you can file a precautionary complaint with cybercrime authorities. It’s better to report early than wait for harm to happen.
3. What if my PAN or Aadhaar was used without my knowledge?
File an FIR immediately. Also notify the relevant authority (e.g., NSDL for PAN, UIDAI for Aadhaar) and monitor your credit report for suspicious activity.
4. Can identity theft happen through WhatsApp or email?
Absolutely. Scammers often clone WhatsApp profiles or use hacked emails to trick others while pretending to be you.
5. Will the police take my complaint seriously if no money was lost?
They should. Identity misuse—even without financial loss—is a crime. If your local station refuses, you can escalate it to the SP or file online at cybercrime.gov.in.
