If you are stuck in such a situation, here is what to do.

Mr. Arjun Sharma, a seasoned advocate practicing in Jodhpur for over two decades, had faced numerous high-stakes legal battles. However, a recent case pushed him into uncharted territory. He was representing a citizens’ group against “Apex Constructions,” a prominent real estate firm, in the Rajasthan High Court. The case involved a large commercial complex allegedly built in violation of crucial environmental norms. The evidence was strong, and Apex Constructions was facing the possibility of demolition or a massive penalty, putting their reputation and finances on the line.

The trouble started subtly. Confidential legal strategies would mysteriously leak. The opposing counsel’s replies would counter points that Mr. Sharma had only discussed internally with his team. A sense of being watched crept in. A paralegal on his team, Ms. Priya Singh, reported a persistent feeling of being followed after work. Soon after, Mr. Sharma began receiving anonymous, threatening text messages.

The situation escalated dramatically when private family photographs and personal conversations from his phone were published on a newly created blog and a social media profile under a fake name. A message followed, demanding he withdraw the case against Apex Constructions. The message was clear: “You’ve gone too far. Protect what you still have.” This personal attack was a blatant act of intimidation designed to derail the course of justice.

The investigation revealed a sophisticated digital assault. A forensic analysis showed Mr. Sharma’s laptop was compromised by spyware hidden within an email attachment disguised as a court document. This gave the attacker complete remote access. His phone’s cloud backup had also been breached, which is how the private media was stolen. Further checks revealed that a workstation used by a paralegal in his office had been infected with a keylogger through a compromised software update, likely serving as the initial entry point for the attackers.

All evidence was meticulously compiled. A formal complaint was lodged with the cybercrime division, and a detailed technical report was submitted to the High Court. A criminal investigation into the blackmail and cyber-attack is now running parallel to the original environmental case. This incident was a calculated attempt to subvert the legal system through digital espionage and blackmail.

Advice in such cases

• Do not panic or engage with the blackmailer. Responding can often escalate the situation.
• Preserve all evidence immediately. Take screenshots of messages, profiles, and any published content. Do not delete anything, as it is crucial for the investigation.
• Secure all your digital accounts. Change passwords for your email, social media, and banking services, and enable two-factor authentication wherever possible.
• Inform trusted family members or colleagues. Facing such a situation alone can be overwhelming, and a support system is vital.
• Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation of come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
• Report the matter to the police by filing a formal complaint with the cybercrime cell.

Applicable Sections of Law

In such cases, the following legal provisions are generally invoked:

• Bharatiya Nyaya Sanhita, 2023 (BNS):
  • Section 324: For the act of extortion, which involves intentionally putting a person in fear of injury to commit extortion.
  • Section 351: For criminal intimidation, which includes threatening another with injury to their person, reputation, or property.
  • Section 352: This section provides for the punishment for criminal intimidation.
• Information Technology Act, 2000:
  • Section 66C: Punishment for identity theft, which is relevant if the perpetrator created fake profiles.
  • Section 66E: Punishment for violation of privacy, applicable for capturing and sharing private images without consent.
  • Section 67 & 67A: Punishment for publishing or transmitting obscene or sexually explicit material in electronic form.

If you are the complainant

• Systematically gather all digital and physical evidence related to the threats, data leak, and blackmail attempts.
• Prepare a detailed written complaint that outlines the sequence of events chronologically, including dates, times, and a description of the incidents.
• Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation of come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
• Approach the cybercrime cell in your city or the nearest police station to file a First Information Report (FIR).
• Cooperate fully with the investigating officers. Be prepared to provide them with all necessary information and submit your electronic devices for forensic analysis if required.

If you are the victim

• Your immediate priority should be your safety and mental well-being. Do not hesitate to seek support from trusted friends, family, or a professional counselor.
• Remember that you are the victim of a crime. Do not blame yourself for the actions of the perpetrator.
• Take immediate steps to secure your digital life. Change all your passwords, review the privacy settings on your social media accounts, and be cautious about suspicious emails or messages.
• Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation of come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
• Maintain a detailed record of everything. Keep a log of all communications, threats, and instances of harassment, as this will be valuable evidence.

How the police behave in such cases

Police departments, particularly their specialized cybercrime units, are now better equipped to handle cases of digital blackmail and harassment. After receiving a complaint, they will register an FIR under the appropriate sections of the BNS and the IT Act. The investigation typically involves tracing IP addresses, coordinating with social media companies and internet service providers to take down malicious content and identify the culprit, and conducting a forensic analysis of the victim’s devices. While the police are generally supportive, these investigations can be complex and time-consuming. It is important for the complainant to be persistent and to follow up regularly with the investigating officer to know the status of the case.

FAQs people normally have

What evidence is required?

To build a strong case, the following evidence is crucial:

• Screenshots of the leaked photos, fake profiles, and any blackmail messages received.
• The URLs (web links) of the websites or social media profiles where the private content was posted.
• The original blackmail messages, whether they were sent via SMS, WhatsApp, email, or another platform.
• Call records if any threats were made over the phone.
• Any information or suspicion you may have about the identity of the perpetrator.
• Your electronic devices (such as your phone or laptop) may be required by the police for forensic examination to trace the source of the hack or leak.

How long will the investigation take?

The timeline for a cybercrime investigation can vary greatly. In cases where the perpetrator has made simple errors or is known to the victim, the case might be resolved within a few months. However, if the attacker has used sophisticated techniques to hide their identity, such as VPNs, proxy servers, or encrypted communication platforms, the investigation becomes far more complex. Tracing individuals across international borders can further delay the process, and in such scenarios, an investigation could take a year or even longer.

Advocate Sudhir Rao, Supreme Court of India