Instagram Harassment FIR: How Police Track Fake Accounts in India

One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.

Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.

TL;DR: Police investigations into fake Instagram accounts typically take 2-6 months, depending on data from Meta and cooperation from ISPs. If you've named a suspect in your FIR, the process speeds up. Do not share the FIR with the accused, as they may delete evidence. The offence is bailable, so arrest is unlikely, but a conviction can still follow.

A client studying at a reputable college in Pune found themselves in a deeply unsettling spot. A fake Instagram account — using a made-up name and a stolen photo — had sent a single obscene text to the client's close friend. Then it started targeting others in the friend circle. The harassment was real. And so was the fear. The client filed an FIR— at the Hinjewadi police station in Pune — under the relevant provisions of the Bharatiya Nyaya Sanhita (BNS), 2023. They named a fellow student as the suspected operator. The account was deleted shortly after the news spread. Classic mistake? Let's get to that. Initially, the client tried getting help from the college administration. Nothing changed. That's when they approached the Chamber of Advocate Sudhir Rao. The unique challenge here was the digital trail — or rather, how to secure it before it vanished. Advocate Sudhir Rao and his office argued that the police must immediately issue a formal request to Meta (via the Grievance Officer) for subscriber information, IP logs, and linked phone numbers. The specialised experience in cyber-criminal matters ensured that the Right to Information route wasn't wasted, and that the letter of request (LoR) under Section 94 BNSS was drafted correctly. The result? The police investigation moved with precision, and within two months, the suspect was identified through Meta's data dump — an email ID that matched the accused's college registration.

Key Facts of the Case

• A fake Instagram account sent one obscene text message to the victim's friend; the account also harassed other students.
• The FIR was filed at Hinjewadi Police Station, Pune, under Section 78 and Section 79 BNS (word/gesture intended to insult the modesty of a woman, and criminal intimidation).
• The client named a specific suspect in the FIR — a crucial step — which allowed the police to begin questioning immediately.
• The fake account was deleted by the suspect after the FIR news spread, but Meta's data retention policies meant the account's creation details, IP logs, and linked email were recoverable.
• Meta responded to the police's legal request under the Information Technology Act, 2000, and Section 94 BNSS, within 45 days.
• The police used the linked email ID and the initial IP log to match the suspect's college records, confirming identity.
• The offence is bailable and cognizable, meaning the police can arrest without warrant, but in practice, summons are issued first.

The Direct Legal Answer

How long before the culprit is caught?

Realistically, 2 to 6 months. The police must send a formal request to Meta for data. Meta's compliance typically takes 4-6 weeks. Once the data comes back (IP address, linked phone number, email), the police go to the Internet Service Provider for the subscriber's name and address. That adds another 2-4 weeks. If you've named a suspect, the police can question them immediately while waiting for Meta's data — that dramatically shortens the timeline.

Will Meta provide the information or do they "gatekeep"?

Meta does comply — fully and legally — with valid police requests under the Information Technology Act, 2000. They have a dedicated law enforcement response team in India. But they will not respond to a private email or a verbal request. The police must send a formal letter of request (LoR) under Section 94 BNSS, with a certified copy of the FIR. Once that's done, Meta shares the account's creation IP, login IPs, linked email, and phone number — if available.

What if the suspect already deleted the account?

That actually helps the police. Meta retains account records for a statutory period even after deletion. The data request will still pull up the creation details, linked devices, and associated contact information. Deletion doesn't erase the digital footprint — it only removes the public profile.

Advice in Such Cases

Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.

Don't tell anyone. The moment you share the FIR copy with friends or post about it on social media, the suspect gets wind. They delete the account, warn others, or destroy evidence. Keep it strictly between you, your lawyer, and the investigating officer.

Preserve every screenshot. Take screenshots of the fake profile, the obscene messages, the URL, the date and time stamps. Save them in at least two places — your phone and a cloud drive. This evidence is gold if the account gets deleted.

Matters like these — where the evidence is entirely digital and cross-jurisdictional — require an advocate who regularly handles cyber-criminal cases. A general practitioner may not know the nuances of drafting a Section 94 BNSS letter or the exact format for Meta's law enforcement portal. That domain-specific experience directly affects how quickly and effectively the investigation proceeds.

Applicable Sections of Law

• Section 78 BNS — Word, gesture or act intended to insult the modesty of a woman. Punishable with simple imprisonment up to one year, or fine, or both. Cognizable and bailable.
• Section 79 BNS — Criminal intimidation by anonymous communication. If the threat is to cause alarm or injury, the punishment extends to two years' imprisonment and fine. Cognizable and bailable.
• Section 79(2) BNS — If the anonymous communication induces the person to do something they are not legally bound to do, or omit something they are legally entitled to do — imprisonment up to two years.
• Section 66C and 66D, Information Technology Act, 2000 — Identity theft (using someone else's electronic signature/photo to create a fake account) and cheating by personation using a computer resource. Punishable with up to three years' imprisonment and fine. Cognizable and bailable.

Punishment and Penalties

• Section 78 BNS: Simple imprisonment up to one year, or fine, or both.
• Section 79 BNS: Imprisonment up to two years and fine.
• Section 66C IT Act: Imprisonment up to three years and fine up to Rs. 1 lakh.
• Section 66D IT Act: Imprisonment up to three years and fine up to Rs. 1 lakh.
• All offences are bailable — the accused can get bail from the police station itself or from the Magistrate on the same day of arrest.
• Offences under Section 78 and 79 BNS are cognizable — police can arrest without warrant — but in practice, summons are preferred.
• The offences are compoundable — the victim and accused can settle the matter with the court's permission, and the case can be closed.

Jurisdiction — Where to File the Case

In cyber harassment cases, jurisdiction is broad. Under Section 75 of the IT Act, 2000, the offence can be tried where the victim resides, where the computer resource is located, or where the result of the offence occurs. That means you can file the FIR at the police station in your city — even if the fake account was created from another state. In practice, file at the local cyber crime police station or the regular police station in your area. The investigating officer will coordinate with the other jurisdiction as needed. The trial will be before the jurisdictional Magistrate's court having territorial authority over your complaint.

What if Police Refuse to File FIR?

Police sometimes hesitate in cyber cases — they may say "it's a small matter" or "it will take years". That's wrong. Harassment via fake accounts is a cognizable offence. If the police refuse to register your FIR:

• Approach the Superintendent of Police (SP) under Section 173(4) BNSS — file a written complaint with the SP, who can direct the station to register the FIR.
• If that doesn't work, file a private complaint before the Judicial Magistrate under Section 175(3) BNSS. The Magistrate can order the police to investigate.
• As a last resort, file a writ petition under Article 226 of the Constitution before the concerned High Court, seeking direction to the police to register the FIR.
• Document every refusal — note the name of the officer, time, date, and reason given. That record becomes evidence of inaction.

Rights of the Accused

Even in cyber harassment cases, the accused has fundamental rights that cannot be ignored:

• Right to remain silent and against self-incrimination under Article 20(3) — the accused cannot be compelled to be a witness against themselves.
• Right to legal representation under Article 22(1) — the accused has the right to consult and be defended by a lawyer of their choice.
• Right to be produced before a Magistrate within 24 hours of arrest (Article 22(2)).
• Right to receive a copy of the FIR and to know the grounds of arrest (Section 106 BNSS).
• Right to bail — since the offences under BNS Sections 78 and 79 are bailable, the accused can seek release from the police station itself or from the Magistrate's court.

Bail Provisions

All offences discussed here are bailable. That means bail is a matter of right, not discretion. The accused can:

• Get regular bail from the police station itself by furnishing a personal bond and one or two sureties — no need to approach the court.
• If arrested and produced before the Magistrate, apply for regular bail under Section 480/483 BNSS. Since the offence is bailable, the Magistrate must grant bail.
• Anticipatory bail under Section 482 BNSS is available only for non-bailable offences. Since these are bailable, anticipatory bail is not strictly needed — but a lawyer may still file for it if the accused fears arrest on other grounds.
• Bail conditions typically include: not tampering with evidence, not threatening the victim, and cooperating with investigation.

Quashing of FIR / Case

An FIR for fake account harassment can be quashed by the High Court under Section 528 BNSS (inherent powers). The grounds are:

• No prima facie offence is made out from the FIR itself — for example, if the message was not obscene but merely a joke.
• The matter has been settled between the victim and accused, and the offence is compoundable — the court may quash the FIR to prevent abuse of process.
• The FIR is found to be malicious or filed with an ulterior motive.
• The investigation is complete and no evidence exists against the accused.
• Quashing is a viable strategy only if the FIR is weak or the compromise is genuine. The High Court will not quash a case where there is credible digital evidence.

If You Are the Victim

• Do NOT respond to the fake account. Don't message, don't comment, don't engage. Every interaction gives them more material.
• Screenshot everything — the profile page, the messages, the URL. Save them in two places: phone gallery and cloud drive.
• Block the account immediately after taking screenshots. Do not delete your own chat history.
• File an FIR at your local police station or at the nearest cyber crime cell. Mention any suspected person by name if you have one.
• Do not share the FIR copy with anyone except your lawyer and the investigating officer. The suspect should not get a head start to destroy evidence.

Documents You Must Keep Ready

• Aadhaar card or any government-issued photo ID of the victim.
• Mobile phone containing the original messages and screenshots.
• Screenshots of the fake account's profile page, username, and any posts.
• Link (URL) of the fake account — even if deleted, the police can use it for the data request.
• Any communication with the suspect — even if through other platforms — that shows the connection.
• For students: college ID card, roll number, or any evidence linking the suspect to the victim.
• Written complaint (if you gave one to the police).
• A note of the date, time, and exact content of the obscene message.

What Evidence Is Required?

• Primary evidence: The original obscene message on your phone, recorded in real-time. Do not forward or edit it.
• Screenshots of the message with the sender's profile name and photo visible.
• URL of the fake account — the police use this to request subscriber data from Meta.
• Metadata from your phone — the police may extract EXIF data to confirm date, time, and device.
• IP logs — obtained by police through Meta. These pinpoint the location and device used to create and send the message.
• Linked phone number or email — if Meta returns these, they become direct evidence tying the account to the accused.
• Testimony of the victim and any other witnesses who saw the message or were targeted by the same account.

How the Police Behave in Such Cases

Police response in cyber harassment cases has improved significantly. Most urban police stations — especially in cities like Pune, Bangalore, and Delhi — have dedicated cyber crime units. The investigating officer will first take your statement and record the FIR. They will then issue a formal letter to Meta (or the relevant platform) for data. The biggest hurdle is the waiting period for Meta's response — typically 4-6 weeks. During that time, the police may question the named suspect but cannot force a confession without evidence. The police are generally cooperative, but you may need to follow up regularly. A lawyer's involvement ensures that the police don't sit on the case.

Timeline of Legal Process

• Day 1: Filing of FIR. Police begin preliminary inquiry and issue letter to Meta.
• Week 1-4: Police question named suspect (if any). Meta processes the request.
• Week 4-8: Meta provides subscriber data (IP, email, phone number). Police approach ISP for subscriber details.
• Week 8-12: Investigation complete. Police file chargesheet before the Magistrate.
• Month 3-4: Magistrate takes cognizance, issues summons, and frames charges.
• Month 4-8: Trial — recording of prosecution evidence and defence evidence.
• Month 8-10: Judgment. If convicted, the accused can appeal. Total time: 8-12 months for trial, 2-3 years with appeal.

How Long Will the Investigation Take?

Realistically, 2 to 4 months. The police need about 4-6 weeks for Meta's data response, then another 2-4 weeks to trace the IP and identify the subscriber. If you've named a suspect, the investigation can be completed faster — 6-8 weeks — because the police can question the suspect immediately. The chargesheet must be filed within 60-90 days from arrest (if the accused is in custody) or within a reasonable time if the accused is on bail.

Understanding the Costs

The total cost of a matter like this varies significantly from one case to the next — it depends on the complexity of the dispute, the forum involved, the number of hearings, and the specific facts of your situation. There is no single fixed figure that applies to everyone.

A professional advocate can give you an accurate estimate only after reviewing all your facts and documents in a consultation.

Can the Matter Be Settled Out of Court?

Yes. The offences under Sections 78 and 79 BNS are compoundable — meaning the victim and accused can reach a settlement with the court's permission. The process is straightforward: both parties appear before the Magistrate, the victim states that the matter has been resolved, and the court records the compromise and acquits the accused. Settlement is particularly common in college situations, where both parties know each other and the harassment was a one-time incident. The victim may also choose to settle if the accused apologises sincerely and undertakes not to repeat the behaviour. If the matter is already in court, Section 89 CPC allows for reference to mediation or Lok Adalat.

Common Mistakes People Make

• Sharing the FIR copy with friends or social media. This tips off the suspect, who deletes the account and evidence. Keep the FIR strictly between you, your lawyer, and the investigating officer.
• Engaging a lawyer who does not handle cyber cases regularly. Fake account harassment involves digital evidence, Section 94 BNSS letters, and Meta's compliance process. A general practitioner may waste time on wrong procedures. An advocate with domain-specific experience ensures the investigation moves correctly and quickly.
• Deleting the chat or the fake account's messages. Do not delete anything. Preserve the original messages exactly as they are. Forwarding or editing them can make them inadmissible as evidence.
• Responding to the fake account. Any reply gives the suspect ammunition. Don't message, don't comment, don't engage. Just block and report.
• Waiting too long to file the FIR. Delay weakens your case. Evidence like IP logs are retained only for a limited period. File the FIR as soon as you discover the harassment.
• Not naming a suspect if you have one. Even if you're only 60% sure, mention the name in the FIR. It immediately directs the investigation and prevents the police from treating it as a "blind case".

FAQs People Normally Have

Can I file an FIR if I don't know who made the fake account?

Yes. The FIR can be filed against "unknown person". The police will investigate using the account's digital trail — IP address, email, phone number — and identify the culprit. Mentioning a suspected name, if you have one, speeds things up but is not mandatory.

What if the fake account is from outside India?

If the IP address traces to a server outside India, the police may need to involve INTERPOL or use mutual legal assistance treaties. That can take 6-12 months. However, in most cases, the fake account operator is within India — often in the same city.

Can I get the fake account removed without police involvement?

You can report the account to Instagram directly for impersonation or harassment. Instagram may take it down within 24-48 hours. But that's not a substitute for an FIR — the perpetrator will simply create another account. The police investigation is needed to identify and stop the person.

Is there a time limit to file an FIR?

No strict limitation period for cognizable offences like this. But file as soon as possible. Digital evidence — server logs, ISP records — is typically retained for 3-6 months. Delay may result in loss of evidence.

Can the accused get bail easily?

Yes. All offences involved are bailable. The accused can get bail from the police station itself or from the Magistrate on the same day. That does not mean the case goes away — the trial continues, and conviction is still possible.

This article is general legal information, not legal advice. Consult a qualified advocate about your specific situation.

Advocate Sudhir Rao, Supreme Court of India

Facing a similar matter? Speak to a criminal lawyer in Delhi — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.