Section 66D Information Technology Act penalizes cheating by personation using computer resource or communication device. Enacted through the 2008 amendments to the IT Act, this provision addresses digital impersonation schemes, including fake social media profiles, business email spoofing, and online financial scams, imposing punishment of imprisonment of up to three years and a fine of up to one lakh rupees.
Statutory Provision and Legislative Scope of Section 66D
The statutory language of Section 66D establishes that whoever, by means of any communication device or computer resource, cheats by personation, shall be punished with imprisonment of either description for a term extending to three years and shall also be liable to a fine extending to one lakh rupees.
This provision addresses deceptive practices in digital environments where an offender conceals their true identity or adopts the persona of another living individual, deceased person, or fictional entity. The terms communication device and computer resource cover mobile smartphones, personal computers, cloud servers, social networks, messaging platforms, and web portals used to communicate deceptive messages to victims.
Essential Legal Ingredients of Section 66D
Establishing an offence under Section 66D requires the prosecution to prove three core elements:
- Act of Personation: The accused must have pretended to be another person, real or imaginary, or represented that they are a person whom they are not.
- Cheating: The personation must be accompanied by cheating, defined as deceiving a victim to fraudulently induce the delivery of property, money, or sensitive credentials, or to consent to an act causing harm.
- Use of Digital Resources: The fraudulent personation must be executed by means of a computer resource, telecommunication network, or electronic communication device.
The mental element of dishonest or fraudulent intent must exist at the time the deceptive representations are made. Unintentional miscommunication or parody that makes no fraudulent demands does not constitute an offence under Section 66D. Courts distinguish between simple contractual default and criminal personation by examining whether fraudulent misrepresentation was present at the inception of the transaction.
Common Manifestations of Online Impersonation and Fraud
Cybercriminals utilize digital tools to orchestrate various impersonation scams across Indian cyberspace. Understanding these patterns assists victims in identifying fraudulent schemes:
Business Email Compromise (BEC) and Vendor Impersonation
In BEC scams, attackers create spoofed email addresses mimicking corporate executives, suppliers, or legal advisors. The scammer transmits fraudulent invoice directions, inducing finance personnel to transfer funds into unauthorized bank accounts under the belief that they are fulfilling legitimate commercial contracts.
Social Media Identity Theft and Defamation
Attackers create duplicate or fake social media profiles using victims' photographs, names, and personal information. These profiles are used to solicit urgent financial loans from friends and contacts, or to disseminate offensive communications, creating complex scenarios that intersect with offences like Sending defamatory messages by e-mail - Sec.499 IPC.
Phishing and Fake Regulatory Authority Scams
Fraudsters pose as tax officials, law enforcement personnel, or bank representatives, calling or emailing victims with claims of pending arrests or frozen accounts. Under this deceptive pretense, perpetrators coerce victims into transferring funds or sharing account credentials, exemplifying online impersonation cyber law India offences.
Employment, Matrimonial, and Investment Frauds
Scammers construct elaborate fake identities on professional networks, matrimonial portals, or messaging apps. They deceive individuals into transferring processing fees for non-existent employment opportunities or lucrative investment returns, executing fake profile financial cheating IT Act scams that cause severe financial injury.
Legal Intersection: IT Act Section 66D vs Section 419 IPC
Cheating by personation has long been recognized as a traditional criminal offence under Section 416 and punished under Section 419 of the Indian Penal Code (and corresponding sections of the Bharatiya Nyaya Sanhita). Section 66D of the IT Act serves as the specific statutory provision when digital media or computer resources are utilized as the medium of deception.
In prosecution practice, law enforcement agencies charge Section 66D alongside Section 419 IPC and Section 66C of the IT Act (identity theft). While Section 66C focuses on the unauthorized use of passwords, electronic signatures, or unique biometric markers, Section 66D penalizes the fraudulent deception and resulting wrongful gain or loss achieved through that personation.
Corporate organizations can reduce exposure to executive impersonation and digital fraud by conducting a regular Cyber Law Compliance Audit, implementing email domain authentication protocols (SPF, DKIM, DMARC), and establishing strict multi-person authorization controls for wire transfers.
Penalties and Legal Remedies for Victims
The punishment under Section 66D IT Act includes imprisonment of either description for a term extending up to three years and liability to a fine of up to one lakh rupees. The offence is cognizable and bailable under Section 77B of the IT Act, enabling police officers to register formal FIRs and initiate digital investigations without prior magisterial warrants.
Victims of online impersonation should take immediate steps to mitigate damage and secure legal remedies:
- Evidence Preservation: Capture screenshots of fake profiles, preserve complete email headers, record transaction identification numbers, and save communication chat logs.
- Platform Reporting: Submit immediate takedown requests to the relevant social media platform or web host under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules.
- Cyber Crime Reporting: File a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in or report to the local Cyber Crime Police Station for formal investigation and bank account freezing.
- Identity Rectification Notices: Issue public alerts or formal notices through legal counsel to protect personal and professional reputation against unauthorized third-party commitments.
Pursuing timely legal action under Section 66D ensures swift removal of fraudulent digital profiles, prevents further victim deception, and facilitates the recovery of misappropriated financial assets.
