Police Not Acting on Cyber Complaint: Next Legal Steps

You walked into the cyber cell three weeks ago with the printout, the screenshots, the bank statement showing the missing eighty-two thousand rupees. The constable nodded, took a photocopy, told you they would call. You called him on Tuesday and he was on leave. On Friday someone else picked up the phone and asked you to come on Monday. On Monday a different officer said it was a civil dispute, you should go to court. Each time you leave that office, the WhatsApp chain that scammed you is still there, the UPI trail is colder, and the money is further from being traceable. Each day of inaction is a day the digital evidence is being deleted by the platform, the wallet, the bank.

This is the exact situation Indian law has thought about. There is a clear escalation ladder built into the criminal procedure code, and there are landmark Supreme Court decisions that hold the police to it. You do not have to keep going back to the same uninterested counter. You have to start using the ladder. This article walks you through that ladder, step by step, with the exact provisions and judgments that will move things forward.

You Are Not Imagining It

Before the legal steps, a piece of context that helps. Indian cyber cells are overworked, often understaffed, and typically dependent on platform cooperation that has its own delays. This is not an excuse — it is a reality you are working with. Most station-level officers prefer not to register fresh cyber FIRs because the investigation is technically demanding and the recovery rate is uncertain. Some redirect victims indefinitely with the words "civil matter" or "we cannot trace this" or "go to your bank."

None of those statements is legally correct when the offence is cognizable. The IT Act offences — Section 66, Section 66C and Section 66D — are all cognizable, meaning the police are empowered to investigate without a magistrate's order, and required to register an FIR when the complaint discloses a cognizable offence. The law does not give them discretion to refuse on grounds of difficulty.

What the Law Actually Requires the Police to Do

Section 154 CrPC, now BNSS Section 173, requires the officer in charge of a police station to reduce every information of a cognizable offence into writing — and to give a free copy to the informant. The duty is mandatory.

The Supreme Court Constitution Bench in Lalita Kumari v. State of U.P. (2014) 2 SCC 1 settled the question once and for all — registration of FIR is mandatory under Section 154 if the information discloses a cognizable offence, and no preliminary inquiry is permissible at that stage except in narrowly defined categories such as matrimonial disputes, commercial offences, medical negligence, corruption, and cases with abnormal delay. Cyber-fraud, account hacking, online cheating, and digital impersonation are not in those exceptional categories. They are straight-line cognizable offences requiring immediate registration.

"Registration of FIR is mandatory under Section 154 of the Code, if the information discloses commission of a cognizable offence and no preliminary inquiry is permissible in such a situation."

So when a cyber cell tells you "we will look into it" without registering an FIR, that itself is a violation of Section 154 read with the Lalita Kumari ruling. You do not need to argue with them. You start escalating.

Step 1 — The SP Escalation Under Section 154(3)

Section 154(3) CrPC, mirrored in BNSS Section 173(4), creates the first escalation pathway:

"Any person aggrieved by a refusal on the part of an officer in charge of a police station to record the information... may send the substance of such information, in writing and by post, to the Superintendent of Police concerned who, if satisfied that such information discloses the commission of a cognizable offence, shall either investigate the case himself or direct an investigation to be made..."

The drill is: write a clear, structured representation to the Superintendent of Police of the district. State the offence, the dates, the platform involved, the financial loss, and your prior visits to the station. Annex copies of your original complaint, screenshots, transaction records, and the cybercrime.gov.in acknowledgement. Send it by registered post or speed post — not just email — so you have proof of delivery. Mark a copy to the Commissioner of Police where applicable, and to the cyber cell.

The SP then must either start the investigation personally or direct a subordinate. The CrPC commentary makes the duty explicit — "non-registration of the FIR by the officer-in-charge of the police station amounts to dereliction of duty," and on receipt of a Section 154(3) communication the SP must decide on the cognizable nature and act. Many cases get unstuck at this very stage because the SP's office is more sensitive to written escalation than the constable at the front desk.

If the SP also remains silent for two to three weeks, the law has anticipated that and provided the next rung.

Step 2 — The Magistrate's Section 156(3) Order

Section 156(3) CrPC, now BNSS Section 175(3), gives the Magistrate the power to direct the police to register an FIR and investigate a cognizable offence even before the Magistrate takes cognizance. This is the most-used remedy in practice.

The petition is filed before the jurisdictional Magistrate (typically the Magistrate having territorial jurisdiction where the offence took place or where part of the cause of action arose — for cyber offences, often where the victim is located). The petition sets out: the offence; the cognizable sections; the original complaint to the police; the escalation under Section 154(3); the SP's failure to act; and a prayer to direct the police to register the FIR and investigate.

The Magistrate, on being satisfied that a cognizable offence is disclosed, can direct the officer in charge to register the FIR and investigate. The Supreme Court in Sakiri Vasu v. State of U.P. (AIR 2008 SC 907) went further — it held that Section 156(3) is wide enough to include all powers necessary for proper investigation, and the Magistrate has incidental and implied power to direct or monitor the investigation. So the same Magistrate who passes the order can also be approached again with status-update applications, calling the IO to court, and ensuring real progress.

The Court did set a sensible limit in Tilaknagar Industries Ltd v. State of A.P. (AIR 2012 SC 521) — where the complaint does not disclose a cognizable offence on its face, the order directing investigation is liable to be quashed. So the petition must be drafted carefully, with the cognizable nature visible at first reading. A cyber lawyer's drafting matters here.

For broader procedural guidance on getting an FIR registered, the cluster on FIR problems and remedies covers parallel issues that often interact with cyber complaints — wrong-jurisdiction objections, refused FIRs in dowry-linked online harassment, and so on.

Step 3 — Filing Your Own Complaint Before the Magistrate

Where you do not want to wait for the police chain at all — or where the matter is more nuanced than a routine cyber-fraud — you can file a private complaint directly to the Magistrate under Section 200 CrPC, now BNSS Section 223.

The Magistrate examines the complainant on oath, may examine witnesses listed by the complainant, and either takes cognizance and issues process to the accused, or refers the matter under Section 156(3) for police investigation. The advantage of this route is that the case is in the court's hands from day one. The disadvantage is that for digital offences, police capacity to seek IP logs and bank trails is sometimes essential, so the more common combination is a private complaint with a prayer for Section 156(3) direction.

The CrPC commentary has reiterated that Section 200 comes into play only after the Magistrate has taken cognizance, citing State of W.B. v. Bejay Kumar Bose (AIR 1978 SC 188). So the procedural sequencing in the petition matters — your lawyer drafts the prayer with the right combination of cognizance and 156(3) reference depending on what the case actually needs.

Step 4 — The High Court Writ Under Article 226

When the Magistrate-level remedies fail or face long delays, the High Court is the next forum. A writ petition under Article 226 of the Constitution is filed before the High Court of the relevant state, seeking a direction to the police to register the FIR or to investigate properly.

The High Court has wide powers in such writs. It can direct registration of FIR; transfer the investigation to a different unit (cyber cell, crime branch, or in extreme matters the CBI); set a court-supervised timeline; and require periodic compliance reports. Courts have used these powers liberally where cyber matters were sitting unaddressed, particularly where the digital trail was at risk of disappearing.

An adjacent remedy is the High Court's inherent power under Section 482 CrPC, now BNSS Section 528 — to give directions to secure the ends of justice. In cyber cases this often translates into directions to the police to act, to the platforms to preserve data, and to the bank to share transaction records.

When the FIR Is Registered But the Investigation Sleeps

A common variant is that the FIR has been recorded after enough pressure, but the investigation goes nowhere — no notices to platforms, no examination of witnesses, no chargesheet for months. The Sakiri Vasu pathway covers this too. You move the same Magistrate who has territorial jurisdiction with a status-update application, attaching the FIR and a chronology of inaction. The Magistrate can summon the IO, set timelines, and order specific investigative steps.

If the police file a closure or final report under BNSS Section 193 (Section 173 CrPC) without real investigation, the Magistrate can reject the closure, take cognizance of the offence on the basis of the case papers, or direct further investigation. The High Court under Section 482 / Section 528 can also intervene to quash a sham closure and direct fresh investigation.

In particularly stubborn cases, public interest and accountability considerations sometimes lead to transfer of investigation to the cyber crime cell of a higher unit. The order is discretionary but is regularly granted in matters where the original investigation has demonstrably failed.

What Should I Actually Do Now?

If your cyber complaint has been sitting at a station for weeks and you do not know which lever to pull next, the right escalation path is rarely obvious without a lawyer's eye. Pinaka Legal in Delhi drafts and files SP-level representations, Magistrate petitions, and High Court writs in cyber matters routinely — calmly, on paper, with the right citations, and without theatrics.

A Final Word — The Paper Trail Is Your Power

The most common reason cyber complaints stall is that the victim never converts oral pushback at the station into written escalation. Once the file moves into writing — to the SP, to the Magistrate, to the High Court — the system works. Each rung of the ladder is enforceable. The Lalita Kumari ruling, the Section 154(3) escalation, the Section 156(3) petition, the writ jurisdiction — these are not theoretical remedies. They are used every day in courts across India in cyber matters.

What you are fighting is not the absence of law. The law is firmly on your side. You are fighting institutional slowness and the temptation, on the other side, to wear you down. The way to defeat that is methodical paperwork, consistent dates, and the willingness to climb one step of the escalation ladder at a time. The earlier you start climbing, the better the chance that the digital trail still exists when the investigation finally begins.

Frequently Asked Questions

What does it actually mean that police are not acting on my cyber complaint?

It means one or more of three things — they have not registered the FIR despite a cognizable offence on the face of your complaint, they have registered an FIR but done no real investigation, or they have closed the matter as a "civil dispute" without proper inquiry. All three are challengeable. The law gives you escalation routes through the Superintendent of Police, the Magistrate and the High Court. The earlier you escalate, the more cleanly the system responds.

Is the police duty-bound to register an FIR for a cyber offence?

Yes, when the complaint discloses a cognizable offence. The Supreme Court in Lalita Kumari v. State of U.P. held that registration of FIR is mandatory under Section 154 CrPC where the information discloses a cognizable offence, with no discretion to conduct a preliminary inquiry first except in narrowly defined categories. Cyber offences under Sections 66, 66C, 66D of the IT Act are cognizable. Refusing to register an FIR in such cases is dereliction of duty.

What is Section 154(3) CrPC and how do I use it?

Section 154(3) CrPC, mirrored in BNSS Section 173(4), allows you to send the substance of your complaint by post to the Superintendent of Police of the district when the local station refuses to record it. If the SP is satisfied that a cognizable offence is disclosed, the SP must either investigate personally or direct a subordinate officer to investigate. In practice the application is sent by registered post or speed post, copying the cyber cell, with all evidence annexed. Keep the postal receipt safely for use in later petitions.

What is Section 156(3) CrPC?

Section 156(3) CrPC, now BNSS Section 175(3), empowers a Magistrate to direct the police to investigate a cognizable offence even before taking cognizance. The petition is filed before the jurisdictional Magistrate with the complaint, evidence and proof that you first approached the police and the SP. The Magistrate, if satisfied a cognizable offence is disclosed, can direct the officer in charge to register the FIR and investigate, and can also monitor the investigation, as Sakiri Vasu confirms.

Can the Magistrate keep checking on the investigation after directing it?

Yes. The Supreme Court in Sakiri Vasu v. State of U.P. (AIR 2008 SC 907) held that Section 156(3) is wide enough to include all powers necessary for proper investigation, and the Magistrate has incidental and implied power to direct or monitor the police. So if the police drag their feet after the Magistrate's order, you can move the same Magistrate again with a status-update application. This is the practical hammer that breaks investigative inertia in cyber matters.

What if even the Magistrate's order does not work?

You move the High Court under Article 226 of the Constitution by way of a writ petition. The High Court can direct registration of FIR, transfer the investigation to a different unit (cyber cell, crime branch, CBI in extreme cases), or set a court-supervised timeline. Courts have done this in many cyber matters where the cyber cell remained passive despite cognizable offences. The writ remedy is the strongest external pressure on a defunct investigation, and Section 482 / BNSS Section 528 supplements it.

Can I file my own complaint directly with the Magistrate?

Yes. Under Section 200 CrPC (now BNSS Section 223) you can file a private complaint before the Magistrate. The Magistrate examines the complainant on oath, may examine witnesses, and either takes cognizance and issues process or refers the matter to police under Section 156(3). For cyber offences this is sometimes faster than waiting for a recalcitrant station. A lawyer drafts the complaint with proper attribution of offences and evidence.

How long should I wait before escalating?

For an FIR-registration refusal, escalate to the SP under Section 154(3) immediately — within a week. If there is no movement in two to three weeks, file before the Magistrate under Section 156(3). For an FIR that is registered but has no investigation, give the IO four to six weeks of cooperation, then file a status-update application before the Magistrate. The High Court writ is for situations where Magistrate-level remedies fail. Speed protects evidence — most digital records have short retention.

Will the police harass me for escalating their refusal?

In well-documented cases, no. The escalation is a paper process — speed post, file in court, written representations. There is no requirement for confrontational visits. Courts and senior officers tend to move quickly on cyber complaints because the digital trail evaporates. Your lawyer represents you in court and corresponds with the SP. Keep a calm, fact-only tone in every paper. Documents win these fights.

What documents do I need before going to the Magistrate?

Your original written complaint to the police station with received-copy stamp; the registered post or email proof to the SP under Section 154(3); the SP's reply or proof of non-reply; screenshots, transaction details and Section 65B-certified printouts of the cyber offence; the cybercrime.gov.in acknowledgement and reference number; and call records or notes of any oral interaction. Your lawyer drafts the Section 156(3) petition built around this paper trail.

Does this work if the cyber crime is in another state?

Yes. The cyber cell of any city can register a complaint when the victim is within its jurisdiction, even if the suspect is elsewhere. The cybercrime.gov.in portal is national. If the local station resists on territorial grounds, the SP-level escalation and the Magistrate's Section 156(3) order resolve it — both have wide power and the Supreme Court has consistently rejected territorial objections at the FIR stage in cognizable offences. Investigation can later be transferred between states under BNSS provisions.

Can I also seek quashing of a wrong closure report?

Yes. If the police file a closure or final report under BNSS Section 193 (Section 173 CrPC) without real investigation, the Magistrate can reject it, take cognizance directly on the basis of the complaint, or direct further investigation. Higher up, the High Court under Section 482 CrPC / BNSS Section 528 can intervene to quash a sham closure or direct fresh investigation. This is a technical remedy; the petition needs to set out specific deficiencies in the investigation.

For more articles on Indian law, visit the Pinaka Legal Blog. Written by the Pinaka Legal Editorial Team. For queries, call +91 8595704798 or email info@pinakalegal.com.