It is 11:47 at night. Your phone has been pinging for half an hour. You finally pick it up. The screen reads: "I know where you live. Drop the case or your daughter pays." Then twelve missed calls from a number you have never seen. Then another message: "I have your photos. Reply or I post them." You sit on the edge of the bed and try to slow your breathing. You don't know if you should call 112, walk into a thana at midnight, type into the cybercrime portal, or wait until morning.
Don't wait. The Indian legal system has clear, layered remedies for exactly this moment, and the next few hours matter — for evidence, for your safety, and for how seriously the police end up taking your case. This guide walks you through that decision in the order a calm friend who happens to know the law would tell you.
What Actually Counts as a Threat in Law
The law in India does not treat every angry message as a crime. The legal trigger is the intent to cause alarm. Section 503 of the Indian Penal Code — the criminal intimidation section — kicks in when the sender threatens you with "any injury to your person, reputation or property, or to the person or reputation of any one in whom you are interested, with intent to cause alarm to you, or to cause you to do any act which you are not legally bound to do, or to omit to do any act which you are legally entitled to do".
Whoever threatens another with any injury to his person, reputation or property... with intent to cause alarm to that person, or to cause that person to do any act which he is not legally bound to do, or to omit to do any act which that person is legally entitled to do, as the means of avoiding the execution of such threat, commits criminal intimidation.
The Supreme Court in Manik Taneja v State of Karnataka (2015) 7 SCC 423 clarified that mere expression of words without an intention to alarm is not sufficient. The threat must be capable of producing real fear in a reasonable person. Noble Mohandas v State of Tamil Nadu 1989 Cr LJ 669 (Mad) held the threat must be "real in the sense that the accused means what he says and the victim of the threat should feel threatened actually". The 11:47 PM message above plainly clears that bar.
The Sections That Apply to Your Phone Screen
Section 506 of the IPC — punishment for criminal intimidation. The basic punishment is imprisonment up to two years, fine, or both. Where the threat is of death or grievous hurt — or to cause destruction of property by fire, or to cause an offence punishable with death or imprisonment for life — the punishment goes up to seven years. Notably, in Uttar Pradesh, by State amendment, even ordinary Section 506 has been made cognizable and non-bailable.
Section 504 of the IPC — intentional insult to provoke breach of peace. Where the message is abuse without an explicit threat, but is calculated to provoke you into a breach of peace, Section 504 covers it. Punishment is imprisonment up to two years. The Supreme Court has held this is a useful section for cases where the abuse is severe but stops short of a true threat.
Section 354A and 354D of the IPC — sexual harassment and stalking. If the abusive message has sexual content or amounts to stalking — repeated unwanted contact, monitoring of your online accounts, sharing of sexually-coloured remarks — these sections become applicable. Section 354D specifically punishes "monitoring the use by a woman of the internet, e-mail or any other form of electronic communication", with imprisonment up to three years on first conviction and up to five years on a subsequent conviction.
Section 67 of the IT Act — obscene electronic content. Where the message contains material which is "lascivious or appeals to the prurient interest" or which would "tend to deprave and corrupt" the recipient, Section 67 applies, with imprisonment up to three years and fine up to five lakh rupees on first conviction. The same words echo Section 292 of the IPC, with the only difference being the medium — electronic.
If the abuse is happening in a context that involves online romance fraud or sextortion, the additional cyber scam framework — including new scam patterns and how to report them — will overlap. Mention every angle that fits in your complaint, not only the one that feels most obvious.
Threats From a Number You Don't Recognise
Most online threats in 2026 come from accounts the victim has never seen. The law treats this as an aggravating factor, not a barrier.
Section 507 of the IPC — criminal intimidation by anonymous communication — adds an extra punishment of up to two years on top of Section 506 whenever the criminal intimidation is committed "by an anonymous communication, or having taken precaution to conceal the name or abode of the person from whom the threat comes". The classical authority on this section is Doraiswamy Ayyar (1924) 48 Mad 774, which held that the offence is complete the moment the anonymous communication conveying the threat is received. The principle applies cleanly to a fake-handle Instagram DM, a burner WhatsApp number, or a Telegram bot.
The practical takeaway is that a complaint about an anonymous threat is legally stronger, not weaker. Your FIR should specifically cite Section 507 alongside Sections 503 and 506, because the anonymous nature is itself an aggravating element — and the SHO is on notice that he cannot dismiss the matter as "untraceable".
Should I File a Cyber Complaint or an FIR?
This is the single question most readers ask. The answer is almost always: both, and in this order.
Step one — file the cyber complaint at cybercrime.gov.in. The portal is open twenty-four hours, accepts file uploads, and routes the matter to the relevant cyber cell. You get an acknowledgement number immediately. The acknowledgement is itself a useful document if you later need to argue that you took prompt action.
Step two — register the FIR. Under BNSS Section 173 — the new procedural law that replaced CrPC Section 154 from 1 July 2024 — every information relating to the commission of a cognizable offence must be reduced to writing by the SHO. The BNSS now expressly recognises FIR registration "irrespective of the area where the offence is committed", which is the codification of the zero-FIR concept. The classical authority on what constitutes an FIR — Soma v State of Gujarat AIR 1975 SC 1453 — held that the earliest information given to the police, which sets the investigation in motion, becomes the FIR. The cyber-portal acknowledgement is not the FIR; the police record under Section 173 is.
When to skip the portal and go straight to the police. If the threat is of immediate violence, walk into the police station first. The cyber cell will catch up later. The police have power under BNSS Section 35 (old CrPC Section 41) to act without warrant in cognizable cases. Your safety is the immediate concern; documentation comes second.
Screenshots — How to Take Them So a Court Will Accept Them
Indian courts admit electronic records — including screenshots and chat logs — as evidence. They have to be properly preserved and produced with a certificate identifying the device on which they were captured. The recipe is mechanical:
- Screenshot the entire conversation, not snippets — the sender's display name, his number or username, the platform header, the date and time on each message, and the system clock at the top of your phone.
- If the conversation is long, screenshot in continuous frames so the timeline is unbroken.
- Email the screenshots to yourself immediately. The email server's timestamp creates an independent record that the screenshots existed by that date.
- Do not edit the images. No cropping, no annotation, no re-saving in a different format.
- Keep your phone with the original chat undeleted. The investigating officer may need to inspect it directly.
The standards governing electronic record admissibility — set out in the special provisions on electronic records — require a certificate identifying the device, asserting that the device was operating properly, and authenticating the contents. Your lawyer will draft this certificate when filing the complaint. The screenshots themselves are not enough; the certificate is the legal envelope around them.
Why Section 66A Is Dead Letter
Many police stations still — incorrectly — try to invoke Section 66A of the IT Act for online abuse cases. The section punished sending of grossly offensive or menacing messages by a computer or communication device. It was struck down as unconstitutional by the Supreme Court of India in Shreya Singhal v Union of India, AIR 2015 SC 1523. The Court held that Section 66A's expressions were "completely open-ended and undefined", that the section affected the public's right to know, and that it failed the test of being a reasonable restriction on free speech under Article 19(2) of the Constitution.
The advisory issued by the Central Government on 9 January 2013, even before Shreya Singhal, had already directed State Governments not to arrest under Section 66A without prior approval of an officer not below the rank of Inspector General of Police. After 2015, even that advisory is irrelevant — the section itself does not exist. If a police officer in 2026 tries to register your complaint under Section 66A, politely point out the Supreme Court's judgment and insist on Sections 503, 506, 507 of the IPC instead. Sections 67 and 67A of the IT Act remain valid where the content is obscene or sexually explicit.
For a deeper view of how this interacts with the broader criminal-law cyber-crime registration framework, the procedural toolkit is identical — what changes is which substantive offence the police pick.
If the Police Stall — Your Three Escalations
The single biggest mistake victims make is to give up after one police visit. Indian law has a clear three-step escalation when the local SHO drags his feet.
First escalation — the Superintendent of Police. BNSS Section 173(4) — corresponding to the old CrPC Section 154(3) — entitles you to send the substance of the information by post to the SP. The SP, if satisfied that a cognizable offence is disclosed, must either investigate the case himself or direct an investigation. Send the letter by registered post with acknowledgement due. Keep the receipt.
Second escalation — the Magistrate. File a private complaint before the jurisdictional Judicial Magistrate under BNSS Section 223 (old CrPC Section 200). The Magistrate has two powers — to take cognizance directly and proceed under Section 200, examining the complainant on oath, or to order a police investigation under BNSS Section 175(3) (old CrPC Section 156(3)). The Supreme Court in All India Institute of Medical Sciences Employees Union v Union of India (1996) 11 SCC 582 upheld this Magistrate route as the correct legal answer when the police "does not register the case".
Third escalation — the High Court. Where the police and the Magistrate both stall, a writ petition under Article 226 of the Constitution before the High Court can compel investigation. This is the heaviest route, used sparingly.
If you reach the second or third escalation, professional drafting matters. The cyber-litigation team at Pinaka Legal handles online-threat FIRs, Magistrate complaints under BNSS 175(3), and High Court writs as a single workflow — one folder, one timeline, one lawyer reading every paper.
What Should I Actually Do Now?
- If the threat is of immediate violence, dial 112 and reach a police station. Safety first.
- Screenshot the entire conversation — sender details, system clock, platform header, full text. Do not delete the chat.
- Email the screenshots to yourself for an independent server-stamp.
- Lodge a complaint at cybercrime.gov.in. Save the acknowledgement number.
- Walk into your nearest police station with a printed complaint, your photo ID, the screenshots, and ask for FIR registration under IPC Sections 503, 506 and (if anonymous) 507, plus IT Act Section 67 if obscene material is involved.
- Insist on a copy of the FIR with the FIR number, station, and date stamp. Never leave without it.
- If the SHO refuses, send the same complaint by registered post to the Superintendent of Police on the same day. Save the postal receipt.
- If the SP also fails, file a private complaint before the Judicial Magistrate under BNSS Section 223 within thirty days, asking for either direct cognizance or BNSS 175(3) investigation.
- Block the harasser only after preserving evidence — never before.
- Keep one folder, physical and digital, with screenshots, FIR copy, postal receipts and the cyber-portal acknowledgement.
Staying Calm While the System Moves
An online threat case is rarely about who can shout louder. It is about who can produce the cleaner timeline, the more complete screenshots, and the better-drafted complaint. The harasser, almost by definition, is acting on impulse and leaves a digital trail. You, by acting calmly and following the steps above, build a contrasting record — measured, dated, evidence-backed — that the police, the cyber cell and ultimately the court rely on.
Two things to remember in the days after lodging the complaint. One, do not engage with the harasser, even to "warn" them, even to "tell them off". Anything you write back is admissible against the case you are building. Two, if anyone — your harasser, a friend trying to help, a relative — pressures you to withdraw the FIR, get that pressure on text or audio. Witness pressure on the complainant is itself a separate offence under the BNSS provisions on contempt of lawful authority of public servants.
The legal framework for online threats in 2026 is mature, layered and largely on your side. What it cannot do is move without you. The first move — the screenshot, the cyber-portal complaint, the FIR — has to come from the person who saw the screen at 11:47 PM. Once that move is made, the system, slowly but surely, takes the next step.
Frequently Asked Questions
Are abusive messages on WhatsApp or Instagram a crime in India?
Yes, but the answer depends on what the message contains. Pure abuse without a threat may attract Section 504 of the IPC (intentional insult to provoke breach of peace). The moment the message contains a threat — to your body, reputation, family or property — Section 503 of the IPC for criminal intimidation is squarely attracted. Section 506 prescribes punishment up to two years, going up to seven years if the threat is of death or grievous hurt. Note also that Section 66A of the IT Act, which used to cover offensive online messages, has been struck down by the Supreme Court in Shreya Singhal v Union of India in 2015 — police cannot use it any more.
Cyber complaint or FIR — which one should I file first?
You can do both, and ideally you should. The online complaint at cybercrime.gov.in is fastest — open twenty-four hours, accepts file uploads, and routes the matter to the relevant cyber cell. The FIR at a police station under BNSS Section 173 (which replaced CrPC Section 154) is the formal step that starts a criminal investigation. Many cyber cells convert the online complaint into an FIR after preliminary enquiry. If the threat is of immediate violence, walk into the police station first and lodge the FIR — speed matters more than the portal.
What is the difference between online abuse and a criminal threat?
The legal line is intent to cause alarm. Section 503 of the IPC requires the threat to be made with the intent that the recipient should fear injury — to her person, reputation or property — and should either do something she is not legally bound to do, or stop doing something she is legally entitled to do. Mere abuse, without that intent to alarm, does not always cross into Section 503 territory. The Supreme Court in Manik Taneja v State of Karnataka (2015) held that mere expression of words without intention to alarm is not enough.
Can I file a cyber complaint if the threat came from an anonymous account?
Yes, and the law actually treats it more seriously. Section 507 of the IPC adds a separate punishment of up to two years on top of Section 506 whenever criminal intimidation is committed by an anonymous communication, or where the sender has taken precaution to conceal his name or address. The classical authority Doraiswamy Ayyar (1924) 48 Mad 774 held that the offence is complete the moment the anonymous communication conveying the threat is received — even from a postcard era. The same principle squarely applies to a fake-handle DM in 2026.
What evidence do I need to file an abusive-messages FIR?
Take screenshots of the entire conversation — not snippets — with the sender's username or phone number, the date and time visible in the system clock, and the platform clearly identifiable. Email the screenshots to yourself so a server-stamped copy exists. Keep your phone unwiped — investigators may need to inspect it. If the messages were on WhatsApp, do not delete the chat. Carry copies of the screenshots, your government photo ID, and a written narrative complaint. The cyber cell will accept softcopies on a USB or by email.
Section 66A — can I still be charged for online abuse under it?
No. Section 66A of the IT Act, which used to punish sending of grossly offensive or menacing messages, was struck down as unconstitutional by the Supreme Court in Shreya Singhal v Union of India, AIR 2015 SC 1523. The Court held that the section was vague, over-broad, and violated the right to free speech under Article 19(1)(a). Any FIR, summons, or chargesheet purporting to use Section 66A today is liable to be quashed. If the police try to register one, politely point out the Shreya Singhal judgment and insist on Sections 503/506/507 of the IPC instead.
What if the police refuse to register the FIR for online abuse?
You have a clear next step. BNSS Section 173(4) — the new procedural code that replaced CrPC Section 154(3) — allows you to send the substance of your information to the Superintendent of Police by post. The SP, if satisfied that a cognizable offence is disclosed, must either investigate himself or direct an investigation. If the SP also fails, file a private complaint before the jurisdictional Magistrate under BNSS Section 223 (old CrPC Section 200), and request investigation under BNSS Section 175(3) (old CrPC Section 156(3)). Indian courts have repeatedly upheld this fall-back route. Detailed steps on FIR refusal escalation here.
Are death threats and rape threats treated more seriously?
Yes. Section 506 Part II of the IPC covers threats of death or grievous hurt and prescribes imprisonment up to seven years, fine, or both. Many states — Uttar Pradesh, by notification — have made even Section 506 itself cognizable and non-bailable. Where the threat is of sexual violence against a woman, additional sections — IPC 354A (sexual harassment), 354D (stalking), and IT Act 67 — get attracted. The SHO cannot bury such a complaint as a non-cognizable matter. If he tries, escalate to the SP and the Magistrate without delay.
Can I get the WhatsApp number of my harasser blocked permanently?
WhatsApp itself only suspends accounts based on its terms of service violations or on a court or law-enforcement order. As an individual, you can report the number through WhatsApp's in-app reporting tool, which usually triggers a temporary action. Permanent action requires either an FIR with a request to the local cyber cell to send a preservation request, or a court direction. Telecom-side disconnection — blocking the SIM card — requires an order from the Department of Telecommunications, usually triggered by a court or police request after FIR registration.
My ex is sending threats from new accounts every time I block him. What do I do?
Document each new account and report it as a continuation of the same incident. The repeated nature is itself relevant under Section 354D of the IPC for stalking — both physical and digital — which is a cognizable, non-bailable offence on second occurrence. Where the relationship was domestic, the Protection of Women from Domestic Violence Act 2005 also gives you the right to apply for a protection order. Keep filing fresh complaints — never let the cyber cell think the matter is over because the harasser changed his handle.
Do I have to attend the police station and the court multiple times for an abusive-messages case?
You will likely attend a few times. The first visit is to lodge the FIR and submit screenshots. The second is when the investigating officer records your statement under BNSS Section 180 (old CrPC Section 161). At trial, you appear as the complainant to identify the screenshots and give evidence. Many of these matters are tried as summary trials under BNSS Chapter 21 — short, focused hearings. If the threat sender admits the conduct and offers a written apology, courts often allow the matter to be compounded, ending the case quickly.
How long does an online abusive messages and online threats cyber complaint or FIR usually take to resolve?
Resolution depends on whether the accused is identified. Where the sender's number or account is traceable, the cyber cell typically completes investigation within sixty to ninety days. Where the account is anonymous and routed through VPN, identification can take six months or longer. The chargesheet under BNSS Section 193 (old Section 173 CrPC) follows. Trial in summary courts is fast — three to twelve months. The faster the complainant produces clear screenshots and avoids deleting evidence, the faster the case moves.
For more articles on Indian law, visit the Pinaka Legal Blog. For queries, call +91 8595704798 or email info@pinakalegal.com.