States Intensify Social Media Monitoring Amidst Rising Cybercrime
Indian states are significantly increasing social media surveillance to combat rising cybercrime.
Photo by Vladimir Fedotov
Key Facts
Social media crime cases 2024: 24,840
Social media crime cases 2025: 30,205
Arrests for social media crimes 2024: 1,200
Arrests for social media crimes 2025: 1,924
Key agencies: DAPCU, I4C
UPSC Exam Angles
GS Paper 2: Fundamental Rights (Article 19, 21), Governance, Rule of Law
GS Paper 3: Internal Security, Cyber Security, Challenges to Internal Security through Communication Networks
Legal Frameworks: IT Act, Data Protection Laws
Institutional Mechanisms: I4C, DAPCU
Visual Insights
Indian States Intensifying Social Media Monitoring (2026)
This map highlights the Indian states that have significantly ramped up their social media monitoring efforts in response to rising cybercrime and misuse of digital platforms. These states are at the forefront of digital law enforcement.
Loading interactive map...
Social Media Cybercrime Trends in India (2024-2025)
Key statistics illustrating the significant rise in cybercrime cases and arrests related to social media platforms in India from 2024 to 2025.
- Cases Registered (2025)
- 30,205+21.6%
- Cases Registered (2024)
- 24,840
- Arrests Made (2025)
- 1,924+60.3%
- Arrests Made (2024)
- 1,200
Represents a substantial increase in reported cybercrime cases via social media, indicating growing misuse of platforms and enhanced reporting mechanisms.
Baseline for comparison, showing the initial scale of social media-related cybercrime.
A significant jump in arrests reflects intensified law enforcement efforts and improved investigative capabilities, including the role of I4C and DAPCU.
Initial arrest figures, showing the starting point of law enforcement's response.
More Information
Background
The legal framework for cybercrime in India primarily originates from the Information Technology Act, 2000 (IT Act). Before this, traditional laws struggled to address offenses committed in the digital realm. The IT Act was enacted to provide legal recognition for electronic transactions and to facilitate e-commerce, but it also laid down provisions for cyber offenses.
Over time, amendments, notably in 2008, broadened its scope to include new forms of cybercrime and enhanced penalties. The constitutional underpinnings for digital surveillance and its intersection with fundamental rights like freedom of speech (Article 19) and right to privacy (Article 21) have been subjects of intense judicial scrutiny, particularly after the landmark Puttaswamy judgment (2017) which affirmed privacy as a fundamental right. This historical evolution reflects India's continuous struggle to adapt its legal and governance structures to the rapidly changing digital landscape, balancing national security with individual liberties.
Latest Developments
In recent years, the landscape of cybercrime has become increasingly complex, with the emergence of sophisticated threats like deepfakes, ransomware attacks targeting critical infrastructure, and state-sponsored cyber espionage. The government has been actively working on a comprehensive data protection framework, with the Digital Personal Data Protection Act, 2023, being a significant step, aiming to regulate the processing of personal data and establish a Data Protection Board. There's also a growing emphasis on international cooperation to combat cross-border cybercrime, with India participating in global forums and bilateral agreements.
Future outlook includes strengthening indigenous cyber capabilities, promoting digital literacy to prevent fraud, and continuously updating legal provisions to stay ahead of evolving cyber threats. Debates continue regarding the extent of government access to encrypted data and the need for robust oversight mechanisms for surveillance activities.
Practice Questions (MCQs)
1. Consider the following statements regarding the legal framework for cybercrime and surveillance in India: 1. The Information Technology Act, 2000, is the primary legislation dealing with cybercrime and electronic commerce in India. 2. The 'right to privacy' has been explicitly recognized as a fundamental right under Article 21 of the Constitution by a Supreme Court judgment. 3. The Indian Telegraph Act, 1885, provides the legal basis for interception of communications in India. Which of the statements given above is/are correct?
- A.1 and 2 only
- B.2 and 3 only
- C.1 and 3 only
- D.1, 2 and 3
Show Answer
Answer: D
Statement 1 is correct. The IT Act, 2000, is indeed the primary legislation for cybercrime and electronic commerce. Statement 2 is correct. The Supreme Court in Justice K.S. Puttaswamy (Retd.) vs Union of India (2017) explicitly recognized the right to privacy as a fundamental right under Article 21. Statement 3 is correct. The Indian Telegraph Act, 1885, along with the Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Rules, 2009, provides the legal basis for lawful interception of communications.
2. With reference to cyber security architecture in India, consider the following statements: 1. The Indian Cybercrime Coordination Centre (I4C) is a division under the Ministry of Electronics and Information Technology (MeitY). 2. The Digital Awareness and Cybercrime Prevention Unit (DAPCU) focuses on creating awareness and preventing cybercrime at the state level. 3. The National Critical Information Infrastructure Protection Centre (NCIIPC) is responsible for protecting critical information infrastructure from cyber threats. Which of the statements given above is/are correct?
- A.1 and 2 only
- B.2 and 3 only
- C.1 and 3 only
- D.2 and 3 only
Show Answer
Answer: B
Statement 1 is incorrect. The Indian Cybercrime Coordination Centre (I4C) is a division under the Ministry of Home Affairs (MHA), not MeitY. It serves as a nodal point for all cybercrime-related activities. Statement 2 is correct. DAPCU, as mentioned in the news, is involved in awareness and prevention at the state level. Statement 3 is correct. NCIIPC, established under the IT Act, 2000, is indeed responsible for protecting critical information infrastructure.
3. Which of the following is NOT a recognized ground for reasonable restrictions on the freedom of speech and expression (Article 19(1)(a)) under the Indian Constitution? A) Public order B) Decency or morality C) Contempt of court D) Criticism of government policies
- A.Public order
- B.Decency or morality
- C.Contempt of court
- D.Criticism of government policies
Show Answer
Answer: D
Article 19(2) of the Indian Constitution specifies the grounds on which reasonable restrictions can be imposed on the freedom of speech and expression. These include: sovereignty and integrity of India, security of the State, friendly relations with foreign States, public order, decency or morality, contempt of court, defamation, or incitement to an offense. Criticism of government policies, as long as it does not fall under any of these restrictive categories, is a legitimate exercise of freedom of speech and expression and is not a ground for restriction.
4. Which of the following statements correctly describes the 'Digital Personal Data Protection Act, 2023' (DPDP Act)? A) It primarily focuses on regulating government surveillance activities and does not cover private entities. B) It establishes a Data Protection Board of India to enforce its provisions and adjudicate disputes. C) It mandates that all personal data must be stored exclusively within India's geographical boundaries. D) It allows data fiduciaries to process personal data without consent for any legitimate purpose.
- A.It primarily focuses on regulating government surveillance activities and does not cover private entities.
- B.It establishes a Data Protection Board of India to enforce its provisions and adjudicate disputes.
- C.It mandates that all personal data must be stored exclusively within India's geographical boundaries.
- D.It allows data fiduciaries to process personal data without consent for any legitimate purpose.
Show Answer
Answer: B
Statement B is correct. The DPDP Act, 2023, establishes the Data Protection Board of India to ensure compliance with its provisions and to impose penalties. Statement A is incorrect; the Act covers both private entities and government bodies (with certain exemptions for national security). Statement C is incorrect; while it promotes data localization, it does not mandate exclusive storage within India for all data. Statement D is incorrect; the Act is based on the principle of consent, though it provides for 'legitimate uses' where consent may not be explicitly required, these are specific and not 'any legitimate purpose'.