The Growing Threat of Cybercrime in the Digital Age

Every minute spent online today carries a quiet risk. A stray click on a fake delivery link, an unfamiliar login alert, or a seemingly harmless message from a “relative” stuck abroad can unravel into financial loss, emotional trauma, and months of recovery. Cybercrime is no longer a distant tech problem-it is a daily threat that touches families, offices, hospitals, and government systems alike. As digital infrastructure deepens across the country, understanding what cybercrime is, how it spreads, and why it is so hard to stop has become essential knowledge for every connected citizen.

What exactly is cybercrime? 🔗

Cybercrime, often called cyber-dependent crime, refers to any unlawful activity where a computer, digital device, or network is used as a tool, a target, or both. In other words, the crime either requires computing technology to be committed (such as hacking) or targets computing systems themselves (such as spreading malware). Unlike traditional crimes that rely on physical presence, cybercrimes can be committed from thousands of kilometres away, often by offenders the victim will never meet.

The scale of the problem is staggering. According to a government press release, cybersecurity incidents rose from 10.29 lakh in 2022 to 22.68 lakh in 2024, reflecting how rapidly the threat landscape is evolving. The National Crime Records Bureau has also documented a sharp rise in registered cybercrime cases, tripling between 2018 and 2023 to touch 86,420 cases.

Why cybercrime is different from traditional crime 🔗

Three features make cybercrime uniquely challenging for law enforcement and uniquely damaging for victims.

Anonymity 🔗

The internet allows offenders to hide behind fake profiles, spoofed email addresses, proxy servers, and encrypted messaging. A criminal operating a phishing scam in one state can easily pretend to be a bank official in another. This cloak of anonymity emboldens offenders who might never commit similar offences in the physical world.

Global reach 🔗

A single malware campaign can infect systems across continents within hours. Call-centre scams run from overseas “fraud factories” regularly target citizens here, complicating investigation and prosecution because multiple jurisdictions must cooperate to trace the money and the perpetrators.

Scalability 🔗

A pickpocket can steal from one person at a time. A phishing email, on the other hand, can be sent to millions of inboxes simultaneously at negligible cost. Even if only a tiny fraction of recipients fall for it, the criminal’s returns can be enormous.

The four main categories of cybercrime 🔗

Researchers and legal experts typically group cybercrime into four broad categories based on the target of the offence. This classification helps lawmakers, investigators, and citizens understand the diverse nature of the threat.

Crimes against individuals 🔗

These offences target private citizens directly. Email spoofing is a common example-a criminal sends an email that appears to come from a trusted source (a bank, a relative, or a government department) to trick the victim into revealing sensitive information or transferring money. Other common individual-level offences include cyberstalking, online harassment, identity theft, and phishing. According to an analysis of cybercrime classifications, ordinary individuals are the most vulnerable targets because they often lack awareness and cybersecurity know-how.

Crimes against property 🔗

Here, the target is digital property rather than a person. Software piracy-the unauthorised copying and distribution of copyrighted programs-falls into this category, as does the theft of digital data, unauthorised transmission of copyrighted materials, and the destruction of databases. Ransomware attacks, where criminals encrypt a victim’s files and demand payment for the decryption key, are an increasingly costly form of property-based cybercrime.

Crimes against organisations 🔗

Companies, hospitals, schools, and other institutions face a constant barrage of cyber threats. Unauthorised data access, denial-of-service attacks, insider theft, and corporate espionage can cripple operations and erode customer trust. The cryptojacking attack on over 2,000 computers at Aditya Birla Group, where criminals secretly used the company’s computing power to mine cryptocurrency, shows how sophisticated organisational attacks can become.

Crimes against society 🔗

Some cybercrimes harm the collective fabric of society. Forgery of digital documents, online circulation of child sexual abuse material, cyber terrorism, and the spread of disinformation all fall within this category. The Indian Computer Emergency Response Team (CERT-In), housed within the Ministry of Electronics and Information Technology, serves as the national nodal agency for responding to such threats.

Common forms of cybercrime you should recognise 🔗

Beyond the broad categories, certain specific attacks have become widespread enough that every internet user should be able to identify them.

Hacking 🔗

Hacking involves gaining unauthorised access to a computer system or network. Motives range from financial gain to activism (“hacktivism”) to pure mischief. Under Section 66 of the Information Technology Act, 2000, hacking and data theft are punishable offences, with additional penalties for dishonestly receiving stolen computer resources.

Malware and ransomware 🔗

Malware-short for malicious software-includes viruses, worms, Trojans, and spyware. A Trojan, for instance, is disguised as a harmless file or application; once installed, it gives the attacker access to passwords, financial data, and personal files. Ransomware encrypts the victim’s files and demands payment, usually in cryptocurrency, for their release.

Phishing and smishing 🔗

Phishing involves tricking users into sharing login credentials or card details, usually through fake emails or cloned websites. Smishing is the same tactic delivered via SMS. A typical example is an SMS claiming to be from a bank asking the recipient to “verify their account” by entering their credentials on a bogus webpage.

Cyberstalking and cyberbullying 🔗

Cyberstalking uses electronic communication to repeatedly follow, harass, or intimidate a person. Cyberbullying-threatening, humiliating, or embarrassing someone online-has become a particularly worrying phenomenon among young people. Reports suggest that cyberbullying is disturbingly common among school-aged children in the country, with lasting psychological consequences.

Online financial fraud 🔗

This is currently the most reported form of cybercrime. It includes UPI scams, credit card fraud, fake investment schemes, and the newer “digital arrest” scams. The Reserve Bank of India recorded 29,082 cases of online payment fraud of ₹1 lakh or above during 2023-24, involving a staggering ₹1,457 crore. Digital arrest scams alone rose from 39,925 incidents in 2022 to 123,672 in 2024, with reported losses climbing from about ₹91 crore to ₹1,935 crore.

The psychological toll on victims 🔗

While financial loss is the most visible consequence of cybercrime, the emotional aftermath is often far more damaging and far longer lasting. Psychologists studying cybercrime victims have found that the experience can range from mild distress to severe clinical symptoms, including depression, anxiety, panic attacks, post-traumatic stress, and in extreme cases, suicidal ideation. Victims commonly describe feeling violated, powerless, and afraid of another attack.

A study referenced by the Open University highlighted that victims of online romance scams experience a “double hit”-the grief of losing what they believed was a genuine relationship combined with the financial loss. Emotional distress was sometimes high even when no money was lost. Victims of identity theft, meanwhile, report considerable anger, stress, depression, and physical symptoms tied to the invasion of their privacy.

The impact is not distributed equally. Research published in the European Journal of Criminology found that older victims reported a greater impact on their sense of security, while emotional well-being was more severely affected among people who lived alone, women, religious victims, and those from lower socioeconomic backgrounds. Victims who were hacked directly-or whose victimisation unfolded over a long period-tended to suffer more intense psychological consequences.

Why cybercrime is so hard to detect and prosecute 🔗

Several structural challenges hinder effective enforcement, and they explain why conviction rates remain low despite rising case numbers.

Jurisdictional complexity 🔗

A cybercrime victim in one city, a perpetrator in another country, and a server in a third-this is a typical scenario. Coordinating across borders requires treaties, mutual legal assistance, and technical cooperation that can take years to conclude.

Evolving technology 🔗

As the rapid pace of digitalisation continues, cybercriminals find new ways to exploit vulnerabilities in software, hardware, and human behaviour faster than laws can be updated. Artificial intelligence, deepfakes, and cryptocurrency have all opened fresh avenues for abuse.

Underreporting and victim blaming 🔗

Many victims never report cybercrimes because of shame, embarrassment, or a belief that nothing can be done. According to a BOOM analysis, only 2.43 per cent of cybercrimes reported to the National Cybercrime Reporting Portal were converted into FIRs in 2024. This gap between reported incidents and formal investigations reflects both capacity constraints and the complexity of gathering digital evidence.

Data delays 🔗

Experts point out that official NCRB crime data is typically released a year or two late, which makes it difficult to track fast-evolving criminal trends and deploy timely countermeasures.

Steps towards protection and awareness 🔗

Prevention begins with awareness. The government has set up the National Cyber Crime Reporting Portal (cybercrime.gov.in) and a dedicated helpline number 1930, where citizens can report incidents and seek immediate assistance. The Indian Cybercrime Coordination Centre (I4C) under the Ministry of Home Affairs coordinates law enforcement response, while the Information Technology Act, 2000 provides the primary legal framework.

At the individual level, simple habits go a long way: using strong and unique passwords, enabling two-factor authentication, avoiding suspicious links, verifying caller identities before sharing personal data, and keeping operating systems and antivirus software updated. For victims, early reporting is crucial-not only to increase the chance of recovering money but also to access psychological support. Counselling, peer support groups, and professional help can make a significant difference in recovery.

What do you think? Have we, as a society, adequately understood that cybercrime is not just a technical problem but a human one with deep psychological consequences? And what role should schools, workplaces, and mental-health professionals play in building collective digital resilience?

References

1. https://www.pib.gov.in/PressNoteDetails.aspx?NoteId=155384&ModuleId=3&reg=3&lang=2
2. https://www.indiaspend.com/data-viz/dataviz-how-indias-cyber-crime-incidence-is-rising-972933
3. https://blog.ipleaders.in/all-about-classifications-of-cyber-crimes/
4. https://ssrana.in/ufaqs/what-is-cyber-crime-in-india-and-what-are-its-types/
5. https://www.clearias.com/cybercrime/
6. https://finlawassociates.com/blog/types-of-cyber-crimes-in-india-a-deep-dive-into-common-offenses-and-legal-implications
7. https://www.thesafetymag.com/ca/news/opinion/psychological-trauma-and-cybercrime/252447
8. https://www.open.edu/openlearn/health-sports-psychology/psychology/the-psychology-cybercrime/content-section-3.1
9. https://journals.sagepub.com/doi/10.1177/14773708241312506
10. https://www.nextias.com/blog/cybercrime-in-india/
11. https://www.boomlive.in/news/ncrb-report-notes-sharp-rise-in-cyber-crimes-in-india-29662