📚Civic Action

What to do if a friend's intimate video is leaked online

Your friend’s private video is online. Don’t panic. Here is how to use the BNS and IT Act to take it down and hold the perpetrator accountable immediately.

HowToHelp Editorial
11 min read
#NCII India#BNS Section 77#cyber crime reporting#revenge porn law India#IT Act 67A#remove leaked video India#voyeurism BNS#cybercrime.gov.in guide

Your friend’s worst nightmare just happened

It starts with a frantic call or a DM. Your friend is shaking because an intimate video or photo—something meant to be private—is circulating on a Telegram group, a WhatsApp chat, or a shady website. The panic is real, and the urge to delete everything and hide is overwhelming. But in the digital age, silence is exactly what the harasser wants.

Whether it was a case of 'revenge porn,' a hacked device, or a recording made without consent, this is a crime. You don't need to be a lawyer to help your friend regain control. In India, the law has evolved to treat Non-Consensual Intimate Imagery (NCII) as a serious offense with mandatory police action. This guide walks you through the immediate legal and digital steps to stop the spread and start the cleanup.

What the law actually says

In India, the legal framework for leaked intimate media is a combination of the Bharatiya Nyaya Sanhita (BNS), 2023 (which replaced the IPC) and the Information Technology (IT) Act, 2000.

1. The Bharatiya Nyaya Sanhita (BNS)

Under the BNS, which came into effect on July 1, 2024, several sections apply to NCII:

  • Section 77 (Voyeurism): This replaces the old Section 354C of the IPC. It states that any man who watches or captures the image of a woman engaging in a private act where she would usually not be watched is committing a crime. Crucially, even if the woman consented to the capture of the image but did not consent to its dissemination to third parties, the act of sharing it is a crime. Punishment ranges from 1 to 3 years of imprisonment for the first conviction.
  • Section 72: This deals with the privacy of a person. If someone records or transmits the image of a person's private parts without consent, they are liable.
  • Section 79: If the leak is intended to insult the modesty of a woman through words, gestures, or objects (including digital files), this section applies.

2. The Information Technology (IT) Act, 2000

While the BNS handles the criminal intent, the IT Act handles the digital medium:

  • Section 66E (Violation of Privacy): Intentionally capturing, publishing, or transmitting the image of a private area of any person without their consent is punishable with up to 3 years in jail or a fine of up to ₹2 lakh.
  • Section 67A: This is a heavy-hitter. It deals with publishing or transmitting material containing sexually explicit acts in electronic form. Conviction can lead to 5 years in prison and a ₹10 lakh fine for the first offense.

3. The Right to be Forgotten

While not yet a standalone statute, the Supreme Court of India and various High Courts (notably the Delhi High Court in Karthick Theodre v. Madras High Court, 2021) have recognised that the 'Right to Privacy' under Article 21 of the Constitution includes the right to have intimate or private content removed from the internet once its purpose is served or if it was uploaded without consent.

4. Mandatory FIR

According to the landmark Supreme Court judgment in Lalita Kumari v. Govt. of U.P. (2014), the police are mandated to register an FIR if the complaint discloses a cognizable offense (like voyeurism or sexually explicit content). They cannot turn you away for a preliminary inquiry first.

Step-by-step playbook

Step 1: Preserve the evidence (Immediately)

Before the harasser deletes the message or the platform takes it down, you need a forensic trail. Do not just take a screenshot; you need metadata.

  • What to do: Take screenshots that show the uploader’s profile, the timestamp, the URL (link) of the post, and the comments. If it is on WhatsApp, export the chat including media.
  • What to bring: Save these in a secure Google Drive or a locked folder. Do not share them with anyone except the police or your lawyer.
  • Timeline: 10 minutes. Do this before reporting the post to the platform.

Step 2: Use the 'StopNCII' tool

Before the video spreads further, use technology to 'hash' it.

  • What to do: Go to StopNCII.org. This tool (partnered with Meta, TikTok, etc.) allows you to select the intimate images/videos on your device. It creates a digital fingerprint (hash) of the file. The actual file is never uploaded; only the hash is shared with participating social media platforms.
  • Expected result: If anyone tries to upload that specific file to Instagram, Facebook, or participating platforms, it will be automatically blocked or removed.

Step 3: Report to the Cyber Crime Portal

India has a dedicated portal for reporting crimes against women and children.

  • What to do: Visit the Cyber Crime reporting portal (cybercrime.gov.in). Select the 'Report Crime Related to Women/Children' option.
  • What to upload: Upload the screenshots and URLs you collected in Step 1. You can choose to report anonymously, but for a full investigation and FIR, providing details is better.
  • Expected timeline: You will receive an acknowledgement number immediately. A police officer should contact you within 24–72 hours.

Step 4: File a Zero FIR or Local FIR

Under Section 173 of the BNSS (formerly Section 154 CrPC), you have the right to register an FIR.

  • What to do: Go to the nearest police station. If the crime happened in a different city, file a Zero FIR—the police are legally bound to record it and then transfer it to the relevant station.
  • What to say: "I want to file an FIR under Section 77 of the BNS and Section 67A of the IT Act regarding non-consensual intimate imagery."
  • If it fails: If the officer refuses, cite the Lalita Kumari judgment. If they still refuse, send your complaint via registered post to the Superintendent of Police (SP) under Section 173(4) of the BNSS.
  • Resource: See our guide on How to file an FIR (and what to do if police refuse).

Step 5: Takedown notices to Intermediaries

Under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, social media companies must remove non-consensual nude or partially nude images within 24 hours of receiving a complaint.

  • What to do: Use the 'Report' button on the specific app (Instagram, Twitter, etc.). Select 'Non-consensual sexual content' or 'Privacy violation.'
  • Workaround: If the platform doesn't respond, you can approach the Grievance Officer of the company. Their contact details are legally required to be on their 'About' or 'Contact' page for India.

Step 6: Mental health support

This is a traumatic event. Your friend might be experiencing severe anxiety or suicidal ideation.

To see more ways to protect your digital rights, Browse all civic-action guides.

Where it usually breaks

Even with clear laws, the system has friction. Here is where you might get stuck and how to push through:

1. The "Charitra Praman Patra" (Victim Blaming) When you go to a police station, an officer might ask, "Why did she record this in the first place?" or "Wasn't she his girlfriend?" This is irrelevant to the law. Under Section 77 of the BNS, consent to record is not consent to share.

  • The Workaround: Remind them of the Lalita Kumari vs. Govt. of U.P. (2014) judgment. If the complaint shows a cognizable offence (which NCII is), they must register an FIR. If they refuse, tell them you will send the complaint to the Superintendent of Police (SP) via registered post under Section 173(4) of the BNSS.

2. The "Jurisdiction" Excuse A local police station might tell you to go to the "Cyber Cell" in another part of the city or say the crime happened in a different area.

  • The Workaround: Demand a Zero FIR. Under Indian law, any police station can register an FIR regardless of where the crime happened. They must then transfer it to the relevant station. Don't let them bounce you around.

3. The "Platform is Ignoring Me" Loop Large platforms like Instagram or X (Twitter) have automated reporting, but sometimes the "Report" button does nothing.

  • The Workaround: Every major social media intermediary in India must have a Grievance Officer under the IT Rules, 2021. If the automated report fails, email the Grievance Officer directly. By law, they must acknowledge your complaint within 24 hours and resolve it (usually by removing the content) within 72 hours for NCII cases.

4. The Evidence Dilemma If you delete the video from your own phone in panic, you lose the metadata needed to prove the source.

  • The Workaround: Don't delete it yet. Move it to a password-protected "Hidden Folder" or a "Locked Folder" (available on Google Photos/iOS). You need the link (URL) of the post and the username of the uploader. Screenshots are good; screen recordings of the profile and the post are better.

Templates / script

A. Script for the Police Station

"Officer, I am here to report a crime under Section 77 and Section 72 of the Bharatiya Nyaya Sanhita (BNS) and Section 66E/67A of the IT Act. My friend’s private media was shared without her consent. According to the Lalita Kumari (2014) judgment, this is a cognizable offence and an FIR must be registered immediately. We have the digital evidence ready for the IO (Investigating Officer)."

B. Email to a Platform’s Grievance Officer

Subject: Urgent: Removal of Non-Consensual Intimate Imagery (NCII) - [Platform Name] - [Your Ticket ID if any]

Body: To the Grievance Officer, I am writing to report a violation of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Non-consensual intimate imagery of [Me/My Friend] has been uploaded to your platform at the following URL: [Insert Link]. Under Rule 3(2)(b) of the IT Rules 2021, intermediaries are required to remove or disable access to such content within 24 hours of receipt of a complaint. Attached are screenshots of the content and the uploader’s profile. Please acknowledge receipt and confirm removal immediately. Failure to act may result in the loss of your 'safe harbour' protection under Section 79 of the IT Act. Regards, [Your Name]

C. FIR/Written Complaint Draft (Cyber Cell)

To, The SHO/In-charge, [Name of Police Station/Cyber Cell, City]

Subject: Complaint regarding voyeurism and transmission of sexually explicit content.

Respected Sir/Ma'am, I am filing this complaint against [Name of Accused, if known, or 'Unknown'] for the non-consensual sharing of my private intimate [photos/videos].

  1. On [Date], I discovered that [Description of event - e.g., the video was posted on a Telegram group/WhatsApp].
  2. The content was [recorded without my knowledge / recorded with consent but shared without consent].
  3. This act violates Section 77 (Voyeurism) and Section 72 of the BNS, 2023, and Sections 66E and 67A of the IT Act, 2000.
  4. I request you to register an FIR, seize the devices of the accused, and issue a notice to the platform to take down the content. [Attach Evidence List] Signed, [Your Name]

FAQs

1. Can I report this anonymously? Yes. On the National Cyber Crime Reporting Portal (cybercrime.gov.in), there is an option to "Report Anonymously" specifically for crimes against women and children. However, if you want a full investigation and an FIR that leads to an arrest, providing your details is much more effective.

2. Will the police take my friend's phone away? They might ask for it as evidence to extract the metadata. If they do, ensure you get a Seizure Memo—a document listing exactly what was taken, the date, and the time. You can also request the Cyber Cell to take a "forensic mirror image" of the data and return the physical device, though this depends on the lab's availability.

3. What if the harasser is in another country? It is harder, but not impossible. The Indian government can issue a Mutual Legal Assistance Treaty (MLAT) request. More practically, Indian police can send a legal notice to the platform (like Meta or Google) to block the content in India and provide the IP address/login logs of the uploader.

4. How much does it cost to file a complaint? Zero. Filing a police complaint or an FIR is free. Reporting on the Cyber Crime portal is free. If anyone asks for a "processing fee," they are asking for a bribe. Report them to the Anti-Corruption Bureau.

5. Will my friend’s name be in the news? No. Under Section 72 of the BNS (and previously Section 228A of the IPC), it is a criminal offence to disclose the identity of a victim of certain sexual offences. The police and media are legally barred from naming her or providing details that could identify her.

6. What if the harasser is a minor? If the person who leaked the video is under 18, they will be dealt with under the Juvenile Justice (Care and Protection of Children) Act. They won't go to a regular jail but to an observation home, and the focus will be on reformation. However, the content will still be taken down.

7. Can I sue for money? Yes. Apart from the criminal case, you can file a civil suit for "Damages" for loss of reputation and mental agony. You can also approach the Adjudicating Officer (usually the IT Secretary of your state) under Section 46 of the IT Act to claim compensation of up to ₹5 crore from the harasser.

Sources

Frequently Asked Questions

1. Can I report this anonymously?

Yes. On the National Cyber Crime Reporting Portal (cybercrime.gov.in), there is an option to "Report Anonymously" specifically for crimes against women and children. However, if you want a full investigation and an FIR that leads to an arrest, providing your details is much more effective.

2. Will the police take my friend's phone away?

They might ask for it as evidence to extract the metadata. If they do, ensure you get a **Seizure Memo**—a document listing exactly what was taken, the date, and the time. You can also request the Cyber Cell to take a "forensic mirror image" of the data and return the physical device, though this depends on the lab's availability.

3. What if the harasser is in another country?

It is harder, but not impossible. The Indian government can issue a **Mutual Legal Assistance Treaty (MLAT)** request. More practically, Indian police can send a legal notice to the platform (like Meta or Google) to block the content in India and provide the IP address/login logs of the uploader.

4. How much does it cost to file a complaint?

Zero. Filing a police complaint or an FIR is free. Reporting on the Cyber Crime portal is free. If anyone asks for a "processing fee," they are asking for a bribe. Report them to the Anti-Corruption Bureau.

5. Will my friend’s name be in the news?

No. Under **Section 72 of the BNS** (and previously Section 228A of the IPC), it is a criminal offence to disclose the identity of a victim of certain sexual offences. The police and media are legally barred from naming her or providing details that could identify her.

6. What if the harasser is a minor?

If the person who leaked the video is under 18, they will be dealt with under the **Juvenile Justice (Care and Protection of Children) Act**. They won't go to a regular jail but to an observation home, and the focus will be on reformation. However, the content will still be taken down.

📮

One civic-action playbook a week

RTI templates, FIR scripts, real escalation ladders — the same kind of thing you just read. Sundays only. No spam.

We don't share your email. Unsubscribe any time.