Found a recruitment bot or suspicious activity? Here is how to alert the right authorities safely using the Cyber Crime portal and NIA channels without putting yourself at risk.
You are scrolling through a Telegram group or a niche subreddit when you see someone praising a banned outfit or sharing a manual on "direct action." Or maybe you are at a crowded market and spot an unattended bag near a transformer. Most of us just scroll past or walk away, thinking someone else will handle it. But when news breaks of top terror commanders like Maulana Salman Azhar dying across the border, digital recruitment and radicalisation chatter often spike. Being "civically curious" includes knowing how to flag these threats to the right people without becoming a target yourself.
In India, national security and counter-terrorism are governed primarily by the Unlawful Activities (Prevention) Act (UAPA), 1967. Under the First Schedule of the UAPA, the Central Government maintains a list of banned terrorist organisations. Promoting these groups, even digitally, can be a serious offence under Section 13 (punishment for unlawful activities) and Section 39 (offence relating to support given to a terrorist organisation).
As a citizen, you have a legal and moral role. Section 33 of the Bharatiya Nyaya Sanhita (BNS), 2023 (which replaced Section 39 of the CrPC) states that every person aware of the commission of, or the intention of any other person to commit, certain serious offences—including those against the state—is bound to give information to the nearest Magistrate or police officer.
For digital threats, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, mandate that social media platforms must have a mechanism to take down content that threatens the unity, integrity, or security of India. When you report content, you are essentially triggering this legal obligation for platforms to act.
If you encounter physical threats, Section 173 of the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2024 (the successor to Section 154 CrPC) allows you to file an FIR (and what to do if police refuse). However, for matters involving terrorism, the National Investigation Agency (NIA) often takes over under the NIA Act, 2008, especially for offences listed in its Schedule.
Crucially, the government has created the National Cyber Crime Reporting Portal (cybercrime.gov.in) specifically to handle "National Security" related content. You don't need to be a victim to report; you can report as a witness or a concerned citizen.
Reporting a threat requires a balance of speed and personal safety. Do not attempt to "investigate" or engage with suspicious individuals yourself. Follow these steps to alert the authorities correctly.
Before the content is deleted or the person moves, gather the specifics.
If the threat is digital (radicalisation videos, recruitment bots, or threats to national symbols), this is your primary tool.
For high-level information—like knowledge of a sleeper cell, funding routes, or specific terror plots—go directly to the NIA.
If the threat is immediate (a suspicious bag at a bus stand or a suspicious gathering), call 112.
If you reported a dangerous URL and it is still live after 72 hours, you can file an RTI online with the Ministry of Home Affairs (MHA) or MeitY asking for the status of the complaint (without asking for confidential investigation details).
If you feel the local police are ignoring a serious physical threat, you can reach out to the Superintendent of Police (SP) or the Commissioner of Police of your city. If the matter involves children being radicalised, you should also alert Childline India: 1098.
For more ways to stay involved in keeping your community safe, you can browse all civic-action guides.
Reporting national security threats isn't always as smooth as a "Report Post" button on Instagram. Here is where the process often hits a wall and how you can bypass it:
The "Not My Jurisdiction" Shuffle: If you go to a local police station to report a sophisticated Telegram recruitment ring, the officer might tell you to "go to the Cyber Cell" or claim they don't handle "Internet stuff."
[email protected]. Digital footprints are central, not local.Portal Fatigue: The cybercrime portal can sometimes be slow, or the "OTP" might take forever to arrive on your phone.
Fear of Retaliation: You might worry that by reporting a radical group, you will end up on their radar—or the government's.
Platform Inertia: You report a video of a banned outfit on a social media site, but they reply saying "this does not violate our community standards."
Use this in the "Description" box when flagging extremist content.
Subject: Reporting Extremist/Pro-Terrorist Content under UAPA.
Content Details: I am reporting a [Telegram Group Link / X Handle / Website URL] that is actively [sharing recruitment manuals / praising a banned organisation / inciting violence against the state].
Specific Observation: On [Date], at [Time], the user posted [describe specific content, e.g., a video calling for "direct action" or a PDF manual on explosives].
Evidence: I have attached screenshots of the post and the profile ID. The content appears to support [Name of banned outfit, if known], which is listed under the First Schedule of the UAPA, 1967.
Request: Please investigate the source of this content and initiate a takedown under the IT Rules, 2021. I wish to remain anonymous for my safety.
Use this for high-level threats or information about banned individuals.
To: [email protected] Subject: Information regarding suspicious activities/extremist propaganda – [Your City/Online Platform]
Respected Sir/Madam,
I wish to bring to your attention certain activities that may pose a threat to national security.
Nature of Information: [e.g., Suspicious movement at a sensitive location / Digital radicalisation ring / Funding chatter for a banned outfit]. Location/URL: [Be very specific]. Date/Time observed: [DD/MM/YYYY].
I have documented the following: [List screenshots, vehicle numbers, or specific names].
I am sharing this as a responsible citizen under my duty mentioned in Section 33 of the Bharatiya Nyaya Sanhita (BNS), 2023. I request you to verify this information and keep my identity confidential.
Regards, [Optional: Your Name] [Optional: Your Phone Number]
If you see an unattended bag or suspicious activity at a station/market.
"I am calling to report a suspicious [object/activity] at [Specific Landmark, e.g., Platform 4, New Delhi Railway Station]. I am standing about 100 metres away. It is a [describe object: blue backpack with wires/unattended scooter]. No one has claimed it for the last 20 minutes. My name is [Name] and I am at [Your current exact spot]. Please send a team."
Q1: Can I get arrested just for being in a group where someone else posted extremist content? Generally, no. Under the BNS and UAPA, the focus is on "intent" and "active support." However, if you are an admin of such a group or if you "Like" and "Forward" the content, you could be flagged for "disseminating" unlawful material. This is why reporting and exiting the group is the safest civic action.
Q2: Does the NIA actually look at emails from regular people? Yes. The NIA and state Anti-Terror Squads (ATS) rely heavily on human intelligence (HUMINT). While they won't reply to every email to maintain operational secrecy, every credible lead regarding banned outfits or threats to national infrastructure is logged and verified.
Q3: Is there a reward for reporting a terrorist or a threat? The NIA frequently announces cash rewards (ranging from ₹1 lakh to ₹10 lakh or more) for information leading to the arrest of absconding terrorists listed on their "Most Wanted" page. These rewards are governed by specific MHA guidelines, and the identity of the informant is strictly protected. Check the official NIA website (nia.gov.in) for the current "Wanted" list.
Q4: What if I accidentally clicked on a link that turned out to be radicalisation material? Accidentally clicking a link is not a crime. Digital footprints are analyzed for patterns. A single accidental click followed by immediately closing the page or reporting it shows a lack of "mens rea" (guilty mind). It is the repeated engagement and sharing that triggers legal trouble.
Q5: How long does it take for the government to block a reported URL? Under Section 69A of the IT Act, the government can issue emergency blocking orders. For national security threats, this can happen within hours. For standard reports on the Cyber Crime portal, it usually takes 24–72 hours for the "Nodal Officer" to review and escalate it to the relevant platform for takedown.
Q6: Do I need to go to court if I report something? In most digital reporting cases, you are just a "whistleblower" or "informant." Unless you are a direct witness to a physical crime where your testimony is the only evidence, you are unlikely to be called to court. For anonymous portal reports, your involvement usually ends at the clicking of the 'Submit' button.
Generally, no. Under the BNS and UAPA, the focus is on "intent" and "active support." However, if you are an admin of such a group or if you "Like" and "Forward" the content, you could be flagged for "disseminating" unlawful material. This is why reporting and exiting the group is the safest civic action.
Yes. The NIA and state Anti-Terror Squads (ATS) rely heavily on human intelligence (HUMINT). While they won't reply to every email to maintain operational secrecy, every credible lead regarding banned outfits or threats to national infrastructure is logged and verified.
The NIA frequently announces cash rewards (ranging from ₹1 lakh to ₹10 lakh or more) for information leading to the arrest of absconding terrorists listed on their "Most Wanted" page. These rewards are governed by specific MHA guidelines, and the identity of the informant is strictly protected. Check the official NIA website (nia.gov.in) for the current "Wanted" list.
Accidentally clicking a link is not a crime. Digital footprints are analyzed for patterns. A single accidental click followed by immediately closing the page or reporting it shows a lack of "mens rea" (guilty mind). It is the repeated engagement and sharing that triggers legal trouble.
Under Section 69A of the IT Act, the government can issue emergency blocking orders. For national security threats, this can happen within hours. For standard reports on the Cyber Crime portal, it usually takes 24–72 hours for the "Nodal Officer" to review and escalate it to the relevant platform for takedown.
RTI templates, FIR scripts, real escalation ladders — the same kind of thing you just read. Sundays only. No spam.
We don't share your email. Unsubscribe any time.
Get ₹50,000 for your technical education. Learn how to apply for AICTE's Pragati, Saksham, and Swanath scholarship schemes for the 2026-27 academic year on the NSP portal.
Check if your college is legal. Learn how to download the AICTE APH 2024-27 and verify mandatory norms for faculty, labs, and student grievances.
Found a broken link or outdated data on a government portal? Learn how to find and message the Web Information Manager (WIM) to get it fixed fast.
Ever wonder how new state laws actually affect you? Learn how to find, read, and decode State Legislative Briefs to track bills before they become law.