How to report fake degrees and data fraud under BNS and UGC rules

1. The Reality Check

You have spent years grinding for a degree, only to lose a job or a seat to someone who bought theirs for ₹50,000 from a "printing press" university in another state. Or worse, you are working at a startup where the founders are cooking the books with fake user data to lure investors, or a "fintech" app is using fake reviews to scam people. It feels like the system is rigged, and the "age of greed" is winning. But "chalta hai" is not a legal strategy. If someone is using a fake degree to steal a job or fake data to defraud the public, you have the tools to call it out. Taking action is not just about being a whistle-blower; it is about protecting the value of your own hard work.

2. What the law actually says

In India, misrepresenting educational qualifications or faking data for gain is a serious criminal offence under the Bharatiya Nyaya Sanhita (BNS), 2023, which replaced the old IPC.

Forgery and Fraud (BNS)

• Section 336 of the BNS: This defines forgery. If someone creates a fake marksheet, degree, or certificate, they are "making a false document" with the intent to cause damage or commit fraud.
• Section 340 of the BNS: This is the one that usually catches people. It deals with "using as genuine a forged document." If someone submits a fake degree to a government department or a private company knowing it is fake, they are liable for the same punishment as if they had forged it themselves.
• Section 318 of the BNS: This covers cheating. If a person induces an employer to hire them (and pay them a salary) based on a fake degree, they are dishonestly inducing the delivery of property (the salary).

The UGC and AICTE Regulations

The University Grants Commission (UGC) Act, 1956, under Section 22, explicitly states that only a university established by a Central, State, or Provincial Act, or an institution "deemed to be a university," has the right to confer degrees. Any "educational hub" or "institute" handing out degrees without this authority is illegal. The UGC maintains a public list of "Fake Universities" to warn students and employers. Similarly, for technical education, the AICTE (All India Council for Technical Education) regulates the validity of B.Tech and MBA certificates.

Data Fraud and Information Technology

If the fraud involves faking digital records, user metrics, or electronic data to scam people, the Information Technology Act, 2000 (specifically Section 66C for identity theft and 66D for cheating by personation using computer resources) comes into play alongside the BNS provisions for cheating.

3. Step-by-step playbook

Step 1: Verify the "University" or Institution

Before you blow the whistle, ensure the degree-granting body is actually fake or unrecognised.

• What to do: Visit the official UGC website (ugc.gov.in) and check the "Fake Universities" list under the "Students" or "Resources" tab.
• Check AICTE: For technical degrees, check the AICTE portal's list of "Unapproved Institutions."
• Timeline: Instant.
• If it fails: Some fake colleges use names very similar to real ones (e.g., "Indian Institute of Management" vs "Indo-Management Institute"). Look for the exact address and registration details on the portal.

Step 2: Use RTI for Verification

If the university is real but you suspect the individual’s degree is fake, use the Right to Information (RTI) Act, 2005.

• What to do: File an RTI online with the Public Information Officer (PIO) of the concerned University. Ask for verification of a specific Roll Number and Year of Passing. You do not need to name the person; just the data points.
• What to bring: ₹10 fee (via postal order or online portal payment).
• Timeline: You should receive a response within 30 days under Section 6(1) of the RTI Act.
• If it fails: If the PIO refuses, file a First Appeal under Section 19(1) of the RTI Act.

Step 3: Gather the Paper Trail

To report data fraud (like a company faking its numbers or reviews), you need evidence that won't disappear when they hit "delete."

• What to do: Take screenshots of the fake data, save emails, and download PDFs. If it is a fake degree being used for a job, try to get a copy of the "Verification Report" or the public announcement where the person claimed the qualification.
• What to bring: Digital backups on two different drives. Ensure timestamps are visible in screenshots.
• Timeline: 1–2 days.

Step 4: Internal Reporting (The Corporate Route)

If this is happening inside your company, use the Internal Whistleblower Policy.

• What to do: Send an email to the HR Head or the Ethics Committee. Use a professional tone. State that you have observed a violation of the company’s code of conduct and the BNS. If you are a student, report it to the POSH at workplace and college committee if it involves harassment, or the Dean's office for academic fraud.
• Timeline: Expect an internal investigation to take 15–45 days.
• If it fails: If the company ignores you or retaliates, move to the police route.

Step 5: File a Police Complaint (The Criminal Route)

If the fraud is large-scale (e.g., a degree mill or financial data fraud), you must go to the police.

• What to do: Go to your local police station and file an FIR under Section 173 of the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2024. Mention Sections 318, 336, and 340 of the BNS in your complaint.
• What to bring: Your evidence folder, RTI response (if any), and a written complaint draft.
• Timeline: The police must register an FIR if a cognizable offence is made out. If they refuse, use the Lalita Kumari vs. Govt. of UP (2014) judgment to demand registration.
• If it fails: Send the complaint to the Superintendent of Police (SP) via registered post under Section 173(4) of the BNSS.

Step 6: Report to the Cyber Cell

If the data fraud is happening online (fake apps, fake investment platforms, or identity theft), use the Cyber Crime reporting portal.

• What to do: Log on to cybercrime.gov.in and file a "Report Other Cyber Crime" complaint. Provide the URLs and transaction IDs if any money was involved.
• Expected timeline: 48–72 hours for an initial acknowledgement.

Browse all civic-action guides

Where it usually breaks

Reporting fraud sounds straightforward on paper, but in the real world, you will hit walls. Here is how to climb over them:

1. The "Personal Information" RTI Rejection

When you file an RTI to verify a degree, the Public Information Officer (PIO) might reject it citing Section 8(1)(j) of the RTI Act, claiming the information is "personal" and has no relationship to any public activity.

• The Workaround: Don’t ask for the person’s "file" or "address." Ask for the "verification of the genuineness of Degree/Marksheet for Roll No. [Number] issued in [Year]." In CPIO, Supreme Court of India v. Subhash Chandra Agarwal (2019), the Court held that even personal information can be disclosed if there is a larger public interest. Mention that "verifying educational credentials used for public/professional appointments is a matter of public interest to prevent fraud."

2. Police Refusal to File an FIR

If you go to a police station to report a fake degree or data fraud, the officer might tell you it is a "civil matter" or ask you to "settle it" with the person.

• The Workaround: Carry a copy of the Lalita Kumari vs. Govt. of U.P. (2014) judgment. The Supreme Court ruled that if a complaint discloses a cognizable offence (like forgery under Section 336 of the BNS), the police must register an FIR. If they still refuse, use Section 173(4) of the Bharatiya Nagarik Suraksha Sanhita (BNSS) to send your complaint to the Superintendent of Police (SP) via registered post. You can also file an "e-FIR" on your State Police portal for "Unknown" or "Theft/Fraud" categories to get a digital record started.

3. The "Ghost" University

You find a fake university, but it has no physical office, only a flashy website and a WhatsApp number.

• The Workaround: Do not just report the name to the UGC. Report the domain name and the bank account details (if you have them from a "prospectus" or fee demand) to the National Cyber Crime Reporting Portal (cybercrime.gov.in). Fake universities are often just front-ends for money laundering and cyber-fraud.

4. HR Inaction in Private Companies

If you report a colleague’s fake degree to your HR, they might ignore it to avoid a PR mess or because the person is a "high performer."

• The Workaround: Send the email to the Internal Audit or Vigilance department, not just HR. Private companies are bound by their own "Code of Conduct." If the company is listed on the stock exchange, you can report it as a governance failure to the SEBI Complaint Redress System (SCORES) if the fraud involves senior management or impacts company data integrity.

---

Templates / script

1. RTI Body for Degree Verification

To: The Public Information Officer (PIO), [Name of University/Board] Subject: Request for information under Section 6(1) of the RTI Act, 2005.

Dear Sir/Madam, Please provide the following information regarding the educational records issued by this University:

1. Whether the Degree/Marksheet with Roll Number [Insert Number] and Enrollment Number [Insert Number] for the [Name of Course, e.g., B.Com] for the passing year [Year] is genuine and issued by this University.
2. If the record is found to be fake or not issued by this University, please provide a categorical "Yes/No" statement on its validity.
3. Please provide the name of the college/study centre associated with the aforementioned Roll Number.

I have attached the ₹10 fee via [Postal Order No. / Online Receipt No.]. I am an Indian Citizen.

---

2. FIR Draft for Forgery and Cheating

To: The Station House Officer (SHO), [Name of Police Station, City] Subject: Complaint regarding Forgery (Section 336 BNS), Using Forged Documents (Section 340 BNS), and Cheating (Section 318 BNS).

Respected Sir/Madam, I am writing to report a criminal offence committed by [Name of Accused/Entity].

1. The accused has knowingly produced/used a forged [Degree/Certificate/Data Report] claiming it to be issued by [Name of Authority].
2. I have verified via [UGC list/RTI/Official Portal] that the document is false/the institution is unrecognised.
3. This forged document was used with the intent to [gain employment/defraud investors/mislead the public], causing wrongful loss to others and wrongful gain to the accused. This constitutes an offence under Sections 336, 340, and 318 of the Bharatiya Nyaya Sanhita (BNS), 2023. I request you to register an FIR and initiate an investigation.

---

3. Script for Calling the UGC Helpline (1800-11-1656)

"Hello, I am a student/citizen calling to report an unrecognised institution operating under the name [Name of College] in [City, State]. They are claiming to offer degrees affiliated with [University Name], but I have checked the UGC 'Fake Universities' list and the 'Consolidated list of State Private Universities' and they are not listed. I want to know how to submit a formal complaint to the UGC Vigilance cell to stop them from scamming more students. Can I get an email address or a case reference number for this tip-off?"

---

FAQs

1. Can I be sued for defamation if I report a fake degree?

No, provided you have a "reasonable basis" for your claim and you follow the legal route (filing a police complaint or RTI). Under Indian law, "truth" and "public good" are absolute defences against defamation. If you have an RTI response from a university saying the degree is fake, you are protected. Avoid posting unverified claims on social media; stick to official reporting channels.

2. Is there a reward for being a whistleblower?

In most cases of degree fraud, there is no direct cash reward. However, if you report "Data Fraud" involving tax evasion or massive financial scams to the Income Tax department or the Directorate of Enforcement (ED), there are specific whistleblower reward schemes that can pay out a percentage of the recovered amount.

3. What if the degree is from an "International" university?

Many fake degrees in India claim to be from "The University of [Foreign City]." To check these, visit the Association of Indian Universities (AIU) website. They are the only body that grants "Equivalence Certificates" for foreign degrees. If the degree isn't recognized by AIU, it cannot be used for government jobs or higher education in India.

4. Can I report anonymously?

For an RTI, you must provide a name and address (though you can use a PO Box or a friend’s address if you fear for safety). For a police FIR, you generally need to identify yourself. However, you can send an anonymous "Tipped-off" letter to the UGC Vigilance Cell or the Anti-Corruption Bureau (ACB) of your state. They may choose to conduct a "Suo Motu" investigation based on your evidence.

5. What is the maximum punishment for degree forgery?

Under Section 338 of the BNS, forging a document that purports to be a public record or a certificate of a degree can lead to imprisonment for up to 7 years and a fine. If the fraud involves "Cheating by Personation" (pretending to be someone else with a degree), the punishment is also severe under Section 319 of the BNS.

6. How do I know if a "Data Report" or "User Growth" is fake?

If you are at a startup and suspect data fraud (faking 1 lakh users when there are only 1,000), look for "Audit Logs" or "Database entries." If the company is using this fake data to raise money from investors, it is "Investment Fraud." You can report this to the Ministry of Corporate Affairs (MCA) via the SFIO (Serious Fraud Investigation Office) portal if the scale is large (usually ₹25 crore or more).