How to report online harassment under IT Rules 2021 and BNS
Someone sharing your photos without consent? Learn how to use the IT Rules 2021 to force platforms like Instagram or X to take down harmful content within 24 hours.
Someone sharing your photos without consent? Learn how to use the IT Rules 2021 to force platforms like Instagram or X to take down harmful content within 24 hours.
Imagine you’re scrolling and see a "confessions" page post a morphed photo of your friend, or a stranger starts spamming your DMs with threats. You hit the "Report" button on the app, but three days later, the post is still there. You aren't just stuck with the platform's "community guidelines." Under Indian law, you have a direct route to force these apps to listen and take down harmful content fast.
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (updated in 2023) is your primary tool. These rules apply to "Social Media Intermediaries" (SMIs) like Instagram, WhatsApp, X, and Discord.
Key provisions you need to know:
If the platform ignores you or gives a rubbish justification for keeping the content up, you can escalate to the Grievance Appellate Committee (GAC)—a government-run body that can overrule the platform’s decision.
Here is how you actually get things done when the standard "Report Post" button fails you.
Before the harasser deletes the evidence or the platform hides it, you need proof.
Don't just use the automated report tool. Go to the platform’s "Legal," "Terms of Service," or "Help" section and search for "Grievance Officer India."
While the G.O. handles the takedown, you need a police record for the harasser to face criminal consequences.
If you are reporting non-consensual sexual content, explicitly mention Rule 3(2)(b) of the IT Rules 2021 in your email or form. State: "This content violates Rule 3(2)(b) and must be removed within 24 hours." Platforms take this very seriously because failing to comply can make them lose their "Safe Harbour" protection (meaning they could be held legally responsible for the post as if they published it themselves).
If the platform’s Grievance Officer rejects your complaint or doesn’t respond within the 15-day window:
Dealing with online abuse is draining. If you're feeling overwhelmed, check out Mental health helplines (iCall, Vandrevala, NIMHANS). If you are under 18, you can also contact Childline India: 1098 for immediate assistance.
Even with the IT Rules in your corner, the system isn't a vending machine. Here is where it typically glitches and how you can bypass the "system busy" errors.
1. The "Community Guidelines" Loophole You report a morphed photo, and the platform sends an automated reply: "We’ve reviewed your report and found it doesn't violate our Community Guidelines."
2. The "Go to the Cyber Cell" Shunt You walk into a local police station, and the officer tells you they don't handle "internet fights" or says you must go to the district headquarters' Cyber Cell.
3. The Vanishing Evidence The harasser deletes the post or their entire account after you report it, and the platform claims they "can't find the content."
4. The "Admin is Not Responsible" Myth In WhatsApp or Telegram groups, admins often claim they aren't responsible for what others post.
Copy, fill in the [highlighted] bits, and send.
Subject: Urgent: Complaint under Rule 3(2)(b) of IT Rules 2021 – [Platform Username/Case ID]
Body: Dear Resident Grievance Officer,
I am writing to formally report a violation of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
Details of the violation:
Under Rule 3(2)(b), intermediaries are required to remove non-consensual nudity or sexually explicit content within 24 hours of receipt of a complaint. For other forms of harassment, I expect an acknowledgement within 24 hours and resolution within 15 days as per Rule 3(2).
Attached are screenshots as evidence. I request you to take down this content immediately and preserve the metadata for law enforcement agencies as required under Rule 3(1)(j).
Regards, [Your Name] [Your Phone Number]
You: "Namaste, I want to report an incident of online harassment and [mention specific crime, e.g., stalking/morphed photos]." Operator: "Have you reported it to the platform?" You: "Yes, I have filed a report with [Instagram/X/WhatsApp], but the content is still live. I am calling to register a formal complaint on the National Cyber Crime Portal. The offender is using the handle [Username] and is [explain the threat, e.g., threatening to leak photos/sending abusive messages]." Operator: "Please provide your details for the record." You: "I have the screenshots and the URL ready. Can you please provide me with a Complaint ID so I can track the police follow-up?"
"I am appealing the decision made by [Platform Name] regarding Complaint ID [Number]. The content in question violates Rule 3(1)(b) of the IT Rules 2021 as it constitutes [harassment/impersonation/obscene material]. The platform’s Resident Grievance Officer failed to provide a satisfactory resolution, claiming it does not violate their internal guidelines, which is a secondary standard to the law of the land (IT Rules 2021). I request the Committee to direct the platform to remove the content."
Yes. You don't need to know their real identity. When you report it to the Resident Grievance Officer and the Cyber Crime portal, law enforcement can issue a notice to the platform to provide the IP address, registration email, and phone number used to create that account. Under **Section 94 of the BNSS**, police have the power to summon this data.
No. Filing a report on the Cyber Crime portal, emailing a Grievance Officer, and filing an appeal on the [gac.gov.in](https://gac.gov.in) portal are all free of cost. If anyone asks you for money to "expedite" a cyber complaint, it is likely a scam.
If the harasser is a minor, the case is handled under the **Juvenile Justice (Care and Protection of Children) Act, 2015**. However, if the harassment involves sexual content of a minor (you), it falls under **POCSO 2012**, which has very strict mandatory reporting and punishment rules. The "offender's age" does not mean the content stays up; the platform must still take it down.
Reporting a crime to the authorities or a platform’s legal officer is "privileged communication." As long as you are reporting a genuine grievance with evidence, it does not constitute defamation under **Section 356 of the BNS** (the exception for "good faith" accusations made to authorized persons).
For "sexually explicit" or "non-consensual nudity," the law is strict: **24 hours**. For other types of harassment (bullying, hate speech, impersonation), the platform has **15 days** to finish their investigation and take action. If they miss these deadlines, they lose their "Safe Harbour" protection and can be held legally responsible for the post itself.
RTI templates, FIR scripts, real escalation ladders — the same kind of thing you just read. Sundays only. No spam.
We don't share your email. Unsubscribe any time.
Is your sibling's school bus a rickety death trap? Learn the mandatory Supreme Court safety rules and how to force your school to follow them.
Found a child in distress? Calling 1098 isn't just a report; it triggers a legal rescue chain. Here is exactly what happens from the moment you dial to the rescue.
Someone asking for "gifts" or "cash" for a wedding isn't just awkward—it's a crime. Here is how to legally report dowry demands under the Dowry Prohibition Act 1961.
Signed your anti-ragging affidavit but still facing "intro" sessions? Here is how to use that legal document to force your college to take action and stay safe.