📚Personal Safety

How to report online harassment under IT Rules 2021 and BNS

Someone sharing your photos without consent? Learn how to use the IT Rules 2021 to force platforms like Instagram or X to take down harmful content within 24 hours.

HowToHelp Editorial
10 min read
#IT Rules 2021#Grievance Officer India#GAC escalation#online harassment law India#cybercrime reporting#Section 79 BNS#Rule 3(2)(b) takedown#social media grievance

Hook

Imagine you’re scrolling and see a "confessions" page post a morphed photo of your friend, or a stranger starts spamming your DMs with threats. You hit the "Report" button on the app, but three days later, the post is still there. You aren't just stuck with the platform's "community guidelines." Under Indian law, you have a direct route to force these apps to listen and take down harmful content fast.

What the law actually says

The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (updated in 2023) is your primary tool. These rules apply to "Social Media Intermediaries" (SMIs) like Instagram, WhatsApp, X, and Discord.

Key provisions you need to know:

  1. The 24-Hour Rule (Rule 3(2)(b)): If someone posts non-consensual nudity, morphed images, or "sexually explicit" content of you, the platform must remove it within 24 hours of you reporting it. This is a hard deadline under the law.
  2. Grievance Redressal Mechanism (Rule 3(2)): Every platform must appoint a Resident Grievance Officer (G.O.) based in India. Their name and contact details must be published on their website or app. They are legally responsible for handling your complaints.
  3. The 72-Hour/15-Day Rule: For other complaints like harassment, impersonation, or misinformation, the G.O. must acknowledge your complaint within 24 hours and resolve it within 15 days. If the content is flagged as a deepfake or misinformation prohibited under Rule 3(1)(b), they must act within 72 hours.
  4. BNS and IT Act: While the IT Rules handle takedowns, the Bharatiya Nyaya Sanhita (BNS), 2023 handles the criminal side. Section 78 of the BNS covers stalking, while Section 79 deals with words or gestures intended to insult the modesty of a woman. For cyber-specific crimes like publishing obscene material, Section 67 and 67A of the Information Technology Act, 2000 remain applicable.

If the platform ignores you or gives a rubbish justification for keeping the content up, you can escalate to the Grievance Appellate Committee (GAC)—a government-run body that can overrule the platform’s decision.

Step-by-step playbook

Here is how you actually get things done when the standard "Report Post" button fails you.

  1. Document everything

    Before the harasser deletes the evidence or the platform hides it, you need proof.

    • Screenshots: Take full-screen screenshots showing the content, the timestamp, and the username/profile URL of the offender.
    • Profile Links: Copy the exact URL of the offending post and the offender's profile page. Do not just rely on the "display name."
    • Screen Recording: If it is a video or a disappearing message (like on Snapchat or Instagram Vanish Mode), use a screen recorder on another device if necessary.
    • Timeline: Keep a simple log of when you first saw the content and when you first reported it through the app's internal tools.
  2. Find the Resident Grievance Officer (RGO)

    Don't just use the automated report tool. Go to the platform’s "Legal," "Terms of Service," or "Help" section and search for "Grievance Officer India."

    • Meta (FB/Insta): They have a dedicated "Grievance Officer" contact form specifically for India.
    • X (Twitter): Look for their "Legal Requests" page or their Indian Grievance contact email listed in their transparency reports.
    • What to send: Your name, the specific URL of the content, the reason (e.g., "Violation of Rule 3(2)(b) of IT Rules 2021 - Non-consensual sexual content"), and your evidence.
  3. File a concurrent report on Cybercrime.gov.in

    While the G.O. handles the takedown, you need a police record for the harasser to face criminal consequences.

  4. Use the 24-hour leverage

    If you are reporting non-consensual sexual content, explicitly mention Rule 3(2)(b) of the IT Rules 2021 in your email or form. State: "This content violates Rule 3(2)(b) and must be removed within 24 hours." Platforms take this very seriously because failing to comply can make them lose their "Safe Harbour" protection (meaning they could be held legally responsible for the post as if they published it themselves).

  5. Escalate to the GAC

    If the platform’s Grievance Officer rejects your complaint or doesn’t respond within the 15-day window:

    • Visit gac.gov.in.
    • Log in using your mobile number.
    • Upload the platform's rejection email or your initial complaint receipt.
    • The GAC is an online tribunal. They will review your case and can pass an order forcing the platform to comply. This usually takes 30–90 days, but it is a powerful way to hold big tech accountable.
  6. Seek Support

    Dealing with online abuse is draining. If you're feeling overwhelmed, check out Mental health helplines (iCall, Vandrevala, NIMHANS). If you are under 18, you can also contact Childline India: 1098 for immediate assistance.

    Browse all civic-action playbooks

Where it usually breaks

Even with the IT Rules in your corner, the system isn't a vending machine. Here is where it typically glitches and how you can bypass the "system busy" errors.

1. The "Community Guidelines" Loophole You report a morphed photo, and the platform sends an automated reply: "We’ve reviewed your report and found it doesn't violate our Community Guidelines."

  • The Workaround: Do not stop there. Platforms use global AI to filter reports, which often misses Indian context or specific legal requirements. Immediately file an appeal through the Grievance Appellate Committee (GAC) portal at gac.gov.in. Under Rule 3A of the IT Rules, the GAC is a government-appointed body that can force the platform to reverse its decision. You must file this appeal within 30 days of the platform's rejection.

2. The "Go to the Cyber Cell" Shunt You walk into a local police station, and the officer tells you they don't handle "internet fights" or says you must go to the district headquarters' Cyber Cell.

  • The Workaround: Legally, every police station is required to record information about a cognizable offence. Remind them of Section 173 of the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2023, which allows for a Zero FIR. This means they must register your complaint and then transfer it to the relevant Cyber Cell themselves. If they still refuse, use the Cyber Crime Portal to file the report online; this generates a tracking number that the local police cannot easily ignore.

3. The Vanishing Evidence The harasser deletes the post or their entire account after you report it, and the platform claims they "can't find the content."

  • The Workaround: This is why "Step 1: Document" is non-negotiable. If you have the URL and a screenshot, the platform is legally required to preserve the data for 180 days for investigation purposes under Rule 3(1)(j) of the IT Rules 2021, even if the content is deleted from public view. Mention this specific rule in your email to the Grievance Officer.

4. The "Admin is Not Responsible" Myth In WhatsApp or Telegram groups, admins often claim they aren't responsible for what others post.

  • The Workaround: While admins aren't always criminally liable for a member's message, they are responsible for "due diligence." If you notify an admin about harmful content and they refuse to remove the person or the message, they can be cited for abetment under the BNS.

Templates & scripts

Copy, fill in the [highlighted] bits, and send.

Template 1: Email to the Resident Grievance Officer

Subject: Urgent: Complaint under Rule 3(2)(b) of IT Rules 2021 – [Platform Username/Case ID]

Body: Dear Resident Grievance Officer,

I am writing to formally report a violation of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

Details of the violation:

  • Nature of content: [e.g., Non-consensual sexual content / Morphed imagery / Harassment]
  • URL of the content: [Paste link here]
  • Username of the offender: [Handle/Profile link]
  • Date/Time discovered: [Date and Time]

Under Rule 3(2)(b), intermediaries are required to remove non-consensual nudity or sexually explicit content within 24 hours of receipt of a complaint. For other forms of harassment, I expect an acknowledgement within 24 hours and resolution within 15 days as per Rule 3(2).

Attached are screenshots as evidence. I request you to take down this content immediately and preserve the metadata for law enforcement agencies as required under Rule 3(1)(j).

Regards, [Your Name] [Your Phone Number]


Template 2: Script for calling the 1930 Helpline

You: "Namaste, I want to report an incident of online harassment and [mention specific crime, e.g., stalking/morphed photos]." Operator: "Have you reported it to the platform?" You: "Yes, I have filed a report with [Instagram/X/WhatsApp], but the content is still live. I am calling to register a formal complaint on the National Cyber Crime Portal. The offender is using the handle [Username] and is [explain the threat, e.g., threatening to leak photos/sending abusive messages]." Operator: "Please provide your details for the record." You: "I have the screenshots and the URL ready. Can you please provide me with a Complaint ID so I can track the police follow-up?"


Template 3: Text for GAC Appeal (if platform rejects you)

"I am appealing the decision made by [Platform Name] regarding Complaint ID [Number]. The content in question violates Rule 3(1)(b) of the IT Rules 2021 as it constitutes [harassment/impersonation/obscene material]. The platform’s Resident Grievance Officer failed to provide a satisfactory resolution, claiming it does not violate their internal guidelines, which is a secondary standard to the law of the land (IT Rules 2021). I request the Committee to direct the platform to remove the content."


Frequently Asked Questions

1. Can I report someone if they are harassing me from a fake or "anonymous" account?

Yes. You don't need to know their real identity. When you report it to the Resident Grievance Officer and the Cyber Crime portal, law enforcement can issue a notice to the platform to provide the IP address, registration email, and phone number used to create that account. Under **Section 94 of the BNSS**, police have the power to summon this data.

2. Is there a fee for filing a complaint or an appeal to the GAC?

No. Filing a report on the Cyber Crime portal, emailing a Grievance Officer, and filing an appeal on the [gac.gov.in](https://gac.gov.in) portal are all free of cost. If anyone asks you for money to "expedite" a cyber complaint, it is likely a scam.

3. What happens if the harasser is a minor (under 18)?

If the harasser is a minor, the case is handled under the **Juvenile Justice (Care and Protection of Children) Act, 2015**. However, if the harassment involves sexual content of a minor (you), it falls under **POCSO 2012**, which has very strict mandatory reporting and punishment rules. The "offender's age" does not mean the content stays up; the platform must still take it down.

4. Can I be sued for defamation if I report someone?

Reporting a crime to the authorities or a platform’s legal officer is "privileged communication." As long as you are reporting a genuine grievance with evidence, it does not constitute defamation under **Section 356 of the BNS** (the exception for "good faith" accusations made to authorized persons).

5. How long do I have to wait before the content is actually deleted?

For "sexually explicit" or "non-consensual nudity," the law is strict: **24 hours**. For other types of harassment (bullying, hate speech, impersonation), the platform has **15 days** to finish their investigation and take action. If they miss these deadlines, they lose their "Safe Harbour" protection and can be held legally responsible for the post itself.

📮

One civic-action playbook a week

RTI templates, FIR scripts, real escalation ladders — the same kind of thing you just read. Sundays only. No spam.

We don't share your email. Unsubscribe any time.

Report online harassment under IT Rules 2021 and BNS · HowToHelp