Cyber Extortion in India: Emerging Threats and Legal Challenges

The rapid expansion of digital technologies has transformed communication, commerce, and data management while creating new opportunities for cybercriminals to exploit individuals, businesses, and public institutions. Cyber extortion has emerged as a significant cybersecurity and legal concern in India, involving threats to disclose sensitive information, ransomware attacks, unauthorised access to digital systems, and demands for money or other benefits through coercion. This paper examines the evolving nature of cyber extortion in India and evaluates the adequacy of the existing legal framework in addressing emerging threats. The study adopts a doctrinal research methodology, analysing relevant statutory provisions and judicial decisions. Particular attention is given to the Information Technology Act, 2000, the Bharatiya Nyaya Sanhita, 2023, and the procedural and evidentiary challenges associated with investigating and prosecuting cyber extortion. The research also considers difficulties arising from offender anonymity, cross-border jurisdiction, digital evidence preservation, technological sophistication, and the underreporting of cybercrime. The study argues that although existing Indian laws provide mechanisms for addressing several forms of cyber extortion, their effective application is complicated by fragmented legal provisions, investigative limitations, and the transnational character of digital offences. It identifies the need for clearer legal coordination, stronger digital forensic capabilities, improved inter-agency cooperation, and enhanced international collaboration. The research concludes that an effective response to cyber extortion requires a coordinated approach combining legal reform, technological preparedness, institutional capacity-building, and victim protection. Such measures are essential to strengthen accountability, safeguard digital rights, and improve confidence in India’s evolving digital ecosystem.