In 2026, the courtroom for a cybercrime case isn’t just about what you say; it’s about what your data proves. With India’s transition to the Bharatiya Sakshya Adhiniyam (BSA)—which replaced the Indian Evidence Act—the rules for digital evidence have become both more flexible and more technically demanding.
Whether you are a victim of financial fraud or online harassment, having the right evidence is the difference between a dismissed case and a conviction. Here is exactly what you need to collect.
1. The Power of “Electronic Records” (BSA Section 63)
In 2026, digital data is no longer “secondary” evidence. Under Section 63 of the BSA, electronic records are now treated at par with physical documents.
The “Must-Have” Certificate
To make any digital evidence (like a screenshot) admissible in court, you must provide a Section 63 Certificate (formerly 65B).
-
Part A: Filled by you (the device owner), stating that the device was functioning properly and the data hasn’t been tampered with.
-
Part B: Filled by a Cyber Expert, verifying the “Hash Value” (a unique digital fingerprint) of the file to prove its integrity.
2. Evidence for Financial Fraud (UPI/Banking)
If your money has been stolen, the paper trail is your strongest weapon. You need:
-
Transaction IDs & UTR Numbers: Found in your SMS or banking app.
-
Bank Statements: Highlighting the unauthorized debits.
-
Screenshots of Communication: If the fraudster contacted you via WhatsApp or Email, capture the full phone number or email header.
-
URL/Link Records: If you clicked a “phishing” link, save the exact URL from your browser history.
3. Evidence for Online Harassment & Stalking
Cyberstalking cases under BNS Section 78 rely heavily on demonstrating a pattern of behavior.
-
Chat Logs (Unedited): Do not delete messages. Use the “Export Chat” feature in WhatsApp or Telegram to save a permanent, time-stamped record.
-
Metadata: When you take a screenshot, the file contains “invisible” data (Metadata) about when and where it was taken. Law enforcement uses this to verify the timeline.
-
URL of Profiles: Social media handles can be changed. Always copy the unique Profile URL (e.g.,
[facebook.com/user.id.123](https://facebook.com/user.id.123)) so the police can track the account even if the name changes.
4. Technical “Invisible” Evidence
In complex cases like hacking or data breaches, the evidence is often hidden in the system logs.
-
IP Logs: Records of which IP addresses accessed your account.
-
Device Logs: Your computer’s “Event Viewer” can show exactly when a piece of malware was installed.
-
Volatile Data: Information stored in the RAM. In 2026, forensic experts can retrieve “volatile data” (like unsaved chats), but only if the device hasn’t been restarted. If you’ve been hacked, do not turn off your computer; just disconnect the internet.
5. Summary: Evidence Checklist
| Category | Primary Evidence Needed | Legal Requirement |
| Identity Theft | Fake profile URLs, screenshots of impersonation | BSA Section 63 Certificate |
| Phishing | Email headers, phishing URLs, SMS logs | Hash Value Verification |
| Financial Fraud | UPI/Transaction IDs, Bank debits | 1930 Helpline Ticket Number |
| Deepfakes | The video/audio file, source links | Forensic Expert Certificate |
6. Three Common Mistakes That Ruin Cases
-
Tampering with Files: Never rename or “edit” a digital evidence file. Even cropping a screenshot can change its hash value, making it inadmissible.
-
Delayed Collection: Digital evidence is “volatile.” Logs on servers are often overwritten after 30 to 90 days. If you don’t secure the evidence immediately, it may be gone forever.
-
Missing the Certificate: A screenshot without a Section 63 BSA Certificate is often considered “hearsay” and can be thrown out by a defense lawyer.
Conclusion: Preservation is Protection
In 2026, the burden of proof in cybercrime often falls on the victim to show that their data is authentic. By following a “Forensic-First” approach—collecting unedited logs and securing them with the correct legal certificates—you turn a digital trail into a winning case.
Have you been a victim? Start your documentation today and file your report on cybercrime.gov.in with all your evidence ready.
Disclaimer: This content is for informational purposes and reflects the legal landscape of 2026. Always consult with a qualified cyber-litigation expert for specific legal advice.