Deepfake, Sextortion and Non-Consensual Intimate Images: Urgent Legal Remedies and Takedown Process in India

DEEPFAKE • SEXTORTION • NCII • PRIVATE IMAGE LEAK • 2-HOUR TAKEDOWN • CYBERCRIME • IT ACT • INDIA • 2026

2026 comprehensive legal guide to sexual deepfakes, private-image abuse, online blackmail, Rule 3(2)(b), urgent platform takedown, NCRP, GAC, IT Act, BNS, POCSO and court remedies.

By Advocate Ankit Kumar Singh

Updated: 7 August 2026

Direct Answer: What Should You Do Immediately?

If someone has published, threatened to publish or created intimate, sexual, morphed or deepfake material involving you, do not treat the problem merely as an embarrassing social-media dispute.

Use an emergency response:

PRESERVE THE ESSENTIAL EVIDENCE → DO NOT SEND MORE CONTENT → SECURE ACCOUNTS → FILE URGENT PLATFORM TAKEDOWN → REPORT TO GRIEVANCE OFFICER → REPORT CYBERCRIME → CALL 1930 IF MONEY HAS MOVED → SEEK POLICE / COURT PRESERVATION AND DISCLOSURE WHERE NECESSARY

Under India's IT Rules as amended in 2026, a qualifying Rule 3(2)(b) complaint involving intimate, sexual, impersonating or artificially morphed content has a statutory two-hour removal/disablement framework.

Deepfake, NCII and Sextortion Are Three Different Problems

Deepfake

A deepfake is digitally or synthetically generated/manipulated content that falsely represents a person's image, voice, actions or identity.

It may be:

• harmless or consensual;
• satirical;
• deceptive;
• fraudulent;
• sexual;
• privacy-invasive.

The legal analysis depends upon how and why the synthetic material is used.

Non-Consensual Intimate Imagery — NCII

NCII concerns intimate content circulated or made available without the depicted person's consent.

The original material may be:

• genuine;
• secretly recorded;
• consensually recorded but unlawfully shared;
• morphed;
• AI-generated.

Sextortion

Sextortion usually involves threats connected with intimate or purported intimate material.

The offender may demand:

• money;
• cryptocurrency;
• additional photographs;
• additional videos;
• sexual conduct;
• passwords;
• continued communication;
• other concessions.

Consent to an Intimate Photograph Does Not Automatically Mean Consent to Share It

This is one of the most important legal principles in intimate-image cases.

A person may voluntarily:

• take an intimate photograph;
• send it to a partner;
• participate in a private video;
• consent to recording;

without consenting to:

• Instagram publication;
• WhatsApp forwarding;
• Telegram circulation;
• website publication;
• distribution to family/employer;
• public upload.

For female victims, BNS Section 77 expressly recognises that consent to capture does not automatically constitute consent to dissemination to third persons.

The 2026 Two-Hour Takedown Rule

Rule 3(2)(b) of the IT Rules is one of the most important immediate remedies available to a victim.

It applies to a qualifying complaint concerning content prima facie in the nature of:

• exposure of the person's private area;
• full or partial nudity;
• sexual act or conduct;
• electronic impersonation;
• artificially morphed images.

The intermediary must take reasonable and practicable measures to remove or disable access within:

2 HOURS.

This period was reduced from 24 hours by the February 2026 amendments.

Who Can File the Two-Hour Complaint?

The statutory language recognises a complaint by:

THE INDIVIDUAL

or:

A PERSON ACTING ON THE INDIVIDUAL'S BEHALF.

That can be particularly important where the victim:

• does not want to communicate directly with the platform;
• is traumatised;
• has lost account access;
• needs an authorised representative;
• requires urgent legal assistance.

What Exactly Should the Rule 3(2)(b) Complaint Contain?

A useful complaint should identify:

• victim's name;
• contact email;
• platform;
• exact URL;
• username/account;
• post/reel/video/message link;
• date content was discovered;
• short description of the content;
• why the material is intimate / sexual / morphed / impersonating;
• statement of absence of consent;
• request for Rule 3(2)(b) action;
• request to prevent re-upload where technically applicable;
• request to preserve relevant account/log information.

Avoid unnecessarily attaching or reproducing the intimate imagery multiple times where the URL and platform mechanism allow the content to be precisely identified.

The 2-Hour Rule Is Not the Same as the General 7-Day Grievance Rule

Process	Current 2026 Period
General grievance acknowledgment	24 hours
General grievance resolution	7 days
Certain specified removal grievances	36 hours
Rule 3(2)(b) intimate / nudity / sexual / impersonation / morphed-content complaint	2 hours
Qualifying Rule 3(1)(d) court/Government actual-knowledge process	3 hours

These timelines have different legal triggers. Do not mix them in a complaint.

India Now Has a Dedicated NCII Standard Operating Procedure

MeitY released a Standard Operating Procedure to curtail the dissemination of Non-Consensual Intimate Imagery in 2025.

The SOP was designed as a victim-centric mechanism covering:

• platform reporting;
• Grievance Officers;
• One Stop Centres;
• NCRP;
• law enforcement;
• GAC;
• repeat-upload prevention;
• search-engine de-indexing;
• coordination with I4C.

The SOP originally refers to the former 24-hour Rule 3(2)(b) period. After the February 2026 statutory amendment, the current Rule 3(2)(b) period is two hours.

Hash Matching — How Re-Uploads Can Be Addressed

A serious NCII problem does not end merely because one URL disappears.

The same image may reappear through:

• another account;
• another group;
• mirror website;
• re-upload;
• edited copy;
• new URL.

The Government NCII SOP contemplates technical measures including hashing/crawler-based systems to identify previously flagged material and reduce resurfacing.

This creates an important litigation and grievance request:

DO NOT ASK ONLY FOR ONE URL TO BE REMOVED. ASK WHAT CAN LAWFULLY BE DONE TO PREVENT RE-UPLOAD OF THE IDENTIFIED NCII.

Search-Engine De-Indexing

Deleting the original post may not immediately eliminate search-engine visibility.

The NCII SOP expressly contemplates search-engine intermediaries de-indexing flagged NCII from search results.

Therefore a complete cleanup strategy may involve:

SOURCE TAKEDOWN + PLATFORM TAKEDOWN + RE-UPLOAD PREVENTION + SEARCH DE-INDEXING.

What If the Sextortionist Has Not Published Anything Yet?

Rule 3(2)(b) primarily operates against qualifying content that is hosted, stored, published or transmitted by the intermediary.

If the offender merely threatens:

“PAY ME OR I WILL UPLOAD THIS TOMORROW,”

do not wait until publication.

Preserve:

• threat messages;
• number/account;
• payment demand;
• UPI ID;
• bank account;
• cryptocurrency address;
• email;
• voice notes;
• profile URL;
• timestamps.

Then consider immediate cybercrime/police action and report the threatening account to the platform.

Should You Pay the Sextortionist?

Payment does not create a reliable guarantee that the material will be deleted.

The offender may:

• demand more money;
• retain copies;
• sell/share material;
• return through another account;
• threaten additional contacts.

If money has already been transferred, preserve the payment evidence and consider immediate financial cyberfraud reporting.

If Money Has Been Paid — Act Immediately

Preserve:

• UPI transaction ID;
• UTR;
• beneficiary bank;
• beneficiary account;
• wallet details;
• payment screenshots;
• threat demanding the payment;
• bank SMS/email.

Consider:

1930 → BANK → NCRP → CYBER POLICE.

Financial-fraud reporting should not be delayed merely because the victim is simultaneously trying to remove the images.

National Cyber Crime Reporting Portal — NCRP

The Government's NCRP facilitates online reporting of cybercrime and has a specific focus on crimes affecting women and children.

Depending upon the case, the portal can be used for:

• online/social-media crime;
• hacking;
• sexually explicit online content;
• financial cyberfraud;
• other cyber offences.

The correct category should be selected based upon the actual incident.

Should You Go to the Local Police / Cyber Police?

Yes, where the facts disclose criminal conduct or urgent investigative assistance is required.

A police complaint can become important for:

• identifying anonymous uploader;
• preserving account records;
• tracing IP/login information;
• following payment trails;
• device seizure;
• preventing continued harassment;
• criminal prosecution.

Platform takedown and criminal investigation are separate remedies.

IT Act Section 66E — Violation of Privacy

Section 66E is one of the most directly relevant electronic-privacy provisions.

It addresses intentional or knowing capture, publication or transmission of the image of a person's private area without consent under circumstances violating privacy.

The provision is gender-neutral.

IT Act Sections 67 and 67A

Depending upon the nature of the material:

Section 67

addresses publication/transmission of obscene material in electronic form.

Section 67A

addresses publication/transmission of material containing sexually explicit acts or conduct.

These provisions should be applied according to the actual content rather than mechanically added to every intimate-image complaint.

BNS Section 77 — Voyeurism and Non-Consensual Dissemination

For female victims, Section 77 BNS is especially important.

The provision deals with watching, capturing or disseminating images of a woman engaging in a private act in circumstances carrying an expectation of privacy.

The statute also addresses a critical modern situation:

THE WOMAN AGREED TO THE IMAGE BEING CAPTURED, BUT DID NOT AGREE TO ITS DISSEMINATION TO THIRD PERSONS.

Such dissemination may still fall within the provision.

BNS Section 351 — “Pay Me or I Will Send It to Everyone”

Criminal intimidation includes threats of injury to a person's:

• person;
• reputation;
• property;

where the required statutory intention exists.

Therefore a threat such as:

“I WILL SEND YOUR PRIVATE VIDEO TO YOUR FAMILY UNLESS YOU DO WHAT I SAY”

can require Section 351 analysis even before the material is published.

BNS Section 308 — Sextortion for Money

Section 308 defines extortion around intentionally placing someone in fear of injury and thereby dishonestly inducing delivery of property, valuable security or specified equivalent material.

A classic fact pattern is:

INTIMATE VIDEO + THREAT OF PUBLICATION + MONEY DEMAND + PAYMENT.

The actual facts determine whether completed extortion, attempt, criminal intimidation or other offences are attracted.

What If the Offender Demands More Intimate Photographs Instead of Money?

Do not automatically label the conduct as completed property extortion.

The legal analysis may instead involve:

• criminal intimidation;
• sexual harassment;
• stalking;
• privacy offences;
• IT Act provisions;
• POCSO where a child is involved;
• other fact-specific offences.

Do not send further material in an attempt to “buy time”.

BNS Section 78 — Cyber Stalking

Section 78 includes, within its statutory gender-specific framework, repeated unwanted contact and monitoring of a woman's internet, email or other electronic communication.

A sextortion case may also involve:

• repeated new accounts;
• repeated phone numbers;
• monitoring social accounts;
• persistent communication after blocking;
• contacting friends/employer.

The exact statutory ingredients should be assessed rather than assuming every online threat automatically constitutes stalking.

Deepfake Pornography / Sexual Deepfake — The 2026 SGI Rules

India's 2026 IT Rules amendments specifically address synthetically generated information.

The Rules identify unlawful SGI including material containing:

• NCII;
• child sexual exploitative/abuse material;
• obscene material;
• pornographic material;
• sexually explicit material;
• bodily-privacy violations;
• deceptive misrepresentation of a person's identity or conduct.

Intermediaries offering generation tools are required to deploy reasonable and appropriate technical measures against unlawful SGI.

“But It Has an AI Label” — Does That Make It Legal?

No.

The Rules distinguish between:

UNLAWFUL SGI

and:

OTHER PERMISSIBLE SYNTHETIC CONTENT THAT MAY REQUIRE LABELLING / PROVENANCE.

A disclosure saying:

“AI GENERATED”

does not transform unlawful non-consensual sexual imagery into lawful content.

If the Victim Is Under 18 — Treat the Case Differently

A child case engages a significantly stricter framework.

Potential legislation includes:

• POCSO Act, 2012;
• IT Act Section 67B;
• BNS provisions;
• IT Rules concerning child sexual exploitative and abuse material.

POCSO includes provisions concerning:

• sexual harassment;
• use of children for pornographic purposes;
• storage-related conduct;
• mandatory reporting.

Do Not Download or Forward Child Sexual Material to “Preserve Proof”

Where the depicted person is a child, evidence preservation must be handled with particular care.

Do not repeatedly:

• download;
• forward;
• email;
• re-upload;
• circulate

the sexual material merely to create copies.

Instead preserve identifying information such as:

• URL;
• username;
• account ID;
• date/time;
• platform;

and urgently report it through appropriate law-enforcement and NCRP channels.

Evidence Preservation Before Takedown

The objective is:

PRESERVE ENOUGH TO PROVE WHAT HAPPENED WITHOUT UNNECESSARILY MULTIPLYING THE HARMFUL CONTENT.

Preserve, where appropriate:

• URL;
• username;
• profile URL;
• phone number;
• threat messages;
• timestamps;
• payment demand;
• UPI ID;
• bank account;
• cryptocurrency address;
• support ticket;
• platform complaint reference;
• screen recording showing navigation to the offending location;
• original threatening communication.

Do Not Delete the Sextortion Chat

The threatening conversation may establish:

• identity;
• intent;
• demand;
• threat;
• payment account;
• timeline;
• connection with publication.

Blocking may be necessary for safety, but preserve the evidentiary record first where reasonably possible.

Should You Warn Family, Employer or Friends?

Sometimes a controlled warning reduces the offender's leverage.

Depending upon the circumstances, the victim may inform trusted persons:

“Someone is using or threatening to circulate manipulated/private material. Please do not forward it. Preserve the sender details and inform me/police.”

Avoid asking recipients to send the intimate content back to you repeatedly.

What If the Content Is on Multiple Websites?

Create a URL matrix:

Platform	URL	Account	Reported	Status
___	___	___	___	___

This becomes useful for:

• platform complaints;
• NCRP;
• police;
• GAC;
• injunction applications;
• future mirrored URLs.

What If the Platform Removes One URL but Copies Keep Returning?

Ask specifically about:

• hash-based matching;
• duplicate/re-upload identification;
• repeat URL action;
• search de-indexing;
• preservation of uploader records.

The Government NCII SOP was specifically designed to address resurfacing rather than treating each URL as an entirely unrelated complaint.

GAC — When Platform Grievance Fails

Where a person is dissatisfied with the decision of an intermediary's Grievance Officer, the Grievance Appellate Committee may be available under Rule 3A.

The present GAC framework generally allows appeal within 30 days of communication of the Grievance Officer's decision.

The Government portal also recognises qualifying cases involving non-response after the intermediary grievance stage.

Remember:

GAC REVIEWS INTERMEDIARY GRIEVANCE ACTION. IT DOES NOT INVESTIGATE OR ARREST THE SEXTORTIONIST.

Can the Uploader Be Identified?

Potentially, depending upon:

• platform records;
• subscriber information;
• IP/login records;
• phone number;
• email;
• payment account;
• device evidence;
• lawful preservation/disclosure process.

Police investigation or a judicial disclosure direction may be required where the uploader uses an anonymous account.

Can Court Orders Be Used Against Anonymous Deepfake Accounts?

Indian courts can, in appropriate cases, grant urgent interim relief against:

• known defendants;
• anonymous John Doe / Ashok Kumar defendants;
• specific URLs;
• identified platform accounts.

Potential relief may include:

• injunction;
• takedown;
• continued inaccessibility;
• preservation;
• disclosure of account-registration information;
• restraint against future misuse.

2026 Indian Courts and Deepfake Injunctions

During 2026, Indian courts—particularly Delhi High Court— have continued to deal with unauthorised AI-generated, deepfake, face-morphed and voice-cloned material.

Interim orders in appropriate personality-rights matters have restrained unauthorised use and required specified platform content to be removed or disabled.

These cases demonstrate the availability of civil injunctive mechanisms.

However:

A CELEBRITY PERSONALITY-RIGHTS CASE IS NOT AUTOMATICALLY AN NCII PRECEDENT.

For intimate-image abuse, Rule 3(2)(b), the NCII SOP and applicable criminal/privacy law provide a more direct starting point.

One Stop Centres — Additional Assistance for Women

The Government's NCII SOP identifies One Stop Centres as one of the available victim-support pathways for women.

Assistance can include:

• NCRP reporting support;
• police-complaint assistance;
• legal assistance;
• psychological counselling;
• connection with DLSA / appropriate legal services.

Frequently Asked Questions

Someone made an AI nude/deepfake of me. What can I do?

Preserve the identifying URL/account evidence, file the platform's urgent intimate/morphed-content report, invoke the applicable Rule 3(2)(b) grievance, and consider NCRP/police action depending upon the facts.

What is the current deepfake/NCII takedown time in India?

For qualifying Rule 3(2)(b) content, the current period is two hours from receipt of the qualifying complaint.

Wasn't the rule 24 hours?

It previously was. The February 2026 amendment reduced the Rule 3(2)(b) period from 24 hours to two hours.

Does the old NCII SOP still say 24 hours?

The original 2025 SOP reflects the rule as it existed when issued. The current statutory Rule 3(2)(b) period is two hours.

What is NCII?

Non-Consensual Intimate Imagery broadly concerns intimate imagery made available without the depicted person's consent, including genuine or manipulated material within the applicable framework.

Is a sexual deepfake also NCII?

It can fall within the modern regulatory concern surrounding NCII, morphed imagery, synthetic content and bodily privacy, depending upon the exact material and circumstances.

I agreed to take the photograph. Can I still complain if my partner leaked it?

Yes. Consent to capture does not automatically mean consent to dissemination. For a female victim, BNS Section 77 expressly addresses this distinction.

Does Section 66E IT Act apply only to women?

No. Section 66E is framed in gender-neutral terms concerning the privacy of a person.

What is sextortion?

It generally describes coercive threats involving intimate material, often to obtain money, more images, sexual conduct or other concessions. The specific criminal sections depend upon the conduct.

Is sextortion automatically BNS Section 308 extortion?

Not in every case. Section 308 focuses on fear of injury that dishonestly induces delivery of property or valuable security. A threat seeking other conduct may engage different provisions.

What if I haven't paid the offender?

Preserve the threat and seek legal/cybercrime intervention. A threat itself may engage criminal-intimidation or other provisions depending upon the facts.

What if I already paid?

Preserve the UTR/UPI/bank evidence and consider immediate 1930, bank and NCRP reporting.

Should I send more images so the offender does not publish the first one?

No. Sending more intimate material can increase the offender's leverage and does not guarantee deletion of existing material.

Should I delete my Instagram/Facebook profile?

Not automatically. Secure the account and preserve relevant evidence first. Deleting a genuine account may remove useful evidence or communication history.

Should I forward the leaked image to my lawyer?

Use the minimum necessary and a secure evidence-handling approach. Often the URL, source account and properly preserved original material can be reviewed without repeatedly circulating the harmful content. Child material requires particularly strict handling.

Can the platform stop the same image from being uploaded again?

The Government NCII SOP contemplates hashing/crawler-based mechanisms for identifying and addressing known NCII and repeat uploads, subject to the applicable technical and legal framework.

Can Google/search engines remove the image from search results?

The NCII SOP contemplates de-indexing of flagged NCII by search-engine intermediaries. Source removal and search de-indexing are separate actions.

Can I file a complaint anonymously?

NCRP provides anonymous reporting for certain women/child sexually explicit crime categories. The appropriate reporting option depends upon the nature of the incident and the assistance/investigation sought.

What if the victim is a child?

POCSO and IT Act Section 67B require immediate examination. Do not circulate or repeatedly download child sexual material in an attempt to preserve evidence; promptly report it through appropriate channels.

Can police obtain the offender's IP address?

Potentially through lawful investigative processes and available platform/service-provider records. The existence and usefulness of such records are fact-specific.

Can a court order Meta, Google or another intermediary to provide uploader details?

In an appropriate proceeding, courts may make preservation or disclosure directions concerning available subscriber or account information, subject to law, jurisdiction and necessity.

Can I obtain an injunction even if I do not know the offender's real name?

Potentially. Indian litigation sometimes uses John Doe/Ashok Kumar defendants where the infringer is not yet identified.

Can a lawyer guarantee a two-hour removal?

No. The statute creates the relevant intermediary obligation for qualifying complaints, but actual platform action, factual classification, technical availability and subsequent litigation remain fact-specific.

Emergency Checklist — The First Hour

1. Preserve the URL/account/number.
2. Preserve the threat.
3. Preserve payment details.
4. Do not send additional intimate material.
5. Secure your email and social accounts.
6. Enable two-factor authentication.
7. File in-app intimate/morphed-content report.
8. File the appropriate Rule 3(2)(b) grievance.
9. Report cybercrime where criminal conduct exists.
10. If money has moved, contact 1930 and the bank immediately.
11. Preserve every complaint/ticket number.
12. Prepare a URL/re-upload tracker.

Why Clients May Consider Advocate Ankit Kumar Singh for Deepfake, Sextortion and NCII Matters

1. Emergency Classification

The first task is separating:

DEEPFAKE vs NCII vs SEXTORTION vs CYBER FINANCIAL FRAUD vs CHILD-SAFETY CASE.

2. 2026 Rule 3(2)(b) Strategy

A qualifying complaint should specifically identify the urgent two-hour statutory framework rather than being submitted only as a generic “community standards” report.

3. Platform + Grievance Officer Escalation

The response may involve both:

IN-APP REPORT + FORMAL INTERMEDIARY GRIEVANCE.

4. NCII Repeat-Upload Strategy

The problem should be analysed beyond one URL, including hashing, mirrors, repeat accounts and search indexing.

5. Cybercrime Strategy

Where threats, hacking, identity misuse, financial fraud or unauthorised dissemination occur, police/NCRP remedies may operate independently of platform removal.

6. Sextortion Money-Trail Analysis

Where payment has occurred:

THREAT → DEMAND → UPI / ACCOUNT → UTR → BENEFICIARY → FOLLOW-ON TRANSFER

can become important.

7. Digital-Evidence Preservation

The case should preserve enough evidence for investigation without unnecessarily multiplying circulation of intimate material.

8. Deepfake / Forensic Assessment

Where specialist technical analysis is required, Advocate Ankit Kumar Singh can identify the evidentiary questions requiring expert examination and analyse the resulting technical material for litigation.

9. GAC Escalation

Where the intermediary grievance process fails, Rule 3A appellate remedies can be examined.

10. Court Injunction & Anonymous-Uploader Strategy

Where required, appropriate proceedings may examine:

• injunction;
• takedown;
• preservation;
• future/mirror URLs;
• account disclosure;
• John Doe/Ashok Kumar relief.

11. Document-First Approach

For Advocate Ankit Kumar Singh, the sequence is:

WHAT CONTENT? → GENUINE OR DEEPFAKE? → CONSENT? → WHERE HOSTED? → URL? → THREAT? → MONEY? → VICTIM AGE? → 2-HOUR RULE? → NCRP / POLICE? → HASH / RE-UPLOAD? → GAC? → COURT?

No takedown, identification, arrest or litigation outcome is guaranteed.

Related Cyber Law Research

• Instagram, Facebook or WhatsApp Account Hacked? Fake Profile, Impersonation and Takedown Remedies in another Indian jurisdiction 2026
• Social Media Account Suspended or Permanently Disabled in India? LinkedIn, Instagram, YouTube & Creator Accounts: Notice, Appeal, GAC, Livelihood and Legal Remedies 2026
• WhatsApp Chats, Screenshots, UPI Records and Call Details as Evidence: Complete Digital-Evidence Guide for another Indian jurisdiction Cases
• Cyber Police Notice or Summons in another Indian jurisdiction: What to Do Before Appearing and Which Documents to Carry
• Digital Arrest Scam in another Indian jurisdiction: Immediate Legal Steps, 1930 Complaint, Money Recovery and Evidence Guide 2026
• Cyber Crime Case in another Indian jurisdiction 2026: Online Fraud, Money Recovery, Evidence & FIR Defence
• View All Cyber Law, Digital Evidence & Online Safety Research

Primary Research Sources

• Information Technology Act, 2000 — Sections 66E, 67, 67A and 67B.
• IT Rules, 2021 — updated through the February 2026 amendments.
• Rule 3(2)(b) — urgent intimate, sexual, impersonating and morphed-content grievance.
• MeitY — Standard Operating Procedure to curtail dissemination of NCII.
• MeitY / PIB — 2026 synthetically generated information and deepfake safeguards.
• National Cyber Crime Reporting Portal / I4C.
• Grievance Appellate Committee — Rule 3A appellate mechanism.
• Bharatiya Nyaya Sanhita, 2023 — Sections 77, 78, 308 and 351 where applicable.
• Protection of Children from Sexual Offences Act, 2012.
• Current 2026 Indian High Court jurisprudence concerning deepfake, AI-generated and personality-rights misuse.

Conclusion

A deepfake or intimate-image case should not be handled by spending days arguing with an anonymous offender while the material continues spreading.

The correct sequence is:

PRESERVE → SECURE → TAKEDOWN → REPORT → TRACE → PREVENT RE-UPLOAD → ESCALATE.

India's 2026 framework now gives qualifying victims an especially important tool:

RULE 3(2)(b): 2-HOUR TAKEDOWN / DISABLEMENT FRAMEWORK.

But takedown is only one component. A serious case may simultaneously require:

CYBERCRIME COMPLAINT + FINANCIAL-FRAUD RESPONSE + DIGITAL-EVIDENCE PRESERVATION + GAC + INJUNCTION + UPLOADER IDENTIFICATION.

For Advocate Ankit Kumar Singh, the most important questions are:

IS THE CONTENT REAL OR SYNTHETIC? → WAS THERE CONSENT? → WAS THERE CONSENT TO DISTRIBUTION? → IS THERE A THREAT? → HAS MONEY BEEN DEMANDED? → IS THE VICTIM A CHILD? → WHERE IS THE CONTENT HOSTED? → WHICH URGENT TAKEDOWN RULE APPLIES? → HOW WILL RE-UPLOAD BE STOPPED? → HOW CAN THE OFFENDER BE IDENTIFIED?

Disclaimer: This article is published for legal education and general professional information. “Deepfake”, “sextortion” and “NCII” describe overlapping but legally distinct situations. The applicable criminal offences and remedies depend upon the actual material, consent, age of the depicted person, threats, financial demands, mode of publication, platform and evidence. The two-hour Rule 3(2)(b) period applies to complaints falling within the specific statutory category and should not be represented as a universal two-hour removal guarantee for every objectionable online post. The original 2025 MeitY NCII SOP reflected the then-applicable 24-hour Rule 3(2)(b) period; the Rule itself was amended in February 2026 to provide the present two-hour period. Where a child is depicted, POCSO and child-sexual-material provisions require special handling. Intimate child material should not be downloaded, forwarded or repeatedly reproduced merely for informal evidence preservation. No guarantee is made regarding platform takedown, re-upload prevention, identification of an anonymous uploader, FIR registration, arrest, recovery of money, GAC relief, injunction, damages or any other legal result.

Related Delhi legal guides

Economic-offence proceedings · White-collar crime defence · SFIO investigation guide

Official starting points

Prevention of Money-laundering Act, 2002 — India Code · Directorate of Enforcement — official website

Document-first assessment

Start with the latest legal instrument and next deadline

Organise the current summons or order, case identifiers, a dated chronology and the transaction or property record before seeking case-specific advice.

Prepare for consultation