India has a cybercrime problem that is growing faster than our ability to see it. What approaches could bring it to near-zero?
Millions of complaints, thousands of criminal enterprises, and billions in losses are recorded across different systems. Fragmented data, individual responses against organised criminal enterprise.
25% Surge, from 19.19 lakh in 2024.
Siphoned out of citizen wallets, small business working capital, and family retirement corpuses. These are reported numbers. The actual scale is likely much larger.
We lost the equivalent of four full years of undergraduate college tuition fees for approximately 1.12 crore university students, assuming a standard benchmark of ₹50,000 per year.
The annual financial loss is way more than what many states in India spend in a year.
Every day in 2025, India lost entire day’s wages of more than 20.6 lakh MGNREGA workers. ₹61.6 crore at the national notified wage rate of ₹298.80 per day.
Every day, India loses an amount to reported financial cyber fraud equal to 86% of what IndiGo, the country’s largest airline, spends on aircraft fuel in a day.
Indians surveyed spend 102 hours a year determining whether messages, alerts, calls and notifications are real or fake. What was once an occasional precaution has become a recurring time cost of being online. 63% say their personal information is more at risk today than a year ago.
Cybercrime against women escalated sharply in 2025, surging by 59% from 48,335 in 2024. A parallel spike of 45,832 complaints of targeted cyberbullying, stalking, and digital blackmail.
The cost of cybercrime does not end with money. A 2026 study of Indian financial-cybercrime victims found that many experienced fear, distress, shame, sleeplessness, and loss of peace of mind long after the financial loss. Some also reported strained relationships and diminished trust in institutions.
Cybercrime generates data across banks, telecom operators, platforms and law-enforcement systems. Each institution primarily sees the data created within its own system.
Every cybercrime leaves traces across different systems. But recognising that these records refer to the same underlying activity is difficult when systems remain separate.
One crime, four realities. Each institution primarily sees the data created within its own system, with no shared view of the whole.
Every complaint, account, device, transaction and investigation leaves something behind. But that knowledge is often held in separate systems and separate cases. A shared & connected cyber memory would allow new incidents to be understood against what has already been seen.
This is a work in progress spearheaded at the Center for Digital Public Goods (CDPG), IIM Bangalore with iSPIRT and volunteers from the ecosystem. If you work on cybercrime, digital infrastructure, public systems, or regulatory policy, and have ideas, experience, research, questions, or perspectives that could help shape the work, get in touch.
Get in Touch →We are actively collaborating with state cyber police leadership, commercial banking security wings, telecom architecture teams, and digital public goods researchers to develop open specifications for India’s shared cyber memory layer.
All visual media and video backgrounds utilized under verified free-to-use licenses from Pexels License and Unsplash License.