Table of Contents
Nepal has seen a sharp rise in cyber crime cases over the past decade, with online fraud, hacking, identity theft, and social media harassment now among the most commonly reported offences at police stations across the country. The Electronic Transactions Act 2063 (2006) remains the primary law governing cyber crime in Nepal, supported by provisions in the National Penal Code 2074 (2017) and the Privacy Act 2075 (2018). Despite growing public awareness, many victims still do not know how to report cyber crime or what legal protections exist.
As of April 2026, the Nepal Police Cyber Bureau handles thousands of complaints annually, ranging from unauthorized access to computer systems to online defamation and financial fraud. This guide explains the legal framework, the types of cyber offences recognized under Nepali law, the penalties involved, and the step-by-step process for filing a cyber crime complaint.
Cyber crime in Nepal is primarily governed by the Electronic Transactions Act 2063 (2006), which defines offences such as hacking, data theft, computer fraud, and publication of illegal content. Penalties range from fines of NPR 10,000 to NPR 300,000 and imprisonment of up to five years depending on the offence. Victims can file complaints at the Nepal Police Cyber Bureau or any local police station by filing an FIR. The limitation period for filing a complaint is only 35 days from the date of knowledge of the offence.
Over 9 years helping couples navigate Nepal's marriage laws — since 2016.
Speak with a court marriage lawyer today →
Legal Framework for Cyber Crime in Nepal
Nepal does not have a single comprehensive cyber crime statute. Instead, cyber offences are addressed through multiple laws that together form the legal framework for digital crimes. Understanding which law applies is essential before filing a complaint or defending yourself against an accusation.
Electronic Transactions Act 2063 (2006)
This is Nepal's primary cyber law. Enacted in BS 2063 (2006 AD), it was modelled on the UNCITRAL Model Law on Electronic Commerce and India's Information Technology Act 2000. The Act covers electronic records, digital signatures, cyber offences, and the establishment of the Information Technology Tribunal. Chapter 9 (Sections 44 to 57) specifically defines computer-related crimes and their punishments.
Key provisions include piracy or destruction of computer source code (Section 44), unauthorized access to computer systems (Section 45), damage to computer systems and data (Section 46), and publication of illegal materials in electronic form (Section 47). The Act also established the Controller of Certification Authority to regulate digital signatures under Section 32.
National Penal Code 2074 (2017)
The National Penal Code 2074 contains several provisions relevant to cyber crime. Section 286 addresses defamation, which applies to online defamation on social media. Section 253 covers extortion through fear or threat, which is increasingly relevant in cyber harassment and online blackmail cases. The Code's provisions on forgery (Sections 276 and 277) also apply to digital document forgery and the possession or use of forged electronic records.
Privacy Act 2075 (2018)
Nepal's Privacy Act 2075 protects personal data and privacy rights. Section 3 establishes the right to privacy as a fundamental right. Section 11 defines confidential personal information — including biometric data, medical records, financial statements, bank details, and identity documents — and prohibits unauthorized collection, storage, or use of such data. Violations carry penalties of imprisonment up to three years or a fine up to NPR 30,000, or both, under Section 31 of the Act. This law is increasingly relevant in cases involving unauthorized data collection, doxxing, and revenge content online.
National Information Technology Policy 2072 (2015)
While not a penal statute, this policy guides the government's approach to cybersecurity, digital literacy, and IT governance. It supports the development of a secure digital infrastructure and informs legislative amendments related to technology crimes.
Types of Cyber Crime Under Nepali Law
The Electronic Transactions Act 2063 and the National Penal Code 2074 recognize multiple categories of cyber offences. Here are the most common types reported in Nepal.
| Type of Cyber Crime | Governing Law | Section | Maximum Penalty |
|---|---|---|---|
| Piracy or destruction of computer source code | Electronic Transactions Act 2063 | Section 44 | Fine up to NPR 200,000 or 3 years imprisonment or both |
| Unauthorized access (hacking) | Electronic Transactions Act 2063 | Section 45 | Fine up to NPR 200,000 or 3 years imprisonment or both |
| Damage to computer systems | Electronic Transactions Act 2063 | Section 46 | Fine up to NPR 200,000 or 3 years imprisonment or both |
| Publishing illegal content electronically | Electronic Transactions Act 2063 | Section 47 | Fine up to NPR 100,000 or 5 years imprisonment or both |
| Computer fraud (digital signatures, ATM fraud) | Electronic Transactions Act 2063 | Section 52 | Fine up to NPR 100,000 or 2 years imprisonment or both |
| Online defamation | National Penal Code 2074 | Section 286 | Fine up to NPR 30,000 or 2 years imprisonment |
| Cyber extortion / blackmail | National Penal Code 2074 | Section 253 | Up to 7 years imprisonment |
| Privacy violation / data theft | Privacy Act 2075 | Section 31 | Fine up to NPR 30,000 or 3 years imprisonment or both |
| Digital document forgery | National Penal Code 2074 | Sections 276–277 | Fine up to NPR 30,000 or 3 years imprisonment |
Section 47 of the Electronic Transactions Act is one of the most frequently invoked provisions. It covers the publication or display of any material in electronic form that is deemed obscene, defamatory, or against public morality. This section has been used in cases involving revenge content, hate speech on social media, and the circulation of private images without consent.
How to Report Cyber Crime in Nepal
Reporting cyber crime promptly is critical because digital evidence can be altered or deleted quickly. Nepal has dedicated institutions for handling cyber crime complaints, and the process has become more accessible in recent years. The 35-day limitation period under the Electronic Transactions Act makes speed essential.
Step 1: Preserve Digital Evidence
Before filing a complaint, collect and preserve all digital evidence. Take screenshots of threatening messages, fraudulent transactions, fake profiles, or any other evidence of the crime. Save URLs, email headers, transaction IDs, and any communication with the perpetrator. Do not delete any messages or block the offender before securing evidence, as this may make investigation more difficult.
Step 2: File an FIR at the Police Station
You can file a First Information Report (FIR) at your nearest police station or directly at the Nepal Police Cyber Bureau located in Bhotahiti, Kathmandu. The FIR should include a detailed description of the offence, the evidence you have collected, and any information about the suspected perpetrator. Under the State Cases Act 2049, the police are obligated to register your FIR and begin investigation.
Step 3: Nepal Police Cyber Bureau Investigation
The Nepal Police Cyber Bureau is the specialized unit responsible for investigating cyber crimes in Nepal. Established in 2018 (2075 BS), it operates as an independent bureau under Nepal Police, headed by a Deputy Inspector General of Police. The Bureau has trained personnel and forensic tools to trace IP addresses, recover deleted data, analyze digital devices, and coordinate with internet service providers and social media platforms.
After receiving your complaint, the Bureau may request access to your devices, ask for additional evidence, or issue directives to internet service providers to identify suspects. Investigation timelines vary depending on the complexity of the case.
Step 4: Filing a Case at the Information Technology Tribunal
For offences under the Electronic Transactions Act 2063, cases are heard by the Information Technology Tribunal established under the Act. The Tribunal is a three-member body consisting of one member each from the fields of law, information technology, and commerce. The Law Member serves as the chairperson. All three members are appointed by the Government of Nepal.
The Tribunal functions as the court of first instance for cyber crimes defined under the Act. Appeals from the Tribunal go to the Information Technology Appellate Tribunal, which is also a three-member body with the same composition. If the offence falls under the National Penal Code 2074, the case is heard in the regular District Court system.
Facing a cyber crime accusation or need to file a complaint? Contact our legal team for professional guidance on your rights and options.
Penalties for Cyber Crime in Nepal
The Electronic Transactions Act 2063 prescribes specific penalties for different categories of cyber offences. These penalties have remained unchanged since 2006 and are considered by many legal experts to be outdated given the severity of modern cyber crimes.
| Offence | Section | Fine (NPR) | Imprisonment |
|---|---|---|---|
| Piracy or destruction of computer source code | 44 | Up to 200,000 | Up to 3 years |
| Unauthorized computer access | 45 | Up to 200,000 | Up to 3 years |
| Damage to computer systems | 46 | Up to 200,000 | Up to 3 years |
| Publishing illegal electronic material | 47 | Up to 100,000 | Up to 5 years |
| Breach of confidentiality | 48 | Up to 10,000 | Up to 2 years |
| Cyber terrorism | 49 | Up to 300,000 | Up to 5 years |
| Abetting cyber crime | 51 | Half of principal penalty | Half of principal term |
| Computer fraud (digital signatures, ATM) | 52 | Up to 100,000 | Up to 2 years |
Section 49 on cyber terrorism carries the harshest penalty. It covers acts committed with the intent to threaten national security, sovereignty, or public order through computer systems. This includes attacks on critical infrastructure, government systems, and financial networks.
Section 52 specifically addresses computer fraud — including the fraudulent creation or use of digital signature certificates and unauthorized use of ATM cards or bank account information. The financial benefit obtained through fraud must be recovered and returned to the victim.
Key Takeaway: The 35-day limitation period under Section 55 of the Electronic Transactions Act is much shorter than most criminal offences. If you delay, your case under the Act may be time-barred even if the evidence is strong.
Rights of the Accused in Cyber Crime Cases
If you are accused of a cyber crime in Nepal, you have constitutional and legal rights that must be respected throughout the investigation and trial process. Many people are unaware that an accusation alone does not mean guilt, and the law provides important safeguards.
- Right to legal representation: Under Article 20 of the Constitution of Nepal 2072, every accused person has the right to consult and be defended by a lawyer of their choice from the time of arrest
- Right against self-incrimination: You cannot be compelled to be a witness against yourself under Article 20(5) of the Constitution
- Right to bail: Most cyber offences under the Electronic Transactions Act are bailable. The accused can apply for bail during investigation or trial
- Right to know the charges: You must be informed of the specific offence you are accused of at the time of arrest
- Right to fair treatment during arrest: Police must follow the arrest procedures under the State Cases Act 2049 and cannot detain you beyond 24 hours without a court order
- Right to appeal: Decisions of the Information Technology Tribunal can be appealed to the Information Technology Appellate Tribunal within 35 days of the order
From our experience handling cyber crime consultations, we have seen cases where individuals were wrongly accused based on IP address evidence alone, without considering that multiple users may share the same network. Digital evidence requires careful forensic analysis, and accused persons should always seek legal counsel before making any statement to police.
Common Cyber Crimes Reported in Nepal
Based on data from the Nepal Police Cyber Bureau and our experience advising clients, the following are the most frequently reported cyber crimes in Nepal as of 2083 BS (2026 AD).
Social Media Harassment and Defamation
Fake profiles, threatening messages, morphed images, and defamatory posts on Facebook, TikTok, and other platforms constitute the largest share of cyber crime complaints. These cases are typically prosecuted under Section 47 of the Electronic Transactions Act or Section 286 of the National Penal Code 2074.
Online Financial Fraud
Phishing scams, fake e-commerce sites, and unauthorized digital wallet transactions have increased significantly. Victims often lose money through fraudulent links, SIM swap attacks, or fake customer service calls. These offences fall under Section 52 (computer fraud) of the Electronic Transactions Act, which specifically covers fraudulent use of digital signatures, ATM cards, and unauthorized access to bank accounts.
Hacking and Unauthorized Access
Unauthorized access to email accounts, social media profiles, banking systems, and government websites is prosecuted under Section 45 of the Electronic Transactions Act. Even accessing a computer system without authorization, without causing damage, is a criminal offence.
Revenge Content and Privacy Violations
The non-consensual sharing of intimate images or private information is a growing concern. These cases invoke both Section 47 of the Electronic Transactions Act and the Privacy Act 2075. Married couples going through divorce often face such issues, making it critical to understand both family law and cyber law protections. If you are navigating a court marriage in Nepal or family dispute, be aware that digital evidence from such violations is admissible in court.
The Information Technology Tribunal: How It Works
The Information Technology Tribunal was established under the Electronic Transactions Act 2063 to handle cases arising under the Act. It is a three-member body appointed by the Government of Nepal, consisting of one member each from the fields of law, information technology, and commerce. The Law Member serves as the chairperson of the Tribunal.
| Feature | Details |
|---|---|
| Composition | 3 members — Law (chair), IT, and Commerce |
| Appointed by | Government of Nepal |
| Jurisdiction | All offences under the Electronic Transactions Act |
| Location | Kathmandu (centralized) |
| Appeal body | Information Technology Appellate Tribunal (within 35 days) |
| Limitation period | Complaint must be filed within 35 days of knowledge of the offence (Section 55) |
| Compensation | Tribunal can order compensation to the victim |
Section 55 imposes a 35-day limitation period for filing complaints under the Electronic Transactions Act. This is significantly shorter than limitation periods for other criminal offences, so prompt action is essential. If you miss this deadline, your case under the Act may be barred, although offences under the National Penal Code 2074 have longer limitation periods.
How to Protect Yourself from Cyber Crime
Prevention is always better than pursuing legal remedies after the fact. Here are practical measures based on common vulnerability patterns seen in Nepal.
- Use strong, unique passwords for each online account and enable two-factor authentication wherever available
- Verify before clicking any links in emails, SMS, or social media messages claiming to be from banks, government agencies, or service providers
- Do not share OTPs, PINs, or passwords with anyone, including people claiming to be bank employees or customer support
- Keep software updated on all devices, including mobile phones, to patch known security vulnerabilities
- Review privacy settings on social media platforms regularly and limit who can see your personal information
- Be cautious with public WiFi networks, especially when accessing banking or financial services
- Report suspicious activity to the Nepal Police Cyber Bureau immediately — remember, you only have 35 days to file a complaint under the Electronic Transactions Act
Need legal advice about a cyber crime case or want to file a case in Nepal? Contact our experienced legal team for a confidential consultation.
Conclusion
Cyber crime law in Nepal continues to evolve as digital adoption grows across the country. The Electronic Transactions Act 2063 provides the foundational legal framework, but victims and accused persons alike must understand their rights and obligations under this law, the National Penal Code 2074, and the Privacy Act 2075. The 35-day limitation period under the Act is one of the shortest in Nepali criminal law — acting quickly can make the difference between a successful case and a time-barred one.
Our legal team has experience advising clients on cyber crime matters, digital evidence, and related criminal proceedings in Nepal. Contact us today for expert legal assistance. Last reviewed: April 2026.
Frequently Asked Questions
Cyber crime in Nepal refers to criminal offences committed using computers or the internet, as defined by the Electronic Transactions Act 2063. This includes unauthorized access, computer fraud, publishing illegal electronic content, data theft, source code piracy, and cyber terrorism.
The Electronic Transactions Act 2063 (2006) is the primary law. Additional provisions exist in the National Penal Code 2074 for online defamation and extortion, and the Privacy Act 2075 for data protection violations.
File an FIR at the Nepal Police Cyber Bureau in Bhotahiti, Kathmandu, or at your nearest police station. Bring screenshots, URLs, transaction records, and any digital evidence. Act within 35 days of discovering the offence.
Under Section 45 of the Electronic Transactions Act 2063, unauthorized access to a computer system carries a fine of up to NPR 200,000 or imprisonment of up to three years, or both.
Yes. Online defamation is punishable under Section 47 of the Electronic Transactions Act 2063 (up to five years) and Section 286 of the National Penal Code 2074 (up to two years), depending on the provision applied.
The Information Technology Tribunal is a three-member body (law, IT, and commerce) appointed by the Government of Nepal under the Electronic Transactions Act 2063. It hears all cyber crime cases arising under the Act. Appeals go to the Information Technology Appellate Tribunal.
35 days from the date the victim becomes aware of the offence, under Section 55 of the Electronic Transactions Act 2063. Missing this deadline bars your case under the Act.
Yes. Most cyber offences under the Electronic Transactions Act 2063 are bailable. The accused can apply for bail during investigation or trial. The court considers offence severity, evidence strength, and flight risk.
Yes. Non-consensual sharing of private images is punishable under Section 47 of the Electronic Transactions Act 2063 (up to five years imprisonment) and Section 31 of the Privacy Act 2075 (up to three years imprisonment).
Section 49 of the Electronic Transactions Act 2063 defines cyber terrorism as using computer systems to threaten national security, sovereignty, or public order. It carries the harshest penalty: a fine up to NPR 300,000 or imprisonment up to five years, or both.
The Nepal Police Cyber Bureau is in Bhotahiti, Kathmandu. It operates as an independent bureau under Nepal Police, headed by a Deputy Inspector General, and handles cyber crime complaints nationwide.
The Nepal Police Cyber Bureau accepts complaints in person at its Bhotahiti office. You can also file an initial report through the Nepal Police website or helpline. Formal investigation requires an in-person FIR filing with original evidence.
Yes. Section 11 of the Privacy Act 2075 defines confidential personal information and prohibits unauthorized collection, storage, or use. Violations under Section 31 carry imprisonment up to three years or a fine up to NPR 30,000, or both.
Collect screenshots, URLs, email headers, message records, transaction IDs, and communications with the offender. Preserve original digital evidence without alterations. The Cyber Bureau may also request access to your devices for forensic analysis.
Yes. Decisions of the Information Technology Tribunal can be appealed to the Information Technology Appellate Tribunal within 35 days. Cases under the National Penal Code 2074 decided in District Courts follow the standard appeal process to the High Court.
Court Marriage in Nepal Pvt. Ltd. is Nepal's first registered law firm for court marriage services. Since 2016, our Nepal Bar Council-registered advocates have helped 2,000+ couples from 50+ countries with marriage registration, document preparation, and legal consultation. Whether you are a Nepali citizen or a foreign national, contact us today for confidential legal assistance.
