Introduction:
The Allahabad High Court, Lucknow Bench, in Krishna Kant Pandey and Another v. State of U.P. through Principal Secretary, Home, Lucknow and Others, has prima facie held that merely creating an email ID in the name of another person would not, by itself, constitute an offence of “identity theft” under Section 66-C of the Information Technology Act, 2000. The Division Bench comprising Justice Abdul Moin and Justice Pramod Kumar Srivastava examined the scope of Section 66-C and observed that the provision specifically identifies an “electronic signature”, “password” or “any other unique identification feature” of another person, but does not expressly refer to an email ID.
The observation arose in a writ petition filed by the petitioners challenging an FIR registered against them under Section 356(2) of the Bharatiya Nyaya Sanhita and Section 66-C of the Information Technology Act. The controversy before the Court was not simply whether the petitioners had created an email account in somebody else’s name. The more important legal question was whether such conduct, without anything more, could satisfy the statutory ingredients of identity theft under Section 66-C.
According to the allegations contained in the FIR, the petitioners had allegedly created an email ID in the name of a third person and thereafter used that email account for sending what were described as fake complaints to several individuals and authorities. The complaints were allegedly sent to various persons, including the Lok Ayukta. The informant treated the creation and use of the email ID as an unlawful assumption of another person’s identity and invoked Section 66-C of the Information Technology Act.
Section 66-C is a specific penal provision dealing with identity theft in the electronic environment. It provides punishment where a person fraudulently or dishonestly makes use of the electronic signature, password or any other unique identification feature of another person. The provision was introduced to address forms of digital misuse in which a person’s identifying electronic credentials are appropriated and dishonestly used by someone else.
The petitioners approached the High Court contending that the allegations, even if taken at their face value, did not disclose an offence under Section 66-C. Their central submission was based on the language employed by Parliament in the provision. According to them, an email ID cannot automatically be equated with an electronic signature, password or unique identification feature contemplated by Section 66-C. Merely opening an email account using another person’s name, they argued, was not sufficient to bring the conduct within the penal provision.
The petitioners further contended that there was no statutory prohibition preventing a person from creating an email ID using another person’s name. They argued that the act alleged in the FIR did not involve obtaining or using any password, electronic signature or other legally recognized unique identification credential belonging to the third person. Consequently, according to them, the essential ingredients of Section 66-C were absent.
The respondents took a different position. They argued that the petitioners had knowingly created an email ID in the name of another person and were thereafter using that account to send false communications and complaints. According to the respondents, such deliberate use of another person’s identity in the electronic sphere amounted to use of that person’s “unique identification feature” and therefore fell within the scope of Section 66-C.
The High Court was therefore required to examine whether the expression “unique identification feature” could be interpreted broadly enough to include an email ID, particularly where the email account was allegedly created in another person’s name and used for sending communications. The question was considered at the stage of examining the challenge to the FIR, and the Court consequently confined itself to a prima facie assessment rather than finally determining the criminal liability of the accused.
The petitioners also raised a separate contention concerning the allegation of criminal defamation. They relied upon the Supreme Court’s decision in Subramanian Swamy v. Union of India, submitting that an offence of criminal defamation cannot ordinarily be set in motion merely through registration of an FIR and that the statutory procedure requires a complaint by the aggrieved person. The High Court recorded the submission but did not finally adjudicate that issue at this stage.
After considering the rival submissions, the Division Bench found prima facie substance in the petitioners’ challenge to the invocation of Section 66-C. The Court observed that where the legislature had consciously specified “electronic signature”, “password” and “unique identification feature”, the Court could not, at the preliminary stage, simply add “email ID” to the statutory language when Parliament had not expressly included it.
The High Court consequently stayed the impugned FIR and directed that no coercive action or other action be taken against the petitioners by the authorities pursuant to the FIR until further orders. The matter was directed to be placed before the appropriate Bench after the respondents filed their counter-affidavits.
Arguments of the Parties:
The petitioners challenged the FIR principally on the ground that the allegations did not satisfy the ingredients of Section 66-C of the Information Technology Act. Their counsel, Anuj Dayal and Ankit Kumar Trivedi, submitted that the provision was specifically worded and that its operation could not be expanded beyond the expressions used by Parliament.
According to the petitioners, Section 66-C criminalises the fraudulent or dishonest use of another person’s electronic signature, password or other unique identification feature. The statutory language, therefore, requires something more than simply using another person’s name while creating an email account. The petitioners maintained that an email ID is merely an electronic address through which a person may send and receive communications and is conceptually different from a password or an electronic signature.
The petitioners argued that the prosecution could not establish an offence under Section 66-C merely by alleging that an email account had been created in the name of another individual. There was no allegation, according to their submission, that the petitioners had obtained or used the password belonging to the third person, electronically signed a document in that person’s name, or appropriated some other unique electronic credential belonging to that person.
The significance of this distinction was emphasized by the petitioners because Section 66-C is a penal provision. They argued that criminal liability must be founded upon conduct that clearly falls within the language of the statute. A provision creating a criminal offence cannot be expanded by interpretation so as to include conduct that Parliament itself has not expressly made punishable.
The petitioners further submitted that there was no legal bar against creating an email ID in another person’s name. While the subsequent use of such an account might, depending on the facts, potentially attract some other criminal or civil consequences, that did not automatically mean that Section 66-C had been violated. The ingredients of the particular offence had to be independently established.
They therefore urged the High Court to examine the FIR on the basis of the specific offence invoked against them rather than treating the alleged misuse of an email ID as sufficient by itself to constitute identity theft. Their contention was that the FIR mechanically equated the use of another person’s name with the use of that person’s unique identification feature.
The respondents, however, opposed the writ petition and sought to sustain the criminal proceedings. Counsel appearing for respondent no. 4, including Ashish Gautam and Sumit Kumar Ojha, argued that the conduct alleged against the petitioners was deliberate rather than accidental. They submitted that the petitioners had knowingly created an email ID using the name of a third person and thereafter used it for transmitting false complaints and messages.
The respondents argued that the expression “unique identification feature” in Section 66-C should not be interpreted narrowly. In their submission, an email ID can operate as an identifying feature of a person in the digital environment, particularly when it is deliberately created and used in another person’s name. They contended that the petitioners were effectively representing themselves through an electronic identity belonging to someone else.
The respondents also emphasized the alleged use of the email account for sending complaints to public authorities, including the Lok Ayukta. According to them, the alleged conduct was not confined to the creation of an email account. It involved the subsequent use of that account for communications which were allegedly intended to be understood as originating from the person whose name had been used.
On that basis, the respondents submitted that the conduct could amount to identity theft and that the investigation should be permitted to continue. They argued that the Court should not conduct a detailed examination of evidence at the stage of considering a challenge to the FIR, particularly when the allegations disclosed deliberate misuse of another person’s identity.
The respondents’ position was essentially that the expression “unique identification feature” should be given a technologically neutral and purposive interpretation. Since digital communication has evolved considerably after the enactment of the Information Technology Act, they argued that the statutory expression should not be confined only to traditional forms of electronic identification.
The petitioners, however, maintained that such an interpretation would effectively enlarge the scope of a penal provision. They contended that there is an important distinction between interpreting existing statutory language in the light of technological developments and adding an entirely new category to the offence. According to them, if Parliament intended an email ID to be expressly treated as an identification feature for the purpose of Section 66-C, it could have said so.
A further submission was advanced regarding the allegation of criminal defamation. The petitioners relied upon the Supreme Court’s judgment in Subramanian Swamy v. Union of India and argued that criminal defamation is governed by a specific procedure under the Code of Criminal Procedure and cannot ordinarily be initiated by registration of an FIR. They submitted that the aggrieved person must approach the competent Magistrate through a complaint in accordance with the prescribed procedure.
The High Court recorded this submission but did not finally pronounce upon it in the present proceedings. The immediate question before the Bench was whether the FIR, insofar as it invoked Section 66-C of the Information Technology Act, disclosed sufficient grounds to justify continuation of the criminal process.
The rival arguments thus presented two different approaches to the interpretation of Section 66-C. The respondents invited the Court to adopt a broad and technology-oriented understanding of “unique identification feature”, whereas the petitioners urged a strict interpretation consistent with the actual words enacted by Parliament. The High Court’s prima facie view favoured the latter approach at this stage.
Court’s Judgment:
The Allahabad High Court found prima facie merit in the petitioners’ challenge and stayed the impugned FIR. The Division Bench comprising Justice Abdul Moin and Justice Pramod Kumar Srivastava focused closely on the statutory language of Section 66-C of the Information Technology Act.
The Court’s central observation was that Parliament had expressly identified the forms of electronic identity whose fraudulent or dishonest use would attract Section 66-C. The provision refers to an “electronic signature”, a “password” and “any other unique identification feature” of another person. The Bench noted that the legislature had not expressly included the words “e-mail ID” in the provision.
This textual distinction formed the foundation of the Court’s prima facie reasoning. The Bench observed that once the legislature had consciously used particular expressions in a penal provision, the Court could not, at the preliminary stage, assume that every form of digital identity automatically fell within those expressions.
The Court specifically characterized the respondents’ attempt to treat the email ID as a “unique identification feature” as prima facie “fallacious and misconceived.” The observation indicates that the Court was not persuaded that an email address, merely because it identifies an account or is associated with a particular name, necessarily possesses the legal characteristics contemplated by Section 66-C.
The Court’s reasoning is rooted in the basic principle of criminal statutory interpretation that penal provisions must be applied according to their legislative language. A person cannot ordinarily be subjected to criminal liability merely because the alleged conduct appears undesirable or capable of causing harm. The conduct must fall within the ingredients of the offence created by the legislature.
In the present case, the FIR alleged that the petitioners created an email ID in the name of a third person. But the Court found that this allegation, standing alone, did not establish that the petitioners had fraudulently or dishonestly used the third person’s electronic signature, password or other unique identification feature within the meaning of Section 66-C.
The Court therefore drew an important distinction between using another person’s name and using another person’s electronic identification credential. The fact that an email account bears someone else’s name does not necessarily establish that the accused has taken possession of or used a password, electronic signature or other unique identifying credential belonging to that individual.
This distinction is particularly significant in the context of Section 66-C because the offence is not framed simply as “using another person’s name online.” Parliament has identified specific forms of electronic identity misuse. The prosecution must therefore show conduct that corresponds to those statutory requirements.
The Court did not hold that creating an email account in another person’s name can never give rise to criminal liability. Its observation was narrower and expressly prima facie. Depending upon the surrounding circumstances, such conduct could potentially attract other statutory provisions if the necessary ingredients of those offences are satisfied. However, the mere creation of an email ID in another person’s name was, in the Bench’s view, insufficient by itself to establish an offence under Section 66-C.
The Court’s approach also reflects the principle that courts should not judicially legislate in the field of criminal offences. If technological developments have produced new forms of identity misuse that are not adequately covered by the existing statutory language, it remains open to Parliament to amend the law. Courts may interpret statutory expressions in accordance with their ordinary meaning and context, but cannot simply introduce a new category into a penal provision without sufficient textual foundation.
The expression “unique identification feature” did, however, require consideration because the respondents specifically relied upon it. The respondents’ argument was that an email ID itself identifies an individual or account in the digital world and should therefore fall within that expression. The Court, at this stage, did not accept that proposition merely on the basis of the allegations contained in the FIR.
The Bench effectively indicated that the phrase “unique identification feature” cannot be read in isolation. It must be understood in the context of the words preceding it, namely “electronic signature” and “password.” The provision concerns fraudulent or dishonest use of another person’s electronic means of identification. Merely attaching another person’s name to a newly created email account does not automatically demonstrate such use.
This reasoning is important because an email ID may be created independently by an individual without accessing the legitimate account or credentials of the person whose name has been adopted. In such circumstances, the alleged conduct may involve impersonation or deception, but that does not necessarily mean that the accused has used the victim’s own electronic identification feature.
The Court was also conscious that the matter was at the stage of a challenge to the FIR. It therefore did not undertake a final determination of the factual allegations or pronounce upon the ultimate criminal liability of the petitioners. The order was confined to the prima facie legal question of whether Section 66-C could be invoked on the allegations placed before the Court.
On this basis, the Bench concluded that a case for interference with the FIR had been made out. The impugned FIR was consequently stayed, and the authorities were directed not to take any action against the petitioners pursuant to the FIR until further orders.
The Court’s order also dealt with the petitioners’ submission concerning criminal defamation. Reliance was placed on the Supreme Court’s decision in Subramanian Swamy v. Union of India, where the legal framework governing criminal defamation and the procedure for setting the criminal law in motion was considered. The petitioners argued that a criminal defamation case could not be initiated merely through an FIR because the statutory scheme requires a complaint by the person aggrieved.
The Allahabad High Court recorded the argument but did not finally decide that issue at the present stage. This is significant because the order should not be read as a final pronouncement that every allegation of criminal defamation registered through an FIR is necessarily invalid. The question was left open for consideration in appropriate proceedings.
The Court directed that the matter be listed before the appropriate Bench after the respondents filed their counter-affidavits. Thus, the interim protection granted to the petitioners operates pending further consideration of the matter.
The decision carries wider significance in the rapidly developing area of cybercrime law. Digital impersonation can take many forms, including the creation of fake accounts, misuse of passwords, fraudulent electronic signatures and manipulation of online identities. Section 66-C provides a specific statutory response to certain forms of such conduct. The Allahabad High Court’s prima facie interpretation underscores that each form of alleged digital misconduct must be tested against the precise ingredients of the offence invoked.
The ruling also reinforces the importance of legislative precision in cybercrime cases. Technology evolves rapidly, while criminal statutes necessarily depend upon defined legal concepts. Courts may encounter conduct that appears deceptive or improper but still have to determine whether the legislature has actually criminalised that conduct under the particular provision invoked by the prosecution.
At the same time, the Court’s order does not confer a general licence to create or operate email accounts in another person’s name. Such conduct may have serious legal consequences depending on the purpose for which the account is created, the communications sent through it, he representations made to third parties and the h