Introduction:

In WinZo Games Private Limited v. State of Karnataka (CRL.P No. 10707/2024), the Karnataka High Court on February 21, 2026, quashed a 2024 FIR registered against an online gaming company in connection with allegations of theft and misuse of a woman’s PAN card details on its gaming application. The matter was heard by Justice M. Nagaprasanna, who allowed the petition and set aside the criminal proceedings against the company while clarifying that the quashment would not affect any other accused or any other pending investigation.

The case raised important questions regarding criminal liability of digital platforms, the extent of vicarious responsibility in cyber offences, and the threshold required to continue criminal proceedings against a corporate entity under Section 420 of the Indian Penal Code and Sections 66(c) and 66(d) of the Information Technology Act.

While a detailed order is awaited, the oral pronouncement reflects the Court’s view that continuation of criminal proceedings against the company was not legally sustainable on the available material.

Factual Background:

The complaint was lodged on July 4, 2024, by a woman who alleged that her PAN card details had been stolen and misused on the gaming platform operated by the petitioner company. According to the complaint, an individual—arrayed as Accused No. 1—was allegedly involved in the theft and use of such PAN details on the gaming application.

The online gaming company was named as Accused No. 2 in the FIR. The allegations invoked:

Section 420 of the Indian Penal Code (cheating)

Sections 66(c) and 66(d) of the Information Technology Act, relating to identity theft and cheating by personation using computer resources

The complainant contended that her PAN details had been fraudulently used within the gaming ecosystem, leading to registration of the FIR.

Proceedings Before the High Court:

Following registration of the FIR, the company approached the High Court seeking quashing of the criminal proceedings. In November 2024, the High Court granted an interim stay on investigation.

Subsequently, in January 2026, the Court directed the company to appear before the jurisdictional police station and record its statement in the matter. The company complied with the direction.

Upon final hearing, Justice M. Nagaprasanna pronounced the order allowing the petition and quashing the FIR insofar as it pertained to the company.

The Court clarified:

“Allowed, quashed. It is made clear that the quashment of proceedings in impugned crime will not come in the way of any other accused nor any other crime pending.”

This observation indicates that while proceedings against the company were terminated, investigations against other accused persons could continue independently.

Arguments on Behalf of the Petitioner:

The petitioner-company advanced several arguments challenging the maintainability of the FIR against it.

1. No Direct Allegation of Involvement

The company contended that the complaint primarily alleged misconduct by Accused No. 1, who was said to have stolen and misused PAN details. There was no material suggesting that the company itself had stolen, accessed, or misused the complainant’s data.

2. Immediate Cooperation

It was argued that upon becoming aware of the alleged misuse, the company communicated with the complainant and advised her to register a complaint since identity theft is a serious matter. This conduct, the company submitted, demonstrated bona fide intent rather than complicity.

3. Absence of Mens Rea

The offences under Section 420 IPC and Sections 66(c) and 66(d) of the IT Act require dishonest intention or fraudulent conduct. The petitioner argued that no such intention could be attributed to the company in the absence of evidence showing knowledge or participation.

4. Platform Liability vs. User Conduct

The company submitted that it merely operates a digital platform and cannot automatically be held criminally liable for alleged misuse of documents by users, unless active involvement or negligence amounting to criminality is established.

5. Abuse of Criminal Process

The petitioner contended that continuation of criminal proceedings would amount to harassment and misuse of criminal law machinery, especially when the allegations did not disclose essential ingredients of the offences.

On these grounds, the petitioner sought quashing of the FIR under the Court’s inherent jurisdiction.

Arguments on Behalf of the State:

The State opposed the petition, arguing:

1. Prima Facie Case

The allegations disclosed that the complainant’s PAN details were used on the gaming platform, thereby attracting offences under the IPC and the IT Act.

2. Investigation Required

The State submitted that the matter required investigation to determine the role of the platform and whether adequate safeguards were in place to prevent misuse.

3. Corporate Responsibility

Given the nature of digital platforms, the company had a duty to ensure compliance with identity verification mechanisms and prevent fraudulent registrations.

The State urged that the investigation should not be prematurely terminated.

Legal Issues Involved:

The case involved several important legal considerations:

• Whether a digital platform can be prosecuted for alleged identity theft committed by a user.
• Whether the complaint disclosed essential ingredients of cheating and identity theft against the company.
• Whether continuation of proceedings would amount to abuse of process of law.

The scope of the High Court’s power to quash criminal proceedings at the threshold.

Court’s Observations:

Although the detailed reasoning is awaited, the oral pronouncement indicates that the Court found the proceedings against the company unsustainable.

The Court’s decision suggests:

Lack of prima facie material directly implicating the company.

Insufficient basis to attribute criminal intent or participation.

Absence of evidence showing that the company facilitated or knowingly permitted misuse.

The Court was careful to clarify that quashing of proceedings against the company would not impact other accused persons or other pending cases.

This distinction preserves investigative autonomy while preventing unwarranted prosecution of the petitioner.

The Karnataka High Court’s decision to quash the FIR against the online gaming company reflects judicial insistence on adherence to fundamental principles of criminal law. Criminal prosecution cannot proceed in the absence of specific allegations establishing culpability. The ruling draws a clear distinction between alleged misuse by individuals and corporate liability of digital platforms.

While the investigation may continue against other accused persons, the order reinforces that criminal law cannot be invoked mechanically against intermediaries without concrete material. The judgment will likely influence future cases involving allegations of digital identity misuse and platform responsibility.