Part 6 of 7

Collaboration with Agencies

🕑 90-120 minutes 📖 Practical Focus 📋 Module 5

Introduction to Inter-Agency Cooperation

Cyber crimes rarely respect jurisdictional boundaries. Effective investigation requires collaboration with multiple agencies at state, national, and international levels. Understanding the roles, capabilities, and procedures of these agencies is essential for successful investigations.

📚 India's Cyber Security Ecosystem

India has developed a comprehensive ecosystem for cyber crime response and investigation, with agencies operating at multiple levels - from the national helpline for immediate response to international cooperation mechanisms for cross-border cases.

National Agencies

I4C

Indian Cyber Crime Coordination Centre (I4C)

Ministry of Home Affairs, Government of India

I4C is the nodal agency for coordinating all cyber crime-related activities in India. Established under MHA, it provides the framework for comprehensive, coordinated, and effective approach to cyber crime.

Key Functions:

  • Coordination between states and central agencies for cyber crime cases
  • Managing the National Cyber Crime Reporting Portal (NCRP)
  • Operating the 1930 National Cyber Crime Helpline
  • Capacity building and training for law enforcement
  • Liaison with international agencies and platforms
  • Research and development for cyber crime tools

Components of I4C:

  • National Cyber Crime Threat Analytics Unit (NCTAU)
  • National Cyber Crime Forensics Laboratory (NCFL)
  • National Cyber Crime Training Centre (NCTC)
  • Cyber Crime Ecosystem Management Unit
  • Platform for Joint Cyber Crime Investigation Team

How to Engage with I4C:

State police can request I4C support for complex/inter-state cases through their State Nodal Officer. Direct engagement for training programs through NCTC.

1930

National Cyber Crime Reporting Portal & Helpline 1930

cybercrime.gov.in | Helpline: 1930

The NCRP is the unified platform for cyber crime reporting in India. Helpline 1930 provides immediate assistance, especially for financial frauds.

NCRP Features:

  • Online complaint registration for all cyber crimes
  • Special modules for women/child related crimes
  • Anonymous reporting option for sensitive cases
  • Complaint tracking by complainant
  • Direct integration with state cyber cells

Helpline 1930 - Citizen Financial Cyber Fraud Reporting

  • 24x7 toll-free helpline for financial fraud reporting
  • Real-time coordination with banks to freeze fraudulent accounts
  • Average response time: Minutes for account freezing
  • Integrated with major banks and payment platforms

Investigator's Use:

Use NCRP portal to check if complaints are already registered. Helpline 1930 can be used to expedite bank coordination for new cases.

CERT

CERT-In (Indian Computer Emergency Response Team)

Ministry of Electronics and Information Technology

CERT-In is the national nodal agency for responding to computer security incidents. While primarily focused on incident response and security, it plays a crucial role in cyber crime investigations.

Key Responsibilities:

  • Incident response and coordination
  • Issuing alerts and advisories on cyber threats
  • Emergency response measures during attacks
  • Coordination with international CERTs
  • Technical assistance to law enforcement

Mandatory Incident Reporting:

Under CERT-In Rules, 2022, certain incidents must be reported to CERT-In within 6 hours:

  • Targeted scanning/probing of critical systems
  • Compromise of critical systems
  • Data breaches
  • Attacks on critical infrastructure
  • Ransomware attacks

Contact:

incident@cert-in.org.in | Website: cert-in.org.in

Engage CERT-In for technical analysis, threat intelligence, and cases involving critical infrastructure.

NCIIPC

NCIIPC (National Critical Information Infrastructure Protection Centre)

Under NTRO, PMO

NCIIPC is designated as the national nodal agency for protection of Critical Information Infrastructure (CII).

Sectors Protected:

  • Power and Energy
  • Banking, Financial Services, and Insurance (BFSI)
  • Telecom
  • Transport
  • Government
  • Strategic and Public Enterprises

When to Engage:

Cases involving attacks on critical infrastructure should be reported to NCIIPC through appropriate channels (usually via CERT-In or through state coordination).

International Cooperation Mechanisms

INTL

INTERPOL

International Criminal Police Organization

INTERPOL facilitates international police cooperation. India's NCB (National Central Bureau) at CBI serves as the contact point.

INTERPOL Services for Cyber Crime:

  • I-24/7: Secure global police communication network
  • Notices: Red, Blue, Green notices for fugitives and information sharing
  • Cyber Crime Directorate: Specialized support for cyber investigations
  • Global Complex for Innovation (IGCI): Singapore-based cyber capabilities center

Process for International Cooperation:

  1. State police submits request to State CID/Crime Branch
  2. Request forwarded to CBI (NCB-India)
  3. CBI coordinates with INTERPOL
  4. INTERPOL contacts relevant country's NCB

Mutual Legal Assistance Treaty (MLAT)

MLAT is a formal mechanism for obtaining evidence from foreign countries. India has MLATs with many countries.

Aspect Details
Processing Authority Ministry of Home Affairs (Central Authority for most MLATs)
Typical Timeline 6 months to 2+ years depending on complexity and country
Types of Assistance Evidence collection, witness statements, asset freezing, extradition preparation
Key Countries with MLAT USA, UK, Canada, UAE, Singapore, Australia, and 40+ others
Prepare Detailed Request
Include FIR details, specific data required, legal basis, relevance to investigation, and why local methods insufficient.
Route Through Proper Channels
State Police > State Government > MHA (International Cooperation Division)
MHA Review and Transmission
MHA reviews the request and transmits through diplomatic channels to the foreign Central Authority.
Foreign Processing
Foreign country processes request according to their laws and MLAT terms.
Evidence Receipt
Evidence received through same diplomatic channels with proper authentication.
Faster Alternatives to MLAT

Given the slow MLAT process, consider these alternatives for faster results:

  • Platform Law Enforcement Portals: Direct requests to Google, Meta, etc. for basic subscriber data
  • Emergency Disclosure Requests: For imminent threats to life
  • I4C Coordination: I4C has established relationships with major platforms
  • Voluntary Disclosure: Some platforms voluntarily preserve data while awaiting formal process

State-Level Coordination

State Cyber Cells and Nodal Officers

Each state has designated cyber crime investigation units and nodal officers for coordination.

Role Function
State Cyber Cell Specialized unit for complex cyber crime investigation, forensics
State Nodal Officer Coordination with I4C, other states, service providers
District Cyber Cell Local cyber crime complaints and first-level investigation
Cyber PS Dedicated police stations for cyber crime in major cities

Inter-State Coordination

For cases spanning multiple states:

  • I4C facilitates joint investigation teams
  • State Nodal Officers coordinate evidence and information sharing
  • Letter Rogatory not required for inter-state requests
  • Section 94 BNSS notices can be served across states

Working with Banks and Financial Institutions

Coordination Mechanisms

  • 1930 Helpline Integration: Direct link to bank fraud control units
  • Bank Nodal Officers: Each bank has designated LEA nodal officers
  • RBI Coordination: For systemic issues or multiple bank involvement
  • NPCI: For UPI-related fraud coordination

Quick Actions for Financial Fraud

Immediate Reporting via 1930
Report within the "golden hour" for best chance of recovery. 1930 can initiate lien/freeze on suspect accounts immediately.
FIR Registration
Register FIR with complete transaction details including beneficiary account numbers.
Formal Bank Request
Send Section 94 BNSS notice to bank(s) for account details, transaction history, KYC documents.
Follow the Money Trail
Trace the chain of transactions. Often money moves through multiple accounts before withdrawal.
📚 Key Takeaways
  • I4C is the central coordination hub for cyber crime in India
  • 1930 helpline provides immediate response for financial fraud - use within "golden hour"
  • CERT-In must be notified for certain cyber incidents within 6 hours
  • International cooperation through INTERPOL requires routing via CBI-NCB
  • MLAT process is slow (6 months+) - use platform LEA portals for faster results
  • Emergency disclosure requests are available for imminent threats to life
  • State Nodal Officers facilitate inter-state and I4C coordination
  • Build relationships with nodal officers at various agencies for efficient cooperation