Deepfake Laws in India 2026: What You Need to Know to Stay Protected
MU
Muhammed Rafeeq
Published: 8 Jun 2026
7 min read
India's new IT Amendment Rules on deepfakes came into effect in 2025 — here is what changed, what is still unresolved, and how to protect yourself from AI-generated impersonation.
In November 2023, a deepfake video of a prominent Indian actress went viral on social media, viewed over 50 million times before platforms took it down. The incident shook the country and directly accelerated legislative action that had been stalled for years. By 2025, India became one of the first major democracies to enact specific deepfake regulation under amended IT Rules and the Digital Personal Data Protection Act. As AI image and video generation tools become accessible to anyone with a smartphone, understanding these laws is no longer just for tech lawyers — it is essential for every Indian who uses social media, appears on the internet, or runs a business.
Key Takeaways
India's IT Amendment Rules 2025 mandate social media platforms to detect and remove non-consensual deepfakes within 24 hours
Creating or distributing a deepfake of a real person without consent is now a cognisable offence under the IT Act
Penalties range from ₹10 lakh fines to 3 years imprisonment for individuals; platforms face removal from India's market for non-compliance
Victims can file FIRs at any cyber crime police station or the National Cyber Crime Reporting Portal (cybercrime.gov.in)
AI watermarking (C2PA standard) is now mandated for AI-generated content on platforms with 50 million+ Indian users
4,200%increase in deepfake-related cyber crime complaints in India between 2022 and 2025National Cyber Crime Reporting Portal (NCRP) Annual Report 2025: Non-consensual intimate imagery (NCII) using deepfakes represents 38% of all deepfake complaints, followed by financial fraud (31%) and political misinformation (24%).
What the Law Actually Says
India's deepfake legal framework is not a single new law but a set of amendments and new rules across existing legislation. The IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules 2025 are the primary instrument, requiring social media intermediaries to implement deepfake detection systems and respond to user reports within 24 hours. The Information Technology Act, 2000's Section 66E (violation of privacy) and Section 67A (publishing obscene material) have been interpreted to cover deepfakes involving sexual content. The Digital Personal Data Protection Act 2023 provides civil remedies for data subjects whose likeness (biometric data) is used without consent to create synthetic media.
What Is Legally Prohibited
Under India's 2025 framework, the following are illegal: creating deepfake pornography or intimate imagery of any person without consent, creating deepfakes of public figures for financial fraud, creating deepfakes that damage someone's reputation or incite violence, and distributing or sharing deepfakes knowing they are fabricated and harmful. Satire and parody using clearly labelled AI-generated content remain legal.
Platform Obligations: What Meta, YouTube, and X Must Do
Platforms with more than 50 million registered users in India — currently Facebook, Instagram, YouTube, X (Twitter), WhatsApp, and Telegram — are classified as Significant Social Media Intermediaries under the IT Rules. These platforms face the most stringent obligations. They must deploy automated deepfake detection tools, establish dedicated grievance mechanisms specifically for AI-generated content complaints, respond to court orders within 72 hours (reduced from the previous 7-day window), publish monthly compliance reports to the government, and implement the C2PA content provenance standard for AI-generated content uploaded to their platforms. Non-compliance can result in losing their 'safe harbour' protection — meaning they become legally liable for all content on their platforms, which would be catastrophic for their India operations.
Platform Obligation
Timeline
Penalty for Non-Compliance
Deepfake detection system deployment
Already required (2025)
Loss of safe harbour protection
Respond to user deepfake complaints
Within 24 hours
₹50 lakh per violation
Implement C2PA watermarking
Within 6 months of notification
Platform suspension
Publish monthly compliance report
1st of each month
₹10 lakh per missed report
Respond to government deepfake orders
Within 72 hours
Criminal liability for platform officers
Platform obligations under India's IT Amendment Rules 2025 regarding AI-generated and deepfake content
What Is Still Not Addressed: The Gaps
India's deepfake legislation, while a significant step, has notable gaps that critics have identified. The most significant is the lack of a specific deepfake law — India relies on amendments to existing legislation that was written before deepfakes existed, creating interpretive ambiguity in courts. The legislation also lacks clear definitions distinguishing illegal deepfakes (non-consensual, harmful) from legal AI-generated content (satire, entertainment, education), which risks over-blocking legitimate creative expression. The law focuses on platforms and distribution but says little about the AI tools used to create deepfakes — there are no licensing requirements or compliance obligations for AI companies offering image/video generation that could be misused.
Political Deepfakes: A Grey Area
India's elections in 2024 featured documented use of AI-generated videos of politicians. The Election Commission issued guidelines requiring disclosure when AI is used in political advertising, but enforcement was inconsistent. The legal status of AI-generated political content — particularly realistic but fabricated statements attributed to politicians — remains a grey area pending specific legislative action.
How to Protect Yourself from Deepfake Attacks
While legal remedies exist after the fact, prevention and preparedness are more valuable. The most common deepfake attacks targeting ordinary Indians are: financial fraud (a fake video of a family member in distress requesting urgent money transfer), identity fraud (using your photos to create fake social media accounts or scam others), and non-consensual intimate imagery (using your photos to create synthetic pornographic content). Understanding the warning signs and taking proactive steps can significantly reduce your risk of being targeted and enable faster response if you are.
Audit your public social media: limit who can download your photos and videos
Use strong privacy settings on Instagram, Facebook, and WhatsApp — restrict photo access to known followers only
Establish a code word with close family members to verify identity in urgent money requests
Reverse image search your profile pictures periodically to detect unauthorised use
Report deepfakes immediately on the platform and at cybercrime.gov.in before they spread
Document all evidence (screenshots, URLs, timestamps) before reporting
How to Report a Deepfake: Step-by-Step
If you discover a deepfake of yourself or someone you know, swift action is critical — the first 24 hours determine how far the content spreads. India's cyber crime infrastructure has improved significantly: the National Cyber Crime Reporting Portal accepts online reports without requiring you to visit a police station, and the I4C (Indian Cyber Crime Coordination Centre) has specialised units for AI-generated content crimes. The process is straightforward but requires thorough documentation.
✓Document: take screenshots with timestamps and save URLs of the deepfake content
✓Report to the platform: use 'Report > Fake or manipulated media' — platforms must respond within 24 hours
✓File online at cybercrime.gov.in under 'Report Cyber Crime > Other Cyber Crimes'
✓File an FIR at your local cyber crime police station if the content is sexual or involves financial fraud
✓Contact a cyber lawyer if the content has already spread widely — they can assist with court takedown orders
✓Inform your bank if any financial fraud is related to the deepfake
Deepfake Financial Scams Are the Fastest Growing Threat
The most financially damaging deepfake attacks involve video calls where someone appears to be your family member, boss, or a government official demanding urgent money transfers. Always establish a verbal code word with family for emergency money requests. If you receive a video call from someone you know acting strangely or requesting money, hang up and call them directly on their regular number before sending anything.
In India's 2026 digital landscape, media literacy — the ability to question whether what you see is real — has become as important as financial literacy.
— TekBit Editorial Board
“
We cannot rely on technology alone to solve a problem that is fundamentally about trust. Deepfakes require legal frameworks, platform accountability, media literacy, and individual vigilance working together.
— Justice R.V. Easwar, former Delhi High Court Judge, at Cyber Law Symposium 2025
Is it legal to use AI to create a realistic video of a public figure for satire?
Satire and parody that are clearly labelled as AI-generated and do not falsely attribute real statements or actions to the person are generally protected under Article 19 freedom of expression. However, the content must be clearly labelled (e.g., 'AI-generated satire'), and any sexual or defamatory content targeting a real person remains illegal regardless of satirical intent.
Can deepfakes be used as evidence in court in India?
Courts are increasingly aware of deepfakes and require authentication of video and audio evidence. Under the Indian Evidence Act and the DPDP Act, parties can challenge digital evidence on the grounds of AI manipulation. Forensic AI detection reports from certified experts are admissible to support or challenge digital evidence authenticity.
What technology can detect deepfakes?
Detection tools include Microsoft Video Authenticator, Deepware Scanner, and tools from Sensity AI. However, detection technology consistently lags behind generation technology — the latest deepfakes from commercial AI tools often defeat available detectors. The C2PA content provenance standard (mandated for platforms) addresses this by certifying the origin of authentic content rather than trying to detect fakes after the fact.
Are voice deepfakes covered under the same laws?
Yes. India's legal framework covers synthetic media broadly, including audio deepfakes (voice cloning). Voice cloning has been used in several high-profile scams in India where the cloned voice of a family member is used to request emergency money transfers over phone calls. The IT Act's provisions and DPDP Act's biometric data protections apply to voice as well as visual synthetic media.
Check If Your Photos Have Been Misused
Use our free guide to reverse image search your profile pictures and detect unauthorised deepfake use.
