Dark Web and Cybercrime Laws in India: Legal Challenges Explained
Writing this article to highlight one of the major warming issues, i.e., the dark web and its impact on today’s world, this article will explain deeply how the dark web is affecting very quietly with unknown users with hidden identities and ruining the cyber system.
The dark web is thought to be 550 times larger than the surface web, holding a wealth of information, such as illegal activities and trading. It operates on encrypted data, making it harder to track and analyse user behaviour.
Introduction
The Dark Web is a hidden section of the Internet that allows users to communicate anonymously, make anonymous purchases, and attract users seeking to protect their privacy as well as criminal activity. Additionally, several other significant studies have attempted to address the complex problem of anonymity within the Dark Web.
This paper demonstrates that there is a need for a global effort to ensure that law enforcement can operate effectively within a highly anonymous online environment. The analysis of this issue was focused on how the “dark web” makes it difficult for law enforcement to enforce the law due to the anonymity provided by the technology. By analysing cases and looking at the state of the law today, the study highlights some of the issues associated with prosecuting individuals who commit crimes via the dark web.
Definition of the Dark Web and Its Relation to Cyber-Crime
The “dark web” is a portion of the internet which has been encrypted; it is only available to those who utilise anonymous networks, Virtual Private Networks (VPNs), and cannot be searched with traditional search engines like Google, Chrome, etc. This type of illegal behaviour represents a significant portion of the entire Internet (often referred to as the “darknet”). There are some people who legitimately use the dark web for what I would consider to be legitimate reasons, which is to protect their privacy with regard to some information they want to remain private or to join an exclusive online community/social network; however, these types of uses are extremely uncommon.
Dark web users cannot search for websites as easily as other internet users because of the dark web’s unique naming process. Users must have the exact URL for a website before they can visit it. Most of the time, the URLs used on the dark web end with “.onion”, which is a specific type of domain suffix associated with The Onion Router (Tor) network. The URLs used on the dark web are often hard to find and hard to remember because they are composed of a random string of letters and numbers.
Legal Implications of Anonymity in Cyber-Crime Cases
Challenges in Identifying Offenders
- By using anonymising technology such as Tor or a VPN, users can mask their IP address, which makes tracing criminal activities back to a single person much more difficult.
- Identity Fraud: Criminals frequently employ false identities, making it difficult for law enforcement agencies to determine the actual identity of those who have committed crimes.
Jurisdictional Issues
- Cross-Border Crime: Cybercrime frequently involves multiple countries, which creates a problem with jurisdiction. This is due to the fact that each country has its own unique set of laws related to cybercrime and data privacy.
- Difficulties with deportation: If crimes occur in nations where there are no formal relations between those nations and the native land of the person who committed the crime, then the privacy of the people involved could interfere with the extradition process.
Evidence Collection and Admissibility
- Digital Forensics: Gathering digital evidence from unknown sources presents difficulties in guaranteeing the evidence is presented in court. It is crucial to carry out legal requirements and maintain appropriate legal custody.
- Privacy Concerns: Monitoring anonymous online activity may be illegal due to the need to strike a balance between privacy rights and legal criteria for search and seizure.
Legal Accountability
- Attribution of Criminal Conduct: Assigning responsibility for illegal activity when anonymity is used creates additional complexity in determining who committed the crime and what their intentions were. This makes it difficult for courts to address issues of accountability and intent.
- Vicarious Liability: Organisations that provide platforms for users to communicate anonymously can be held accountable for any criminal acts performed by these users. This may lead to changes in legislation.
Anonymity on the Dark Web
Tools Regarding Anonymity
In online communication, anonymity refers to techniques that hide users’ identity. Preventing unwanted access to the communication channel is the main objective. Virtual Private Networks (VPNs) and Onion Routing (Tor) are typical examples. Both use tunnelling and encryption to preserve the connection’s integrity. Although Tor is widely used on the dark web, corporations are more likely to employ VPNs to guarantee safe connections.
VPN
A Virtual Private Network (VPN) is a form of network technology that offers privacy services on the line of communication among individuals and/or groups who are communicating via a public communication system. The VPN will offer these features through the use of tunnelling protocols and security measures. The tunnel itself is one of the main features offered by the VPN.
- It offers a secure and private communication channel between nodes.
- VPN technology is commonly referred to as VPN tunnelling.
- Tunnelling is an option in some of the current types of network technologies that use packets and datagrams from multiple different types of protocol.
- A Windows VPN will utilise the point-to-point tunnelling protocol (PPTP) package to extend and transfer TCP/IP and other private network data across the Internet or other public networks.
TOR
A computer network system called “Onion Routing” (Tor) has many steps involved in transmitting data to its final destination. As each step is completed, the data is encrypted as it moves from one node to the next.
The three hops that were able to successfully pass through the encryption process will each perform the encryption process on the data.
The kind of security for delivery of information provided by Tor is based upon the anonymous part of the communications process. A minimum of three relays (entry node, middle relay, and exit relay) will be used to establish a connection between the user/client and their intended destination.
After that, the data encryption process will be completed.
Legal and Illegal?
Accessing the dark web is not a crime under Indian law. The government of India does not prohibit the use of anonymity tools or encrypted networks. However, the legality of acts conducted on the dark web is determined by their purpose and intent.
However, this does not imply that a person can do whatever he or she wants.
Legal Areas Which Cover Dark Web Offences
The dark web allows users to conceal their identity and location with the help of technology like TOR. Thus, the dark web has become a means of conducting illegal activities, including, but not limited to, drug trafficking, selling illegal weapons, child sexual abuse material (CSAM) and selling stolen data.
The ITA 2000 has a small number of sections that relate to cybercrime (Sections 65, 66, 67, 68 and 69). The Indian Penal Code has two sections (Sections 372 and 373) that provide for penalties for those who buy/sell women for prostitution. The Narcotics Substances and Psychotropic Substances Act of 1985 has a section (Section 24) which makes people criminally liable if they trade in narcotics substances outside of India. Some other examples include the above-mentioned statutes.
Illegal Activities Include
- Drug Trafficking
- Illegal Arms Trade
- Stolen Data and Identity Theft
- Credit and Debit Card Fraud
- Child Exploitation Videos
- Cyber Terror
- Child Pornography
- The Purchase of Firearms, Pistols, and Others.
The dark web is also a place for ransomware, phishing kits, and other cybercrime tools against individuals and institutions.
Lack of Legal Practices Under These Activities
India has a number of laws that can be used to deal with crimes committed on the dark web. However, there is no separate comprehensive law that specifically regulates dark-web-related activity.
The fundamental legal framework includes the Information Technology Act of 2000, general criminal laws, financial limitations, and other specialised legislation.
The essential point is that these laws usually govern illegal behaviour rather than particularly targeting the dark web’s technological aspects, such as anonymity, decentralised networks, encrypted messages, and cryptocurrency-based transactions.
Such issues create certain legal and practical difficulties in investigating and prosecuting dark-web-related crimes and data kept by users.
Issue: Legal and Enforcement Challenges
The lack of specific laws regarding the dark web has caused many problems for enforcement. There are no current laws that define the legality of accessing or using the dark web. There are also no laws that create a process for surveillance, digital forensics, or cross-border investigation into crimes committed via the dark web.
Law enforcement agencies typically have difficulty identifying who is responsible for crimes committed on the dark web, obtaining admissible evidence, and prosecuting cybercriminals that operate in this hidden network.
This lack of legislation hinders the prosecution of crimes committed on the dark web and reduces the overall deterrent value of cyber law.
There is an immediate need to amend the law to allow investigative agencies to better investigate crimes committed on the dark web.
Understanding in Detail
Existing cyber laws, i.e., India’s Information Technology Act of 2000 and the Budapest Convention on Cybercrime, were primarily designed to address general cyber crimes, including hacking, stealing personal information, and online fraud.
These regulations often apply to activities in which individuals, websites, or online transactions can be recognized and tracked to some level.
However, the dark web differs because it gives users with more confidentiality, uses encryption to safeguard conversations, and permits activities that are hard to track.
As a result, investigating offences on the dark web becomes more problematic because identifying the criminals, tracking their transactions and collecting digital evidence can be challenging due to its anonymity.
Jurisdiction Complications During Investigation
Investigating dark-web-related offences involves several jurisdictional and evidentiary complications.
| Investigation Challenge | Description |
|---|---|
| International Servers | Stored on international servers. |
| Distributed Data | Distributed across multiple places. |
| Data Manipulation | Erased or modified. |
| Evidence Authentication | It’s difficult to authenticate. |
| Identification of Individuals | Difficult to connect with a certain person. |
Note: Dark Web Anonymity and VPN Technology
The SANS Cyber Threat Intelligence Survey reported that only 42% of organizations use information obtained through “dark” or “closed” web resources. Technologies such as Tor and VPNs allow users to hide their IP addresses which makes tracing illegal activities back to particular individuals very difficult.
As security professionals begin to realize that a prevention-focused security program requires more than just focusing on safety measures; organizations need to proactively identify and assess threats that exist outside of the perimeter of the network, the physical boundaries of the facility, and the automated fraud control systems in place.
Electronic Evidence and Authentication
Here Investigators must show the legitimacy, integrity, and significance of electronic evidence in order to pursue it successfully.
India’s Bharatiya Sakshya Adhiniyam, 2023 establishes the present legal framework for digital and digital testimony.
Even if investigators identify an illicit dark-web transaction, they must still demonstrate an evidentiary link between the transaction and the targeted individual.
Cross-Border Investigation Challenges
Investigating dark-web offences becomes more complicated when the accused, servers, and digital evidence are located in different countries.
- The accused person could be outside India’s territorial limits.
- The server could be located under other country’s legal authority.
- Digital proof may be stored elsewhere.
- Various nations may have varying cybercrime legislation.
- Acquiring evidence may necessitate foreign legal aid.
- Foreign authorities may have varying methods and timetables.
Note: Section 75 of the IT Act and International Cooperation
Although Section 75 of the IT Act allows outside of territorial limit use in some instances, it does not automatically provide Indian authorities unrestricted powers to look into or confiscate computer systems situated in other countries, and therefore International cooperation is essential.
Legal Cases and Dark Web Crime
NEET UG and UGC-NET Paper Leak
In June 2024, the Central Bureau of Investigation made an investigation in connection with the allegation that the test paper of the University Grants Commission- National Eligibility (UGC- NET) had been leaked via the Dark Web, and established that the test was revealed to the public 48 hours prior to the date of the test.
The test paper posted online was very similar to the actual test paper used by UGC-NET and was offered for sale at Rs 6 lakhs.
The test paper was also shared on Telegram, which led to the Education Ministry being compelled to cancel the examination.
Scully Case
Red Room spots are where people dump thousands to watch murders, rapes, could be child porn and other types of live stream torture. Yet they remain unproven.
A series that was made by Scully’s own company, No Limits Fun (NLF). A few of his recordings, Daisy’s Destruction was intensely debated on the discussion which was not a sniffed movie, however contains genuine sexual maltreatment and horrendous attack of an energetic kid.
It has been streamed on ‘Hurtcore’ paedophile sites where a point is at which paedophiles tune in to torture or rape children and babies.
At Melbourne’s Supreme Court on 13 June, 2018 Peter Gerard Scully was sentenced to life behind bars.
Operation Dark HunTor
In 2021 Europol, Eurojust and the police from nine different countries launched one of the largest anti-crime operations on the dark web so far called Dark hunTor.
As a result of this operation, there have been 150 people arrested in Australia, Bulgaria, France, Germany, Italy, Netherlands, Switzerland, United Kingdom and United States.
Those arrested were supposedly buying or selling illegal items through the dark web.
There were also several documents found with those arrested which helped strengthen the case against them EUR 26.7 million (USD 31 million) in cash and virtual currency; 234 kilograms of medication; and 45 weapons.
Also, Italian authorities shut down two dark web sites offering more than 100,000 listings for illegal items, DeepSea and Berlusconi.
Currency Running the Dark Web
The issue of criminal activity facilitated by cryptocurrency is complex and has implications for multiple countries.
It is clear that there will be a need to collaborate internationally on the solution to this problem; however, coordinating international efforts is difficult due to the different ways that each country regulates and prioritizes its approach.
The creation of a variety of privacy-oriented digital currencies (called “privacy coins”) has made the issue of tracking and monitoring financial transactions much worse.
Because these types of digital currency allow users to remain anonymous when conducting business, it is now significantly more difficult for government regulators and police departments to track and investigate illegal activities that may occur through the use of digital currency.
Why Bitcoin Is Used on Dark-Web Platforms
Bitcoin is used on dark-web platforms for several reasons:
- Pseudonymity: The user has the option to conduct business anonymously, and is not required to provide their true name or identity.
- Global Transactions: Bitcoin allows for global transactions that can be made internationally, outside of the traditional banking system.
- Decentralization: Bitcoin is decentralized, operating independently of any central banks or credit card processors to operate its network.
- Digital Payments: This permits online markets to take payments from customers using means other than traditional card payment processors.
The key difference between Bitcoin and other forms of currency is that while Bitcoin is a pseudonymous currency, it is not an anonymous one.
Transactions with Bitcoin will be recorded forever on the public ledger called the blockchain.
Cryptocurrency for Criminal Transactions
The major issue is the application of cryptocurrency for criminal transactions.
Cryptocurrency provides some degree of anonymity/pseudonymity that allows criminals to operate without being detected by law enforcement officials.
Therefore, cryptocurrency can create problems for maintaining law and order in our modern digital society.
India’s Approach to Cryptocurrency Regulation
India has had a changing attitude towards regulating cryptocurrencies.
A major milestone in India’s regulation of cryptocurrencies occurred when the Supreme Court removed the banking ban, thus giving cryptocurrency companies the ability to use banking services.
India is currently developing a regulatory framework for cryptocurrencies.
This framework includes provisions for AML, KYC and taxation.
This regulatory approach is designed to provide both the opportunity to promote innovation and to reduce risk associated with cryptocurrencies.
Conclusion
The growth of dark web activity and the use of the internet as an anonymous means of committing crimes are both major issues that need to be addressed by the Indian legal system and law enforcement.
Although India has developed a very effective cyber law framework, the characteristics of the dark web (encryption, anonymity, and international) require a collaborative approach to developing legislation, policies, and enforcement strategies.
In addition to strengthening national laws, increasing the effectiveness of investigations into anonymous cybercrimes and enhancing international cooperation will help identify and prosecute anonymous cybercrime in today’s world.
