With the rapid growth of digital technology, cybercrime has become one of the most serious emerging legal challenges in Nepal. Cybercrimes involve unauthorized access to computer systems, misuse of digital data, online fraud, and publication of illegal content, privacy violations, and attacks through malicious software such as ransomware. These offences exploit vulnerabilities within computer systems, networks, and digital infrastructure, causing serious legal, financial, and reputational harm.
Nepal has developed a legal framework to regulate digital conduct and penalize cyber offenders primarily through the Electronic Transactions Act, 2063 (2006) and the Muluki Criminal Code, 2074 (2017).
1. Primary Law Governing Cyber Crimes in Nepal
The Electronic Transactions Act (ETA), 2063 is the principal legislation governing cyber activities in Nepal. The Act was introduced to:
- Regulate electronic transactions
- Ensure legal validity of electronic records
- Protect data integrity and confidentiality
- Punish cyber offences
The Act recognizes that cybercrimes originate from electronic processes including the generation, storage, communication, and transmission of digital data. It criminalizes unauthorized access, manipulation, destruction, publication of illegal content, misuse of digital certificates, and electronic fraud.
2. Major Legal Provisions Against Cyber Crimes in Nepal
2.1 Pirating, Destroying or Altering Computer Source Code
Any person who, with malicious intent, pirates, destroys, or alters legally protected computer source code shall be punished with:
- Imprisonment: Up to 3 years
- Fine: Up to NPR 200,000
- Or both
2.2 Unauthorized Access to Computer Materials
Accessing a computer, program, or data without proper authorization, or exceeding permitted access, is punishable by:
- Imprisonment: Up to 3 years
- Fine: Up to NPR 200,000
- Or both
2.3 Damage to Computer and Information Systems
Any person who intentionally destroys, deletes, alters, or disrupts computer data or systems with malicious intent shall face:
- Imprisonment: Up to 3 years
- Fine: As prescribed by law
- Or both
2.4 Publication of Illegal Materials in Electronic Form
Publishing or displaying illegal, obscene, immoral, hateful, or harmony-disrupting content electronically is punishable by:
- Imprisonment: Up to 5 years
- Fine: Up to NPR 100,000
- Or both
2.5 Breach of Confidentiality
Unauthorized disclosure of confidential digital records obtained through lawful access is punishable by:
- Imprisonment: Up to 2 years
- Fine: Up to NPR 10,000
- Or both
2.6 Providing False Statements for Digital Certification
Giving false statements to obtain digital certificates attracts:
- Imprisonment: Up to 2 years
- Fine: Up to NPR 100,000
- Or both
2.7 Fake Licenses or Certificates
Unauthorized operation as a Certifying Authority or misuse of false or revoked digital certificates carries:
- Imprisonment: Up to 2 years
- Fine: Up to NPR 100,000
- Or both
2.8 Non-submission of Prescribed Statements or Records
Failure to submit required reports or properly maintain records is punishable by:
- Fine: Up to NPR 50,000
2.9 Committing Computer Fraud
Fraud through online banking, digital signatures, ATM cards, or electronic payment systems is punishable by:
- Imprisonment: Up to 2 years
- Fine: Up to NPR 100,000
- Or both
3. Cyber Crime Offences under Muluki Criminal Code, 2074
The Muluki Criminal Code also protects individual privacy in the digital space. Key offences and punishments include:
- Unauthorized recording or listening to conversations: Up to 2 years imprisonment or fine up to NPR 20,000 or both
- Taking or distorting photos without consent: Up to 1 year imprisonment or fine up to NPR 10,000
- If distorted: Up to 2 years imprisonment or fine up to NPR 20,000
- Selling or sharing photos without consent: Up to 3 years imprisonment or fine up to NPR 30,000
- Opening letters or tapping phone calls: Up to 2 years imprisonment or fine up to NPR 20,000.
- Breaching privacy through electronic means: Up to 2 years imprisonment or fine up to NPR 20,000.
- Deceitful phone calls, SMS, or online messages: Up to 2 years imprisonment or fine up to NPR 20,000.
These provisions strengthen personal data protection and safeguard digital privacy.
4. Procedure for Filing a Cybercrime Complaint in Nepal
If you are a victim of cybercrime, you may file a complaint through the following authorities:
- Cyber Crime Bureau, Nepal Police (Bhotahity, Kathmandu)
- Cyber Crime Division / Local Police Stations
- District Courts of Nepal
A. Filing a Complaint through Cyber Crime Bureau
The Cyber Crime Bureau operates as Nepal’s central investigation authority for cyber offences.
Procedure:
- Prepare a detailed written complaint explaining:
- Date and time of incident
- Nature of offence
- Mode of crime
- Known suspect (if any)
- Submit the complaint:
- In person at Bhotahity, Kathmandu
- Or via email: cyberbureau@nepalpolice.gov.np
- Attach supporting evidence such as:
- Screenshots
- Emails
- Transaction records
- Chat logs
- Digital media files
- The Bureau conducts initial verification and begins investigation as required.
B. Filing a Complaint through Cyber Crime Division / Police Stations
Another method of filing a cybercrime complaint in Nepal is through the Crime Division of Nepal Police or the nearest local police station, which functions under the framework of the Electronic Transactions Act, 2063. After registration, such cases are usually transferred to the Cyber Crime Bureau for specialized investigation.
The step-by-step process is as follows:
Step 1: The applicant must personally visit the concerned police office to initiate the complaint process.
Step 2: A police officer will provide the applicant with an official application form to be filled with details of the cyber-related incident.
Step 3: The applicant must submit a self-written complaint application, clearly mentioning:
- Date and time of the incident
- Nature of the cybercrime
- Mode of offence
- Identity of the suspect (if known)
Step 4: The complaint must be submitted along with available digital evidence, such as:
- Screenshots
- Emails
- Chat logs
- Call records
- Transaction details
- Any other relevant electronic proof
Step 5: After receiving the complaint, the police authority conducts a preliminary investigation to verify facts and resolve any uncertainties before formally registering the case.
Step 6: Upon completion of preliminary investigation and depending on the nature, seriousness of the offence, and availability of evidence, the complaint is formally registered and may be transferred to the Cyber Crime Bureau for further detailed investigation.
C. Court Process for Cyber Crime Cases in Nepal
Once the cybercrime complaint is investigated by the police and Cyber Crime Bureau, the matter proceeds through the judicial system as per Nepalese criminal procedure. The District Court has primary jurisdiction over cybercrime cases.
The legal court process generally follows these steps:
Step 1: Filing of FIR (First Information Report)
After preliminary investigation, if sufficient grounds exist, the police register the FIR in the prescribed legal format.
Step 2: Issuance of Arrest Warrant
Based on the FIR and evidence collected, the concerned District Court issues an arrest warrant against the accused, if required.
Step 3: Detailed Investigation
Police and the Cyber Crime Bureau conduct full-scale investigation, including:
- Digital forensic analysis
- Device seizure
- Data extraction
- Witness examination
- Suspect interrogation
Step 4: Submission of Investigation Report
Upon completion of investigation, the final investigation report is submitted to the District Government Attorney.
Step 5: Filing of Charge Sheet
If sufficient evidence exists, the District Government Attorney files a charge sheet (prosecution) in the District Court.
Step 6: Bail Hearing of the Accused
The District Court conducts a bail hearing and decides whether:
- The accused will be released on bail, or
- Kept in judicial custody
Step 7: Court Trial and Final Verdict
After regular court proceedings, including:
- Examination of evidence
- Witness statements
- Legal arguments
The District Court delivers the final judgment determining guilt and punishment as per the applicable cyber laws.
6. Conclusion
Nepal’s cyber law framework, primarily governed by the Electronic Transactions Act, 2063and the Muluki Criminal Code, 2074, provides strong legal protection against:
- Unauthorized system access
- Digital fraud
- Online content abuse
- Breach of confidentiality
- Privacy violations
- Cyber harassment and identity misuse
As reliance on digital platforms grows, awareness of cyber laws and complaint procedures has become essential for individuals, businesses, and institutions. Prompt reporting, proper documentation, and legal guidance play a crucial role in successful cybercrime prosecution.