My bank account was frozen after a cyber complaint. Am I guilty of something?

No. A freeze (lien/debit-freeze marked by a bank on police instruction) is a process event, not a finding of guilt. It usually means money allegedly traceable to a complaint passed through your account. The path forward is procedural: identify the complaint and the police station, seek de-freeze through the bank/police/magistrate route, and document your own transaction trail.

I have screenshots of the chat. Is that enough?

Usually not by itself. A screenshot is a starting point, not self-proving evidence. Courts routinely ask how the electronic record is proved — including the Section 63 BSA (previously 65B Evidence Act) certificate question, device custody, and authenticity if the other side denies the chat.

The other side denied the WhatsApp chat. Now what?

The dispute becomes one of authenticity: who controlled the device and number, metadata, forensic imaging, and corroborating conduct (payments, deliveries, other messages). Denial does not end the case — it changes what must be proved.

Someone used my photo/identity online. Is that “hacking”?

Not necessarily. Identity misuse, impersonation, morphing, and account takeover are different wrongs with different provisions (IT Act, BNS/IPC). What matters is which acts are alleged and what evidence connects the accused to them.

An IP address points to someone. Is that proof?

An IP address is a lead, not a name on a charge sheet. Shared connections, NAT, VPNs, and open networks all complicate attribution. Courts look for the fuller chain: subscriber records, device seizure, forensic linkage.

Is a group admin liable for everything posted in the group?

Not automatically. Courts have generally declined to treat admins as publishers of every member’s message absent common intention or active participation. Context — what the admin did, knew, and enabled — decides.

I won a chargeback. Is the criminal complaint against me over?

No. A chargeback is a banking/payment-network outcome. A criminal complaint runs on its own track and must be addressed on its own terms.

Do I have to report a ransomware incident?

Reporting obligations can arise from CERT-In directions, sectoral regulators, and contract. Paying quietly does not make legal questions disappear — it often adds new ones.

Does DPDP apply to old databases my business collected years ago?

DPDP does not magically clean legacy data. Disputes will turn on purpose, consent basis, and retention. An honest data inventory is the practical first step.

Can my employer read my work laptop?

Monitoring on employer-owned devices under a disclosed policy can prove misconduct — and still raise privacy questions about scope and proportionality. Both things can be true; the policy text and the manner of collection matter.