How to Report Cybercrimes in Nepal

Cybercrime in Nepal has grown steadily with the rise of internet banking, social media, e-commerce, and remote business operations. Foreign investors, local entrepreneurs, and ordinary citizens face risks such as online fraud, data theft, hacking, phishing, and identity theft on a regular basis. Understanding how to report cybercrime in Nepal is essential not only for individuals but also for businesses, including foreign-owned companies registered under the guidance of firms like CompanyNP. This article explains, in simple and factual terms, the legal framework, the authorities responsible, the reporting process, and the penalties associated with cyber offenses in Nepal, based on the Electronic Transaction Act, the Muluki Criminal Code, and other official Nepali laws.

Legal Framework Governing Cybercrime in Nepal

Cybercrime in Nepal is primarily regulated under the Electronic Transaction Act, 2063 (2008), often referred to as the ETA. This law was introduced to give legal recognition to electronic records and digital signatures while also defining offenses related to computers, networks, and electronic data. Along with the ETA, several other laws support cyber law enforcement in the country.

• Electronic Transaction Act, 2063 (2008), which defines cyber offenses and penalties
• Muluki Criminal Code, 2074 (2017), which covers general criminal offenses including online defamation and harassment
• Privacy Act, 2075 (2018), which protects personal data and privacy rights
• National Cyber Security Policy, which guides government agencies on cyber safety measures
• Individual Privacy Act and related regulations issued by Nepal Rastra Bank for financial data protection

These laws collectively form the backbone of cyber law in Nepal and are enforced by dedicated police units and judicial bodies. For the exact legal text, readers may refer to the Law Commission of Nepal at lawcommission.gov.np, which publishes official versions of Nepali statutes including the Electronic Transaction Act.

Why Cyber Law Matters for Businesses and Foreign Investors

Foreign investors and companies operating in Nepal, including those registered through the Department of Industry, must comply with data protection and cyber security obligations. A company that experiences a data breach or is targeted by a cyber attack can face financial loss, reputational damage, and legal exposure if it fails to report the incident properly. Compliance with cyber law is therefore an important part of overall business compliance in Nepal, alongside company registration, tax filing, and industry-specific regulations.

What Counts as a Cybercrime Under Nepali Law

The Electronic Transaction Act and related laws recognize a wide range of activities as punishable cyber offenses. Understanding these categories helps victims identify whether an incident qualifies as a reportable cybercrime.

• Unauthorized access to a computer, network, or electronic system
• Hacking or damaging computer source code
• Publishing or transmitting obscene or offensive material through electronic means
• Cyber fraud, including phishing and online financial scams
• Identity theft and impersonation using digital platforms
• Data theft, unauthorized data alteration, or data destruction
• Online defamation, harassment, and cyberbullying
• Unauthorized disclosure of confidential or personal information

Each of these offenses carries specific penalties under the ETA, which are discussed later in this article.

Common Examples of Cybercrime Faced by Businesses

Businesses operating in Nepal, particularly those with an online presence, frequently encounter the following situations.

• Fake websites or social media pages impersonating a registered company
• Phishing emails targeting employees or customers
• Unauthorized access to company servers or cloud accounts
• Leakage of confidential business or financial data
• Online defamation affecting a company’s reputation

Which Authority Handles Cybercrime Complaints

The primary agency responsible for investigating cybercrime in Nepal is the Cyber Bureau under Nepal Police. This specialized unit was established to handle complaints related to hacking, online fraud, cyberbullying, and other digital offenses.

Nepal Police Cyber Bureau

The Cyber Bureau, based in Kathmandu with branch offices in various districts, is the designated authority for receiving, investigating, and processing cybercrime complaints. Victims can visit the Cyber Bureau office directly or submit complaints through its official channels. More information is available on the official Nepal Police website at nepalpolice.gov.np.

Role of District Police Offices and the Judiciary

In areas where a dedicated Cyber Bureau office is not available, complaints can be filed at the nearest District Police Office, which forwards the case to the Cyber Bureau for technical investigation. Once investigated, cases are forwarded to the District Government Attorney Office for prosecution, and serious offenses are tried in the District Court under the Muluki Criminal Code and the Electronic Transaction Act.

Step by Step Process to Report a Cybercrime in Nepal

Reporting a cybercrime in Nepal involves a clear sequence of steps. The table below outlines the general process followed by victims and authorities.

Step	Action Required
Step 1: Identify and document the incident	Record screenshots, save emails, transaction details, and any digital evidence related to the incident
Step 2: Visit or contact the Cyber Bureau	Approach the nearest Cyber Bureau office or district police office to file a written complaint
Step 3: Submit a written application	Provide a formal complaint letter along with supporting evidence and personal identification documents
Step 4: Cooperate with the investigation	Provide additional information if requested by investigating officers
Step 5: Receive updates on case status	Follow up with the Cyber Bureau or assigned officer regarding the progress of the investigation
Step 6: Attend legal proceedings if required	Appear before the District Government Attorney Office or court if the case proceeds to prosecution

Below is a description of each step in more detail.

Step 1: Identify and document the incident Before filing a complaint, victims should gather all relevant evidence such as screenshots of fraudulent messages, suspicious emails, bank transaction records, or unauthorized access logs. This evidence strengthens the complaint and helps investigators trace the offender.

Step 2: Visit or contact the Cyber Bureau Victims can visit the Cyber Bureau office in person or, where available, use official online reporting channels. It is advisable to bring a copy of citizenship documents or, for foreign nationals, a passport and visa documents.

Step 3: Submit a written application A written complaint describing the incident in detail, along with the collected evidence, must be submitted to the Cyber Bureau or the nearest police office. The complaint should include the date, time, and nature of the cyber offense.

Step 4: Cooperate with the investigation Once the complaint is registered, police officers may request additional details, device access, or clarification to support the technical investigation.

Step 5: Receive updates on case status Victims are generally entitled to receive updates about the progress of their complaint from the investigating officer or the Cyber Bureau.

Step 6: Attend legal proceedings if required If the case is forwarded for prosecution, the complainant may be required to provide statements before the Government Attorney Office or attend court proceedings under Nepali criminal procedure law.

Documents Required When Filing a Cybercrime Complaint

Proper documentation is necessary to ensure that a cybercrime complaint is processed efficiently. The following table lists commonly required documents.

Document	Purpose
Citizenship certificate or passport	To verify the identity of the complainant
Written complaint letter	To formally describe the incident
Screenshots or digital evidence	To support the claim with proof
Bank statements, if financial fraud is involved	To demonstrate financial loss
Company registration certificate, if the complainant is a business	To confirm the legal status of the affected organization
Any correspondence with the alleged offender	To assist in identifying the perpetrator

Foreign nationals and foreign-owned companies registered in Nepal should also keep copies of their company registration certificate issued by the Department of Industry, as this may be requested when the complainant is a registered business entity. Official information on company registration procedures is available at doind.gov.np.

Additional Tips for Filing a Strong Complaint

• Report the incident as soon as possible after discovery
• Avoid deleting any communication related to the incident
• Keep a record of all correspondence with the investigating authority
• Seek legal assistance if the case involves significant financial loss

Online Reporting Options and Helpline Numbers

The Cyber Bureau of Nepal Police has introduced digital channels to make reporting more accessible for citizens and businesses across the country.

Cyber Bureau Online Portal

Nepal Police maintains an online complaint system where individuals can register basic details of a cyber incident before visiting the office in person for formal documentation. This system is intended to reduce delays and allow victims to initiate the process remotely.

Nepal Police Hotline and Emergency Contact

For urgent matters, individuals can contact the Nepal Police hotline number 100 or the dedicated Cyber Bureau contact numbers listed on the official Nepal Police website. It is recommended to verify the latest contact details directly from nepalpolice.gov.np, since helpline numbers may be updated periodically.

Penalties for Cybercrime Under the Electronic Transaction Act

The Electronic Transaction Act prescribes specific punishments depending on the nature and severity of the offense. The table below summarizes common penalties.

Offense	Punishment under Electronic Transaction Act
Unauthorized access to a computer system	Fine and imprisonment as prescribed under the Act
Damaging or altering computer source code	Imprisonment and monetary fine
Publishing obscene material electronically	Imprisonment and fine, with enhanced punishment for repeat offenses
Cyber fraud or financial deception	Fine and imprisonment based on the value of loss caused
Unauthorized disclosure of confidential information	Fine and imprisonment as determined by the court

Actual penalties depend on the specific facts of each case and are determined by the court based on the provisions of the Electronic Transaction Act and the Muluki Criminal Code. For the complete and updated text of penalty provisions, readers should consult the official version published by the Law Commission of Nepal.

Role of Businesses and Foreign Investors in Cyber Safety

Companies operating in Nepal, particularly those with foreign ownership, are expected to maintain reasonable data protection practices and respond promptly to cyber incidents. Businesses registered under the Companies Act and regulated by the Department of Industry should treat cybercrime reporting as part of their broader legal compliance obligations, alongside tax filing under the Income Tax Act and foreign investment reporting requirements under the Foreign Investment and Technology Transfer Act.

Practical Cyber Security Measures for Registered Companies

• Maintain updated antivirus and firewall systems
• Restrict access to sensitive company data
• Train employees on recognizing phishing attempts
• Maintain backup records of important business and financial data
• Report suspicious activity to the Cyber Bureau without delay

How CompanyNP Assists Foreign Owned Businesses

CompanyNP supports foreign investors and businesses throughout the company registration process in Nepal, including guidance on regulatory compliance. While CompanyNP does not replace legal counsel or law enforcement, it helps registered businesses understand their obligations under Nepali law, including areas that intersect with cyber security and data protection, so that companies can operate safely and in accordance with national regulations.

Frequently Asked Questions