Wednesday, August 31, 2016

APPEAL IN PUBLIC INTEREST REGARDING ONLINE SHOPPING PORTALS

This communication highlights plights of online shopping consumers and requests your support and initiative to safeguard rights of those million of innocent customers as a PUBLIC INTEREST LITIGATION highlighting the issues was dismissed on grounds that Law Making is function of Legislatures and Judiciary is not supposed to encroach on same.
Everyone is aware about new communication systems and digital technologies and dramatic changes made by them in the way we live. A revolution is occurring in the way people transact business. There is increasing use of online technologies these days in practically all walks of life. Be it online shopping or online ticket booking for train or cinema or ordering of food through online services available or online payment of various bills or recharge of mobile phones and so on and so forth.
There is unprecedented growth in online shopping activities or what is best understood as e-commerce activities in India, of late, due to increased use of technology. E-commerce activities mostly consists of buying or selling of goods and services, or transmitting the funds or data over an electronic platform mainly internet. Millions of people shop online everyday, spending hundreds of thousands of rupees. Simultaneously the number of online retailers is equally impressive; this means that you get a wide range of shops to choose from, but also with the probability that you may fall a victim of fraud through these online shops.
It has been observed that persons carrying out Online shopping activities are deprived protections of law as there is total absence of suitable legislation for protecting the online shoppers. Online shopping victims are facing discrimination in various ways when they go for registration of FIR or reporting in matters of frauds to local police station. There is complete absence of regulatory mechanism for registration, monitoring and controlling the online shopping portals unlike regulatory mechanism available for physical shops. When it comes to reporting regarding frauds or cheating through online shopping or related activities general public is finding it very difficult to report the same with local police. Many fraudulent online shopping websites and online payment gateways have come up currently and many people are being duped while carrying out online activities.
As per available statistics of 2014, online shopping base in India is about 40 million and it is expected to touch 100 million in near future. The volume of amount transacted is about to touch 60,000 crore approximately. The average annual spending of Indians on online purchases is expected to rise 67 percent to Rs. 10,000   next year, according to Assocham-PwC study. About 40 million consumers purchased something online in year 2014 and the number is expected to grow to 65 million by 2015 with better infrastructure in terms of logistics, broadband  and Internet-ready devices.
The overall e-commerce industry, valued at $17 billion (Roughly Rs. 1, 08,167 crores), has been growing at a compounded annual growth rate of about 35 percent each year, the study said, adding that it is expected to cross the $100 Billion (roughly Rs. 6, 36,281crores) mark in five years.
So if proper regulations are not framed immediately to monitor and regulate this huge amount of transaction which is being carried out through online mediums and more specifically through online shopping portals and online payment gateways anticipating the safety and security of the people, there would be immense monetary loss of people and also loss of faith in these mediums.
Many online shopping companies does not have any physical location or contact address or point of contact displayed and customers are left to the mercy of online shopping website owner in case of return or exchange of goods. It has also been observed that many online shopping portals have either published the address which is not traceable prima facie or not at all published any physical address, and there are no regulatory guidelines which mandates for verification of the address of such online shopping sites prior to uploading it on website by any government machinery. Though there is provision under Information technology (Intermediary Guidelines) Rules 2011 clause 11 for publication of name of grievance officer and his contact details as well as contact mechanism for contacting them. Under Article 302 government can impose reasonable restrictions for protecting public interest on trade and commerce activities and online shopping is also covered under the same.
Also other problem is regarding jurisdiction. Even if some victim tries to lodge complaint against such online shopping portal or payment gateway then police are not entertaining such complaints either on the ground that transaction occurred in some different jurisdiction and hence crime did not happen in their jurisdiction or the type of matter falls under Tort, i.e. civil wrong and hence no police complaint is required. This attitude of police also defeats fundamental right under article 14 of equal protection of law. There seems to be different attitudes of law enforcing agencies towards tackling of crimes through normal physical shops/stores and online shopping portals.
As per information received under Right to Information it is not specified by Government that to which department these online shopping portals or online recharge portals are answerable or reportable and hence no specific government department is proactive towards curbing malpractices in online shopping and online payment gateways activities.
The magnitude of cyber crimes being committed is unimaginable. The investigation is not properly carried out in most of the cases due to lack of proper training to law enforcing agencies. General public at large, is falling prey to many such fraudulent online shopping and payment gateways due to lack of awareness and as there is no mechanism of registration of such websites as well as payment gateways by government. This is certainly not a healthy trend as online activities are growing every passing day and people are losing huge amounts in through the same. Rather this situation of lawlessness and anarchy in cyberspace is encouraging criminals to Rule the Cyber Space for their benefit.
This can also be a serious threat to National economy. As by “following the money” many facets’ of the criminals who are perpetrating such crimes can be uncovered and that can have huge impact on national economy as well as national security.
These incidents of crimes are mostly linked with transfer of money may be small or large. In this era of globalization cross border transactions are accomplished without any control over the same and the money derived out of these fraudulent transactions can be used to finance illegal as well as terrorist activities to destabilize the state. And hence this issue needs to be addressed as utmost priority
Hence it is requested to frame rules for registration and regulation of the online shopping portals and online payment gateways, immediately, so that general public at large will not be defrauded by such fraudulent online shopping websites or online recharge portals;
Further government is requested to issue instructions to all online shopping portals and payment gateways to upload the name of grievance officer with full contact details on their website and preserve and retain the information of all the transactions carried through them for at least a period of one year.
Public Interest Litigation was filed to highlight all the above issues before Hon’ble Nagpur Bench of High Court by the undersigned but the Hon’ble court observed very rightly that Law making is essential and exclusive function of Government and hence undersigned petitioner was advised to move to respective governments and hence this representation/appeal in the public interest.

Advocate Mahendra Limaye
Cyber Legal Consultant
09422109619
CYBER CRIME HELPLINE 09225109900

Tuesday, May 3, 2016

RBI ACKNOWLEDGES FINANCIAL ILL- LITERACY AND LACK OF AWARENESS



                 The Reserve Bank of India has recently come up with Notification dated 21 April 2016 vide ref. no.RBI/2015-16/378 DBR No.Leg.BC.93/09.07.005/2015-16 regarding Publicity in Bank branches cautioning public against placing deposits in dubious schemes.
                The Circular says that RBI has noticed that customers receive telephone calls relating to winning of lotteries/prizes etc. or various dubious schemes have been floated where returns are higher than offered by banks on deposits. The customer believing such messages/schemes remit the required amount apart from divulging details of their accounts to the fraudsters.
               Then circular adds that absence of financial literacy and lack of alertness to fraudulent schemes/calls are the main reasons behind innocent depositors falling prey to such schemes.
               There after circular states that all Scheduled Commercial Banks including Regional rural Banks and Local Area Banks may in their own interest and as customer education effort in interest of public consider designing suitable posters or pamphlets and notices consisting messages of awareness.
                Cyber Awareness Organisation suggests some additional measures which should be implemented on priority basis for prevention of such frauds and protecting public’s hard earned money.
1)    RBI itself is sitting on huge fund known as Depositors Education and Awareness Fund since last two years and should consider releasing same for benefit of customer education and awareness as per old saying CHARITY BEGINS AT HOME!!!!
2)    RBI should mandate all the banks to carry out Customer Cyber Awareness and Education program in each branch on bi-monthly basis to impart security trainings to customers.
3)    RBI should create central helpline for speedy reporting and data analysis of such frauds so as to act faster.
4)    RBI should monitor AML reporting on weekly basis and more consistently.
5)    There has to be synchronization of LEA, RBI AND TSP’s in investigations.
6)    The payments gateways should be properly regulated.
7)    There must be some cooling time for all transactions except few where additional security or authentication measures are followed with prior approval of the customer.
8)    All payment gateways must be compliant with section 43A of I T Act.
9)    RBI should monitor KYC implementation more strictly and illiterate customers should not be provided with any type of Credit/Debit cards.    
                There are many more such suggestions like encouraging talk shows/power point presentations for creating cyber awareness among users etc.

                 We congratulate RBI for the issuance of this circular which is first step towards creating Cyber Awareness and CYBER AWARENESS ORGANISATION feels proud that its cause is at least endorsed by the Apex bank of India.


Monday, April 18, 2016

Information Technology Civil Judicial System, Is it working?



All of us know that online transactions have gained the momentum it desired and many people are finding benefits of it. There are few black sheep’s in this business also and to take action agonist them Information Technology Act was introduced as Special Act by Parliament of India. There are sections 43 and 43A which specifically deals with Civil Liability and for appealing under these sections Adjudicators have been prescribed under Information Technology Act. These Adjudicators are Information Technology Secretary of respective State governments.
To appeal against decisions of these Adjudicators, the Cyber appellate Tribunal has been constituted under said act.
So we presume that the set up is very fine and must be in order.
But reality is very different. The most progressive state Maharashtra, which was in many ways a trend setter in I T Adjudication till Mr. Rajesh Aggrawal was Adjudicator, has conducted only two hearings in last two years.
Amazing!!!!! A state with 47 cases registered in 2014, 59 cases in 2015 and 18 cases till March 2016 could conduct only one hearing in entire Year speaks itself about the way government is looking towards I T Civil Litigation's.
And it’s no good to speak about CYBER APPELLATE TRIBUNAL which is yet to see new Chairperson since last many years.
The Information Technology Department Maharashtra neither is bothered about updating its website in relation to I T Act cases nor interested in ascertaining how much Court fees is paid to it towards such litigation's.
It has to be mentioned very sadly that A country whose Prime Minister is encouraging use of Technology in every possible manner is unaware about I T Civil Judicial System.
Its no good for a country where cyber criminals are targeting innocent people who are left remediless by such Judicial apathy.  

Friday, April 1, 2016

Regulators needed for PAYMENT GATEWAYS!!!!!



Last fortnight a leading Mobile Payment gateway from India unveiled its projections to 5,00,000 online seller base by March 2017 as compared to current seller base of 1,70,000.This portal alone facilitates 300 million payment transactions per day and has set a target of 1 billion by 2020.
As I presume this ONLINE BUSINESS IS HIGH VOLUME AND LOW MARGIN BUSINESS.
When margins are low there are possibilities of compromises with the security or quality of the services customers receive. As these online companies can not compromise with bandwidth and high resolution servers they are most likely to save by compromising on security measures. These companies are for profit and not for charity and scrutinizing their business module it looks more probable that they might be compromising on security.
Section 43A of Information Technology Act mandates these service providers to follow reasonable security practices and guidelines to protect sensitive personal data and information of the users.
Another point of worry about these payment gateways, which have mushroomed recently, is very few legal or technical compliance required from government end. In a rush towards fulfilling its well deserved mission of Start up India government seems to be neglecting inherent threats in cyberspace. The cyberspace is used by entrepreneurs, end users who are techno illiterate and simultaneously by cyber criminals who are highly comfortable with technology and rather are highly techno savvy.
All are cohabiting in same cyberspace and when these payment gateways are carrying out almost a billion transactions per day collectively, the cyber criminals are bound to found out vulnerabilities in the same and exploit them for their financial gain. The biggest losers in this scenario presently are the innocent online payment gateway users and more interestingly people who don’t even opt for these payment gateways for their any transaction.
Shocked????
How people who don’t even opt for online payment gateways can be falling prey to such frauds???

The modus operandi noticed is very simple. These fraudsters obtain credit/debit card details and cvv code from such innocent people and utilise same for fraudulent transactions through these payment gateways. Payment gateways are least bothered about origin of payment or destination of beneficiary. What they are bothered about is their transaction fees and nothing else.
There are many cases where payment gateways are unable to provide complete authenticated details of beneficiaries. This is alarming situation and currently cyber criminals are exploiting it very effectively. The amount of such frauds can not be estimated with limited information available with my organisation but I am sure its figure will be unimaginable by anybody. If you prefer to guess you are welcome.

It’s high time that Payment Gateways must be brought under some sort of Regulatory mechanism!!!
This regulator will be entrusted to look into all such matters where Payment Gateways are found to be involved in some sort of fraudulent activities. For want of such regulatory mechanism, unnecessarily Good Payment Gateways are also being tarnished.
To avoid this situation and make people believe in this online payment mechanism the formation of such regulator is NEED OF HOUR.

Tuesday, January 26, 2016

Need of hour to strengthen Cyber Judiciary regime in India.



India is fastest developing economy in world and under vibrant leadership of Hon.PM Narendra Modiji it is set to instigate many projects through e-governance activities. It will also be a booster to various e-commerce activities in India. Mission Digital India with its expected and anticipated targets will make many more citizens use online services and yield its benefits.
With more and more focus on digitalisation of activities and era of Internet of Things, citizens are left with no option but to become digital knowledgeable. While many e-commerce activities are getting impetus like online shopping, online ticket booking, online complaint reporting mechanisms etc., the focus of government is bound to promote growth of more and more digitalisation.
The digitalisation of services provides various benefits like transparency, efficiency and jurisdiction and hence are becoming more and more attractive.
But there is other side of this digitalisation which is neither noticed yet nor thought for. This other side is allied to disputes in e-commerce activities. Due to growth of e-commerce activities there are various issues which need to be answered but till date very meager efforts are put into resolving them.
Indeed I am highlighting Internet Frauds and Cyber crimes and its reporting mechanism. When in country like India which has larger geographical territory among many countries in world, it’s very convenient for cyber criminals to commit crimes from far off location even within country and with petty amount involved and get away with it. The reason behind is for meager amount local police won’t register crime or owing to location of actual happening of incident the police will display their inability to register crimes due to jurisdiction issue.
And even if some victims are able to register the offenses then there is another stumbling block known as judiciary. When in a country like India where normal judiciary is neglected less should be said about Cyber Judicial process. In Supreme Courts and High Courts almost 50 percent vacancies exists in posts of Judges till date and hence cases are piling up by every passing day. It’s better not to say anything about lower courts vacancies and case pending ratio.
But in this era of digitalisation many people believe that cyber adjudication must be different from traditional judicial process and there must be faster relief to the victims. But this can be said as mere wishful thinking and nothing else. If we strictly go by Information Technology Act, a special act passed by Indian Parliament to regularise e-commerce activities in India, it certainly provides for time bound adjudication. The desired duration for completion of adjudication is specified as Six months and which is very welcome one.
But if we scrutinize reality it’s totally catastrophic. For example the apex body for cyber adjudication known as Cyber Appellate Tribunal is without any head and hence almost defunct since last 4-5 years. There are about 67 appeals pending from across India since 2011 and no real efforts seems to be taken to provide relief to these 67 applicants. It is said that justice delayed is justice denied but I think time has come to redefine the word “Delay”. In this digitalised word every second is significant because by every passing second I P Address can change so can location of criminal and so also the cyber crime victim. So in this digitalisation era there is magnanimous importance to time bound activities and hence Timing is very crucial in Cyber Adjudication Matters also.
Even if we observe the lower level of Cyber Adjudication, which is termed as Adjudicator and Information Technology Secretary of each state, is designated as Adjudicating Officer, there is even more pathetic situation. Most of the I T Secretaries even today have not entertained a single case till date i.e. even after passage of 15 years, since when they were supposed to act in such capacity.
Even if we consider one of the most progressive states i.e. Maharashtra, there have been no significant hearings since last one year. It’s better not to comment about performance of rest of the Adjudicating Officers in other Indian States.
So in this situation where police are unenthusiastic to register cyber crime complaints and cyber judiciary is practically non- functional, what the ordinary citizen should do if he is cyber crime victim?
The growth in cyber crimes is imminent as more and more financial transactions are carried on using online medium and also confirmed by recent NCRB statistics.
The present cyber judicial situation needs to be revamped drastically. Cyber Judiciary should be seen as priority sector so that cyber criminals can be penalized and deterred and which can be one of the factors to bring down cyber crimes. If we go by financial frauds reported through credit or debit cards or through dubious online portals its need of hour to reinforce our Cyber Judiciary regime.
Hope that some wisdom will prevail and steps will be taken in this direction.