Cyber Crime in Bangladesh 2026 – Laws, Types, Penalties and How to Fight Back

Under Bangladesh law, cyber crime refers to any criminal act that involves computers, digital devices, or the internet — either as the tool used to commit the crime or as the target of the crime. The two primary statutes that define and punish cyber crime are:

• Digital Security Act 2018 (DSA): The main cyber crime law, covering offences from hacking to online defamation to cyber terrorism
• Cyber Security Act 2023 (CSA): Enacted to replace the more controversial provisions of the DSA, particularly those restricting speech and press freedom. The CSA maintains criminal provisions for clear cyber crimes while attempting to balance digital rights.

In addition, the ICT Act 2006 (amended 2013) continues to apply to older cases, and the Penal Code 1860 covers cyber-enabled versions of traditional crimes like cheating (Section 420), extortion (Section 383), and defamation (Sections 499–500).

A cyber crime lawyer in Dhaka can advise which law applies to your specific situation — the choice of law significantly affects available charges, penalties, and the court that handles the case.

Bangladesh has experienced a dramatic rise in cyber crime in recent years, driven by rapid digitalisation and increased internet use:

• Mobile internet users: over 110 million — one of the fastest-growing in South Asia
• Mobile financial service transactions (bKash, Nagad, Rocket): over BDT 1 trillion monthly — creating major fraud opportunities
• Facebook users: over 50 million in Bangladesh — the largest social platform and the most common cyber crime target
• Cyber crime complaints at police stations increased by over 300% from 2019 to 2024
• Online financial fraud and bKash/Nagad scams account for the majority of cyber crime complaints

Bangladesh's Cyber Crime Investigation Centre (CCIC) and Police Cyber Support for Women (PCSW) handle thousands of new cases each month. Despite growing capacity, many cyber crimes go unreported because victims do not know where or how to report.

The most common cyber crimes reported in Bangladesh in 2026:

1. Online Financial Fraud
Scammers pose as legitimate sellers, employers, or investment managers to steal money through bKash, Nagad, bank transfers, or fake e-commerce sites. This is the most reported cyber crime in Bangladesh.

2. Social Media Harassment and Threats
Sending threatening, abusive, or sexual messages through Facebook, WhatsApp, or other platforms. Creating fake profiles to impersonate someone. Posting sexually explicit content without consent.

3. Blackmail and Sextortion
Threatening to share intimate images or personal information unless the victim pays money or provides sexual favours. Increasingly targeting young women and students.

4. Hacking and Unauthorized Access
Gaining access to someone's email, Facebook, or bank account without permission. Deploying malware or ransomware on business or government computers.

5. Online Defamation
Publishing false statements on social media, websites, or messaging groups that damage someone's reputation. Filing false police complaints after threatening social media campaigns.

6. Identity Theft and SIM Swap Fraud
Using someone else's NID to open bank accounts, mobile financial services, or obtain SIM cards. Tricking telecom operators into transferring a victim's number to a fraudster's SIM.

7. Child Online Exploitation
Any sexual content, grooming, or abuse involving minors through digital means — treated with maximum severity under both DSA and the Children Act 2013.

8. Spreading False Information
Deliberately circulating false, rumour-based content that causes public panic, communal tension, or harm to government or public institutions.

Understanding which law applies to your situation determines the penalty and the court that handles the case:

Repeat offenders face double the penalties. Cases involving minors or national security concerns attract maximum punishments. The Cyber Security Act 2023 modified some of these provisions — a lawyer will advise on the most current applicable law for your specific case.

Bangladesh courts take cyber crime seriously, especially repeat offences and crimes targeting women or children. Key punishment principles:

• Non-bailable offences: Serious cyber crimes including hacking government systems, cyber terrorism, and child pornography are non-bailable — the accused cannot get bail automatically from the police station.
• Cognizable offences: Police can arrest without a warrant for most DSA/CSA offences — meaning suspects can be arrested quickly once identified.
• Forfeiture of assets: Courts can order forfeiture of equipment and financial gains from cyber crime.
• Platform orders: The Cyber Tribunal can order platforms to remove illegal content and can direct telecom companies to block access to specific content or accounts.
• International cooperation: Bangladesh Police can request mutual legal assistance from foreign countries for cross-border cyber crime through Interpol channels.

Bangladesh's Cyber Tribunal in Dhaka handles all DSA/CSA cases. Trial timelines vary from a few months to several years depending on complexity. Cases with solid digital evidence — IP records, platform user data, financial transaction records — tend to resolve faster.

Multiple agencies investigate cyber crime in Bangladesh, each with different capabilities and jurisdiction:

• Cyber Crime Investigation Centre (CCIC): The primary specialised unit under CID Bangladesh. Handles complex cyber fraud, hacking, and high-profile cases. Located at CID HQ, Malibagh, Dhaka. Complaints via cybercrime.gov.bd.
• Police Cyber Support for Women (PCSW): Dedicated unit handling cyber crimes targeting women and children. Helpline: 01320-000888.
• Counter Terrorism and Transnational Crime (CTTC): Handles cyber terrorism, organised cyber fraud rings, and cases with national security implications.
• Regular Police Stations: Any police station can receive a GD or FIR for cyber crime and route it to the appropriate specialist unit.
• BTRC (Bangladesh Telecommunication Regulatory Commission): Handles telecom-related cyber crime and can order mobile operators to take action. Helpline: 100.

If you are a victim of cyber crime in Bangladesh, take these steps immediately — the sooner you act, the better the outcome:

1. Do NOT delete any evidence. Screenshots, messages, URLs, transaction records — keep everything even if it is upsetting or embarrassing. Deleted evidence cannot be recovered from your device.
2. Screenshot everything with the URL visible in the browser bar — this is critical for identifying and locating the content.
3. Save suspect information: Profile URL, phone number, email, account username, any payment information they provided.
4. Contact your bank or mobile financial service immediately if financial fraud is involved. Call bKash: 16247, Nagad: 16167 — transactions can sometimes be frozen if reported within hours.
5. Report to PCSW (for women): Call 01320-000888 for harassment, blackmail, or image-based abuse.
6. File online at cybercrime.gov.bd — submit your complaint with all evidence uploaded.
7. Visit your nearest police station to file a GD or FIR — this creates a formal case record needed for parallel legal proceedings.
8. Consult a cyber crime lawyer in Dhaka — especially if the content is still online, if money needs to be recovered, or if the investigation is not progressing.

If you receive a police summons, notice, or arrest for an alleged cyber crime, your rights under Bangladesh law:

• Right to know the charges: Police must inform you of the specific offence you are accused of.
• Right to legal representation: You can appoint a lawyer immediately — do NOT give any statement to police without your lawyer present.
• Right against self-incrimination: You are not required to answer police questions in a way that incriminates yourself.
• Bail rights: For bailable cyber crime offences, you are entitled to bail from the police station. For non-bailable offences (serious hacking, cyber terrorism, child exploitation), bail must be sought from the Cyber Tribunal or Sessions Court.
• Right to challenge false cases: If you have been falsely accused of cyber crime, legal remedies include anticipatory bail, quashment of the FIR at the High Court, and filing a counter-complaint for filing a false case.

Cyber crime accusations are serious and can result in immediate arrest. Contact Advocate Md. Shah Alam immediately if you receive any police notice or summons related to a cyber crime complaint. Early legal intervention is critical.

Bangladesh has specific legal provisions and mechanisms to protect women from cyber crime:

• Police Cyber Support for Women (PCSW): Dedicated 24/7 helpline (01320-000888) staffed by trained female police officers for sensitive cyber crime cases
• Section 26, DSA: Publishing sexually explicit content about anyone without consent — up to 10 years imprisonment, one of the harshest cyber crime penalties
• Section 25, DSA: Sending threatening or intimidating messages targeting someone — specifically applied in cases of online domestic violence and stalking
• Women and Children Repression Prevention Act 2000: Where online conduct amounts to sexual harassment or assault, this law applies alongside the DSA — with its own special courts and faster trial procedures
• Facebook takedowns: PCSW has established direct relationships with Facebook/Meta's regional office to expedite emergency content removal requests for cases of image-based abuse

Women and girls who are victims of online harassment should not delay reporting out of embarrassment or fear — the legal system treats these matters with confidentiality. The female legal support available at our Uttara chamber ensures sensitive handling of your case.

Cyber crime cases in Bangladesh are tried before the dedicated Cyber Tribunal, established under the Digital Security Act 2018 and continued under the Cyber Security Act 2023:

• Location: The Cyber Tribunal sits in Dhaka. For cases outside Dhaka, the Sessions Court judge may be designated as the presiding authority.
• Exclusive jurisdiction: The Cyber Tribunal has exclusive jurisdiction over DSA/CSA offences — regular criminal courts cannot try these cases.
• Bail applications: For non-bailable offences, bail must be sought from the Cyber Tribunal. The court considers flight risk, evidence tampering potential, and seriousness of the offence.
• Evidence rules: Digital evidence — screenshots, email headers, IP logs, platform user data — is admissible under the Evidence (Amendment) Act and the DSA. Forensic expert testimony is common.
• Content removal orders: The Cyber Tribunal can issue ex-parte (one-sided) emergency orders directing platforms to remove content pending full trial — this is critical for defamation and image-based abuse cases.
• Trial timeline: Targeted 6–12 months per the DSA, but in practice, complex cases take longer. Cases with strong digital evidence and cooperative platforms resolve fastest.

Whether you are a victim seeking justice or an accused person defending your rights, expert legal representation is essential at every stage of the Cyber Tribunal process. Contact Advocate Md. Shah Alam for a confidential consultation about your cyber crime case.

Mobile financial service fraud (bKash, Nagad, Rocket scams) and social media harassment/blackmail are the two most reported cyber crimes in Bangladesh. Facebook is the most common platform for harassment, threats, and defamation cases.

Yes. Posting threatening content (DSA Section 25), defamatory content (DSA Section 29), sexually explicit or obscene content (DSA Section 26), or content causing communal tension (DSA Section 28) are all arrestable offences under Bangladesh law. Police can arrest without warrant for cognizable DSA offences.

The Cyber Security Act 2023 was enacted to replace the more controversial provisions of the Digital Security Act 2018, particularly Section 57 which was widely criticised for criminalising legitimate free speech. The CSA narrowed some offences and improved fair trial provisions, but maintained criminal penalties for clear cyber crimes like hacking, fraud, and blackmail.

It depends on the specific offence. Many cyber crimes under DSA/CSA are bailable, and bail can be obtained from the police station. However, serious offences like hacking government systems, cyber terrorism, and child exploitation are non-bailable — bail must be sought from the Cyber Tribunal. A lawyer can apply for anticipatory bail before an arrest if needed.

Simple fraud cases can be resolved in 3–6 months. Complex cases involving international perpetrators, large-scale fraud, or contested evidence take 1–3 years. Cases with strong digital evidence and identified suspects resolve faster. Your lawyer can push for faster action on investigation and trial scheduling.