Home > Resources > Cyber Offences & Digital Safety FAQs > Digital Brand, Influencer & Identity Misuse
Digital Brand, Influencer & Identity Misuse FAQs
These FAQs cover fake and misleading accounts, personality and publicity interests, deepfakes and voice cloning, false endorsements, domains and marketplaces, platform complaints, cyber-offence routes, evidence and preventive controls in India.
Important scope note. Digital identity disputes can involve several legal regimes at once. The appropriate route depends on the identity, mark or content used, the commercial or deceptive context, evidence, urgency and the relief sought; a platform action is not a final determination of legal liability.
A. Digital Identity Misuse, Fan Accounts and Brand Confusion
Digital identity misuse can include fake or deceptively similar social-media accounts, false business pages, impersonating handles, cloned profile photographs and biographies, fabricated endorsements, copied posts, misleading advertisements, deceptive domains or marketplace stores, voice or likeness imitation, and fraudulent messages sent in another person’s or brand’s name. The same incident can raise trademark, passing-off, copyright, personality, privacy, consumer-protection, contract and cybercrime issues. The legal route should match the actual conduct rather than use one label for every case.
No. A genuine fan, commentary or tribute account is not automatically unlawful merely because it refers to a public figure or brand. Risk increases where the handle, profile image, biography, visual presentation, verification-like features, commercial activity or surrounding content is likely to make users believe that the account is official, authorised, sponsored or controlled by the person or business concerned.
Not necessarily. A clear and prominent disclaimer can reduce confusion, but the account must be assessed as a whole. A disclaimer will not cure phishing, false commercial affiliation, deceptive sale of goods, fabricated endorsements or an overall presentation designed to make users believe the account is official.
Indian courts recognise legitimate space for authentic news, satire, parody and genuine criticism, including in cases involving well-known personalities. But speech protections do not automatically excuse fraud, false endorsement, passing off, deceptive commercial exploitation, unlawful copying or manipulated material presented as real. The legal analysis should distinguish expressive reference from impersonation or commercial misappropriation.
A registered trademark can support an infringement claim where the statutory requirements in the Trade Marks Act are met. Relevant questions include whether the sign is identical or similar, how it is used, whether the use is in the course of trade, the goods or services involved, likelihood of confusion and, for marks with reputation, unfair advantage or detriment. Not every online reference to a registered mark is infringement.
An unregistered business or personality may still have other rights. Section 27(2) of the Trade Marks Act preserves passing-off remedies, which generally require goodwill, misrepresentation and likely damage. Copyright may protect original logo artwork or content, and personality or privacy principles may apply to misuse of an individual’s identity. Lack of trademark registration therefore does not automatically leave deceptive impersonation without a remedy.
No. Context matters. Referential, descriptive or comparative use can be lawful in appropriate circumstances, and Section 30 places statutory limits on the effect of trademark registration where use accords with honest practices and does not unfairly exploit or damage the mark. Risk increases where the mark is used to divert consumers deceptively, imply sponsorship, sell competing or counterfeit goods, support a scam or exploit the reputation of a well-known mark.
Yes. Trademark law protects source-identifying signs, while copyright may separately protect original artistic expression in a logo, photograph, illustration, video, caption or graphic. The claimant should identify which work is owned, who created it and what was copied rather than assume trademark ownership proves copyright ownership.
Potentially. Passing off focuses on misrepresentation in relation to goodwill and resulting or likely damage. A deceptive page that presents itself as an official branch, franchise, support channel, seller or booking account can create confusion and diversion even before a completed sale. Evidence of messages, enquiries, complaints and attempted transactions can therefore be important.
B. Personality Rights, Deepfakes, Voice Clones and False Endorsements
Indian courts have recognised personality and publicity interests in appropriate cases, particularly against unauthorised commercial exploitation, false endorsement, impersonation and misuse of attributes closely identified with a well-known person. The protection is judge-developed and fact-sensitive rather than contained in one comprehensive personality-rights statute. Trademark, passing-off, copyright, privacy and contract rights may operate alongside it.
No. Personality protection must coexist with freedom of speech, news reporting, satire, parody, criticism, artistic expression and other legitimate uses. Courts have distinguished genuine expressive reference from unauthorised exploitation that misappropriates commercial value, creates false affiliation, invades privacy or deceives the public. The context and purpose of use are therefore critical.
Yes. The strongest commercial publicity-right cases often involve famous personalities, but an ordinary person may still rely on privacy, passing off where goodwill exists, defamation, contract, data-protection principles, cybercrime provisions, platform impersonation policies and other civil remedies depending on the facts. Celebrity status is not a prerequisite for every identity-misuse complaint.
A deepfake can engage several legal regimes depending on its content and purpose. A false commercial endorsement may raise personality, passing-off, trademark and consumer-protection issues; sexualised or invasive content can engage privacy and criminal provisions; deceptive impersonation can support cybercrime analysis; and copied underlying footage, photographs or recordings can raise copyright issues. No single “deepfake offence” should be assumed to answer every case.
A voice clone used to create false statements, advertisements, scam calls or fabricated endorsements can raise personality, passing-off, defamation, privacy and cybercrime concerns. Where a protected performance or sound recording is copied, performer or copyright rights may also be relevant. Preserve both the synthetic output and authentic reference recordings used to demonstrate the impersonation.
The 2026 amendments to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 created a specific due-diligence framework for synthetically generated audio, visual and audio-visual information. The amended rules address unlawful synthetic content, labelling and technical provenance, while significant social-media intermediaries have additional user-declaration, verification and prominent-labelling duties. These intermediary obligations do not replace the underlying civil or criminal law governing the creator or user of the content.
No. Labelling helps users identify synthetic content, but it does not legalise material that is otherwise unlawful. A labelled synthetic video can still infringe personality, privacy, trademark, copyright or other rights, or constitute a criminal or misleading act depending on its contents and purpose.
A false endorsement occurs where content falsely represents that a person, influencer, professional or brand approved, recommended, sponsored, partnered with or used a product or service. It can create personality, passing-off, trademark and consumer-protection issues. The actual advertisement, landing page, seller identity, payment route and surrounding representations should be preserved.
Yes, depending on the facts. The Consumer Protection Act permits the Central Consumer Protection Authority to act against false or misleading advertisements, including directions to discontinue or modify them and statutory penalties in appropriate cases. Falsely attributing an endorsement can also support claims by the person whose identity has been misused.
A genuine influencer endorsement has its own compliance requirements. Consumer-affairs guidance requires prominent disclosure of a material connection with the advertiser, and the Consumer Protection Act recognises due diligence by an endorser as relevant to statutory liability. Payment, free products, travel, discounts, gifts and certain personal or employment relationships can amount to material connections requiring disclosure.
The official influencer guidance requires disclosures to be prominent, clear and hard to miss. A disclosure should not be buried among unrelated hashtags or placed where users are unlikely to notice it. The appropriate form also depends on the medium, such as text, video, live stream or short-form content.
Consumer-affairs guidance expressly recognises virtual influencers within the endorsement framework. Where a virtual persona is used in advertising, the responsible advertiser and publisher should still comply with misleading-advertisement and disclosure requirements. If the virtual persona imitates a real person or falsely suggests a real endorsement, separate personality and deception issues arise.
C. Domains, Handles, Advertisements, Marketplaces and Account Control
Possibly, but handle recovery is platform-specific. A claimant may use impersonation, trademark, fraud or account-ownership procedures depending on the facts. A trademark certificate can support a claim but does not automatically entitle the proprietor to every matching username. Prior legitimate use, commentary, personal naming and other facts may matter.
Potentially through the current .IN Domain Name Dispute Resolution Policy (INDRP). The complainant must establish the policy elements, including that the domain is identical or confusingly similar to a name, trademark or service mark in which the complainant has rights, that the registrant has no rights or legitimate interests, and that the domain was registered or is being used in bad faith or for an illegal or unlawful purpose. Transfer is not automatic merely because the domain contains the complainant’s name or mark.
The UDRP applies to eligible generic top-level domains and requires the complainant to establish confusing similarity to a trademark or service mark, absence of the registrant’s rights or legitimate interests, and that the domain was registered and is being used in bad faith. The .IN policy is a separate Indian framework and currently uses different wording, including registration or use in bad faith or for an illegal or unlawful purpose. The correct mechanism depends on the domain extension.
Preserve the exact domain, registration and historical records that are lawfully available, website screenshots, redirect behaviour, sale offers, emails, advertisements, payment requests, phishing evidence and proof of the complainant’s prior rights and goodwill. Domain content can change rapidly, so dated captures are important.
Preserve the advertiser identity or transparency record where available, exact advertisement, landing page, keyword or placement, payment or contact route and each relevant URL. Report it through the advertising platform channel that matches the issue, such as impersonation, trademark, scam or misleading advertisement. Ad removal is not a final legal determination of the advertiser’s liability.
Separate the issues. Trademark or passing off may address deceptive source identification; copyright may cover copied product photographs or graphics; platform anti-counterfeit or impersonation tools may provide quicker operational relief; and fraud or consumer law may apply to deceptive sales. Preserve product IDs, seller IDs, prices, reviews, transaction evidence and purchaser complaints before reporting.
No. Trademark law contains limits relating to legitimate identification and dealings in genuine goods, and factual circumstances can differ. A complaint should focus on counterfeit goods, materially altered goods, false affiliation, misleading presentation or other conduct that actually infringes or passes off rather than treating all resale references as unlawful.
Use the platform’s security and account-recovery process immediately, preserve login alerts and account-change notices, reset connected credentials and retain evidence of prior control. If the takeover involves unauthorised access, fraudulent messages or financial loss, cybercrime provisions and reporting routes may also be relevant. A trademark certificate alone does not restore technical control of an account.
Account-control disputes can involve contract, employment, agency, fiduciary, cybercrime and platform procedures. Preserve the account-creation history, registered email and phone details, administrator permissions, invoices, agency contract, content history and evidence showing who was authorised to control the account. Ownership of the trademark and ownership or control of the account are related but not identical issues.
That creates avoidable recovery risk. Official accounts should ordinarily use business-controlled recovery credentials, documented administrator roles and an exit process. Agency agreements should state account ownership, login custody, content ownership, advertising-account access and handover obligations.
D. Cyber Offences, Platform Complaints and Intermediary Rules
Section 66C concerns fraudulent or dishonest use of another person’s electronic signature, password or other unique identification feature. It should not be invoked automatically for every fake account using a similar display name. The complaint should identify the specific identification feature allegedly misused and the fraudulent or dishonest conduct.
Section 66D applies to cheating by personation using a communication device or computer resource. It can be relevant where a fake account, message, call or digital persona is used to deceive another person in a manner satisfying the cheating ingredients. A clearly labelled parody or non-deceptive fan page should not automatically be described as Section 66D cheating.
Yes. Unauthorised access, downloading, introduction of contaminants, disruption or other conduct can engage Section 43, and dishonest or fraudulent commission of specified acts can engage Section 66. The correct provision depends on what access or interference actually occurred. Preserve security logs and avoid resetting or wiping evidence before essential records are captured.
Sections 66E, 67, 67A and 67B of the IT Act, BNS offences, child-protection law and the 2026 intermediary rules may become relevant depending on the content, consent and age of the person depicted. This is primarily a safety and criminal-law issue, not merely a brand complaint. Preserve evidence and use urgent platform and law-enforcement channels.
Under the IT Rules as amended in 2026, an intermediary’s Grievance Officer must acknowledge a complaint within twenty-four hours and ordinarily resolve it within seven days. Different and shorter timelines apply to specified categories of removal requests and to qualifying intimate or electronic-impersonation content.
For specified complaints seeking removal of information within the Rule 3(1)(b) framework, subject to the exclusions stated in the Rules, the intermediary must act expeditiously and resolve the grievance within thirty-six hours. The accelerated period does not apply to every disagreement with online content, so the applicable rule and category should be identified before asserting the deadline.
The amended IT Rules require an intermediary, within two hours of receiving a qualifying complaint, to take reasonable and practicable measures concerning specified content that prima facie exposes an individual’s private area, depicts full or partial nudity or a sexual act, or is in the nature of electronic impersonation, including artificially morphed images of that individual. The route can be important for sexualised deepfakes and other qualifying identity-misuse cases.
No. The special rule is framed around an individual and the specified intimate or electronic-impersonation content. A fake corporate account, confusing trademark page or deceptive marketplace store may instead require the general grievance process, a platform trademark or fraud channel, a legal notice or court relief depending on the facts.
The IT Rules provide a Grievance Appellate Committee route where a person is aggrieved by the Grievance Officer’s decision or the grievance is not resolved within the applicable period. The appeal should be filed within the current prescribed period and should preserve the original complaint, case ID, decision and supporting evidence.
No. Section 79 provides conditional safe harbour where the intermediary satisfies the statutory requirements and due diligence obligations. The position can change where the intermediary participates in unlawful conduct or fails to comply with legally valid actual-knowledge and due-diligence requirements. Safe harbour should not be treated as blanket immunity for every platform activity.
No. A platform can remove content under its terms, safety standards or grievance process without a judicial determination. Conversely, a platform can decline a report even where a claimant may have a legal case. Preserve the platform decision as evidence of the operational history, but do not describe it as a final adjudication of legal liability.
E. Evidence, Civil Relief, Cybercrime Reporting and Unknown Operators
Capture the complete profile and relevant content, exact URLs, visible account or seller IDs, username changes if known, profile biography, follower or engagement indicators, dates, linked sites, advertisements, contact details, payment requests, customer complaints and misleading claims. Use screen recordings for dynamic material and preserve authentic brand or personality material for comparison.
They may be useful but are often incomplete. Preserve the full screen, URL, account identifier, date and time, surrounding context and original downloaded material where available. For serious disputes, account attribution, metadata, device or server records and corroborating evidence may become important.
The Bharatiya Sakshya Adhiniyam, 2023 contains specific rules for electronic and digital records, including Section 63 and its certificate framework. The exact certificate, source, device or system particulars and custody evidence depend on how the record is produced. Evidence strategy should be planned before the original data is lost or altered.
It depends on urgency and safety. Direct contact can prompt deletion of evidence, movement of funds or creation of replacement accounts. In an active phishing, payment fraud, sexualised deepfake or fast-spreading scam, preserve evidence and use urgent platform and cybercrime routes first. Where the operator is known and risk is controlled, a carefully drafted notice may be useful.
Depending on the rights involved, a court may consider interim or final injunctions, restraint on impersonation or false endorsement, takedown directions, disclosure-related orders, damages, accounts or other suitable relief. The remedy depends on the actual cause of action and evidence. Trademark, passing-off, copyright, personality and privacy claims should not be merged without identifying the legal basis for each.
Potentially. Indian courts can grant appropriate relief against unknown defendants in suitable cases where the wrongful conduct is clearly identified and supported by evidence. The applicant should preserve URLs and account identifiers and may seek narrowly framed directions to intermediaries or other parties where legally justified. Unknown identity does not remove the need to prove the underlying right and urgency.
Potentially, through an appropriate judicial process where disclosure is necessary and proportionate. Platforms ordinarily will not provide another user’s identifying information merely because a private claimant asks. The requested records, purpose and legal basis should be defined carefully.
Consider it where the facts disclose an actual cyber or criminal element such as identity theft, cheating by personation, phishing, unauthorised access, financial fraud, threats, sexualised material or other offence. A trademark dispute, criticism or fan account should not be labelled criminal merely to create leverage.
Act quickly. Preserve the fraudulent account, messages, payment instructions and transaction references; alert the relevant bank, wallet or payment provider; and report the incident through the National Cyber Crime Reporting Portal. The national cybercrime helpline 1930 is the official immediate reporting route for online financial fraud.
Preserve the decision, case ID, removed URL, screenshots and correspondence; search for replacement accounts, paid advertisements, mirror domains and marketplace listings; record whether the underlying fraud or confusion has stopped; and decide whether a notice, customer warning, account-security action or legal escalation remains necessary. Removal should not trigger unsupported public accusations against an unverified operator.
F. Brand and Influencer Readiness, Contracts and Common Mistakes
Secure key marks where appropriate, control official domain and account recovery credentials, maintain an authoritative list of official accounts, preserve logo and content ownership records, use role-based access, document agency permissions, establish a rapid evidence-preservation workflow and define who is authorised to submit platform or legal complaints.
Maintain records of official handles, identity and commercial use; preserve original photographs, videos and voice recordings; document authorised endorsement relationships; register relevant trademarks where commercially justified; use clear agency and management agreements; retain account-recovery information; and create a simple public method for followers to verify genuine collaborations.
It should identify the permitted name, image, voice, likeness and content; campaign, platform, media, territory and term; approval rights; editing and synthetic-media restrictions; paid-media rights; disclosure obligations; sublicensing; post-term takedown or archival use; account access; and remedies for unauthorised reuse. Broad “all media forever” clauses should be assessed carefully against the actual commercial bargain.
Yes where there is any realistic possibility of synthetic reuse. The agreement should state whether training, voice cloning, avatar generation, face replacement, digital doubles, localisation or post-campaign synthetic content is permitted; who controls the model or generated assets; approval and labelling requirements; retention; sublicensing; and what happens when the engagement ends.
Common mistakes include reporting the wrong issue through the wrong platform channel; failing to preserve URLs and account IDs; assuming a screenshot alone proves attribution; treating every fan page or criticism as unlawful; claiming trademark or copyright ownership that the complainant does not possess; overlooking personality or consumer-law issues; invoking Section 66C or 66D without their statutory ingredients; missing the 2026 two-hour impersonation route where it applies; sending an exaggerated legal threat before preserving evidence; and assuming a successful takedown identifies the real operator.
Identify the exact account, advertisement, domain or content; preserve complete electronic evidence; identify the person or brand being impersonated; separate trademark use, copied content, personality misuse, false endorsement, cybercrime, personal-data exposure and account-security issues; check the current platform and IT Rules route; assess urgency and financial or safety risk; identify any domain-dispute option; confirm ownership and authority to complain; and define the remedy sought before reporting, sending a notice or filing proceedings.
If you have a live impersonation, deepfake, false-endorsement, hacked-account, domain, marketplace or platform matter requiring case-specific assessment, you may send a preliminary enquiry.
Subject to conflict check, scope confirmation, professional terms and express acceptance by the responsible Advocate.
Last reviewed: 12 September 2026