Cyber crime complaint in Nepal: where to report, the numbers and the forms

The Cyber Bureau is Nepal Police's unit for crimes committed through computers, phones and the internet. People search for it as the cyber cell or cyber crime cell; its name is the Cyber Bureau. It was set up under Police Headquarters in 2075, and it investigates cyber offences in Nepal and those committed from abroad against systems here.

Most complaints fall under the Electronic Transactions Act 2063. Some, such as a photo used without consent or a post that defames you, also fall under the Muluki Criminal Code 2074. You do not need to know which law applies. Describe what happened, and the police decide.

There is no form to fill in on the Bureau's website. It publishes forms to download, and you hand one in, or email it, with your evidence. Every number below is as printed on cyberbureau.nepalpolice.gov.np and nepalpolice.gov.np on 29 October 2026.

Nepal Police's general complaint and grievance form and its mobile app also take complaints. For a cyber crime, the Bureau's own form is the one that lists what it needs.

The Bureau asks for two things with every complaint, and calls both compulsory: a copy of your citizenship, national ID card, passport or driving licence (a birth registration certificate for a child), and the links with clear screenshots. Gather them first, while the posts and messages are still there.

• Screenshots that show the whole screen: the post or message, the account name, and the date and time. On a computer, include the address bar so the URL shows.
• The profile link of the person responsible, copied from the browser or the app's share or copy-link option. A display name can be changed in seconds; the link identifies the account.
• Your own profile link. Every Bureau form asks for your original ID or URL.
• Every transaction: the date, the amount, your account or wallet, and the account or wallet the money went to, with the holder's name. Keep the transaction IDs and the SMS or app receipts.
• The phone numbers and email addresses that contacted you, and your call log.
• Do not delete the chat, however hard it is to keep. Block once you have your screenshots; deleting a conversation can remove it from your side for good.
• Keep a copy somewhere else, such as an email to yourself or a drive, in case the phone is lost or the account is taken.
• Write a short timeline while you remember it: when it started, what was said, what you sent and what was taken.

You can write it in two ways. The Bureau's own form for your case is what it asks for, and the table below shows which one. A जाहेरी is the general written complaint that any police office must register, under the Criminal Procedure Code.

CareerKyt's police complaint maker writes a जाहेरी. It asks for the police office, your name, address, phone and citizenship number, the person you are complaining about if you know them, the type of incident (one choice is Online / social media offence), the date, time and place, the value of any loss, your account in your own words, the evidence and witnesses, and what you are asking for. It downloads as a PDF or a Word file, in English or in the Nepali form the law sets (अनुसूची–५).

It has no separate box for profile links, the platform or transaction IDs, so put those in your account and in the evidence list. It is also a good way to set the story out clearly before you copy it onto the Bureau's form. How a जाहेरी is laid out, and what to do if it is refused: जाहेरी दरखास्त कसरी लेख्ने.

The Bureau's four forms are on its report page. You may type or handwrite them, in Nepali, English or both, and an organisation writes on its letterhead and stamps it. Each form ends with your name, gender, date of birth, address, ID number and phone, a guardian's phone (or a focal person for an organisation), your signature, and a declaration that what you wrote is true.

Section 74 of the Electronic Transactions Act sets the limit: a complaint must be made within 90 days of learning of the offence. That is the text the Law Commission publishes, as amended by an Act of 2082 (authenticated on 14 Shrawan 2082).

Older pages, and the English translation of the Act on the Bureau's own site, still say 35 days. That was the limit before the 2082 amendment.

Some online harms are offences under the Criminal Code instead, or as well, and its limits are shorter: three months from the date of the offence for privacy offences (section 304), and three months from learning of it for defamation (section 308).

Which limit applies depends on the offence the police register, so do not plan around the longest one. Report as soon as you can. Posts get deleted, accounts disappear, and money that has been moved on is harder to trace.

Sextortion is a threat to share intimate photos or videos unless you pay, send more or do something you do not want to do. It is a crime, and the person making the threat is the one who has done wrong, not you. Nepal Police does act on it: in Baisakh 2083 the Bureau announced the arrest of a man who had blackmailed a woman with her photos through TikTok and other apps.

• Stop replying. Do not argue or plead. Take screenshots of the threats, the account and its link, then block it.
• Do not pay, and do not send more. Thorn's Stop Sextortion guidance, made with Meta, says paying rarely stops the threats. If you have already paid, stop now. It is not too late to report.
• Report the account and the post to the platform. Meta lets you report intimate images of yourself, or threats to share them, on Facebook, Instagram, Messenger and WhatsApp.
• Stop the images spreading. If you were 18 or over in the image, StopNCII.org makes a digital fingerprint of it that partner platforms use to block it. If you were under 18, use Take It Down. The platforms receive the fingerprint, not the picture.
• Report to the police on the Bureau's general form, at the nearest police office or the Bureau, or by email. Section 47 of the Electronic Transactions Act covers harassing or insulting a woman online, and the Criminal Code covers giving or selling anyone's photo without consent to harass them.
• Tell someone you trust: a friend, a family member or a teacher. You do not have to deal with this alone.
• If the person in the images is under 18, a parent or guardian can make the complaint with them. The Bureau's forms take a guardian's phone number, and a birth registration certificate in place of a citizenship card.

Start with the platform. It can lock a hacked account or remove a fake one faster than anyone else. Then report to the police if someone asked your contacts for money, posted private material, or is using the account to cheat people.

• Facebook, hacked: go to facebook.com/hacked, from a phone or computer you have logged in on before.
• Facebook, fake profile: open the profile, choose the options below the cover photo, then Report profile. Without an account, use Facebook's impostor report form, and answer No when it asks whether you have a Facebook account, as the Cyber Bureau advises. The Bureau also says reports made regularly from the phone the victim usually logs in on are more likely to get a quick result.
• Instagram, hacked: go to instagram.com/hacked.
• TikTok, hacked: TikTok's help centre says to reset the password, link your phone number and remove devices you do not recognise, under Settings and privacy, then Security & permissions. For a fake TikTok profile, use Report on the profile.
• Secure the rest. Change your email password first, then the others, and turn on two-step verification (2FA), as the Bureau advises.
• Warn your contacts by phone or from another account. Hacked accounts are used to ask friends for money, and the Bureau's advice is to call and check before sending anything.
• Then the police. The Bureau's fake or hacked ID form asks for the account's link and full name, the date it was hacked, the phone number and email it used before, the make and model of the phone you used it on, the link of any profile you use now, and an email that has never been used on any account. For a hacked Page, give the admin details.

When money has gone, call your bank or wallet before anything else. It holds the account, and it is the one that can block your card or log-in. Then report to the police.

1. 1Call your bank or wallet at once, on the number on your card, in its app or on its own website, never a number from the message. Ask it to block your card, account or wallet, and ask whether the transfer can be held. Note the time and the name of the person you spoke to.
2. 2Change your mobile banking and wallet passwords and PINs from a device the scammer has not had access to. If you shared your screen or installed an app because someone asked you to, remove it.
3. 3Fill the Bureau's online fraud form and its transaction sheet: each transfer's date, the bank or wallet and account it left, the account it went to with the holder's name, and the amount. The form says the sheet is compulsory. Tick the box if money is still leaving your account.
4. 4Hand it in at the nearest police office or the Bureau, or email it, then follow up on 01-5319044 extension 108.
5. 5If the bank or wallet does not resolve your complaint, take it to Nepal Rastra Bank through its Financial Consumer Protection Portal. NRB says to complain to the bank or provider first. The portal covers providers NRB licenses, and not matters already before a court.

• Registration. The complaint is registered and given a number (दर्ता नं.). The Bureau's fraud form has an office box for the number, the date and time, the officer and the desk it goes to. Keep the number: you need it for every follow-up.
• If you emailed it and no registration number comes back, call 01-5319044 extension 114. Extension 109 tells you whether a complaint has been registered.
• Investigation. The case is brought by the Government of Nepal, not by you, and the police may take help from experts (section 75). You may be asked to come in, give a statement or show the original messages, so keep them.
• Court. Until an Information Technology Tribunal is formed, the district court concerned hears these cases (section 60, as amended in 2082).
• Compensation. The Act says any loss the offence caused is recovered from the offender (section 76), and in computer fraud the amount gained is recovered and given back (section 52). That depends on the offender being found and convicted.
• If a police office will not register your complaint, the Criminal Procedure Code gives you a remedy, set out in जाहेरी दरखास्त कसरी लेख्ने.