Someone Is Using Your WiFi Without Permission: Here's Exactly What Indian Law Says

Your internet is slow. Your streaming keeps buffering. Your data bill is higher than it should be.

You check your router. There it is: an unfamiliar device connected to your network. Your neighbour has been quietly using your WiFi for weeks without asking, without paying and without your permission.

Here is what most people don't know: this is not just rude. Under Indian law, it is a criminal offence.

Your WiFi connection is a computer resource. Using it without your authorisation is unauthorised access prosecutable under the Information Technology Act 2000 and the Bharatiya Nyaya Sanhita 2023. This guide gives you the exact legal roadmap to handle it, step by step.

First, Understand Why WiFi Theft Is Legally Serious

Most people treat WiFi theft as a minor nuisance "chalta hai" situation between neighbours. That instinct is wrong, and dangerously so.

When someone uses your WiFi without permission, three serious risks materialise immediately.

You carry the legal liability for what they do online. Your IP address is what the internet sees. If your neighbour downloads pirated content, visits illegal websites or commits any online offence using your connection, your IP address is the one that shows up in any investigation. Law enforcement comes to you first.

Your network security is compromised. An unauthorised user on your network can potentially intercept your communications, access shared devices your printer, your smart TV, your phone's files and monitor your internet activity. This is not hypothetical; it is a known attack vector.

Your bandwidth and paid service are being stolen. You pay for a fixed data plan or a speed tier. An uninvited user degrades the service you are paying for. That is financial loss, even if it seems small.

Understanding these stakes is not about escalating a neighbour dispute. It is about knowing that the law takes this seriously and so should you.

Step 1  Detect and Confirm the Intrusion

Before taking any legal step, confirm that the access is indeed unauthorised. Courts require evidence, not suspicion.

Check your router's connected devices list. Log into your router admin panel (usually 192.168.1.1 or 192.168.0.1 in your browser). Every router shows a list of connected devices with their MAC addresses and device names. If you see a device you do not recognise, that is your first red flag.

Use a network scanner app. Apps like Fing (available on Android and iOS) scan your entire network and list every connected device with manufacturer details. This gives you cleaner, readable evidence than the router panel alone.

Check router logs. Most routers maintain access logs with timestamps. Export or screenshot these. They will show when the unauthorised device connected and for how long.

Document everything with photographs and screenshots. Timestamp every screenshot. If your phone's camera auto-stamps dates and times, use it. Courts appreciate evidence that is self-authenticating.

This documentation phase is not optional. It is the foundation on which every legal step that follows is built.

Step 2 Secure Your Network Immediately

Take these protective steps right now, in parallel with your legal action. They serve two purposes: they stop the ongoing harm and they demonstrate to a court that you acted responsibly once you became aware.

Change your WiFi password immediately. Use WPA3 or at minimum WPA2 encryption. Never use WEP  it is crackable in minutes. Choose a password that is at least 12 characters with a mix of letters, numbers and symbols.

Enable MAC address filtering. Every device has a unique MAC address. Your router can be configured to only allow connections from specific MAC addresses you approve. This makes future unauthorised access significantly harder.

Disable WPS (WiFi Protected Setup). WPS is a convenience feature that is also a well-known security vulnerability. Turn it off in your router settings.

Rename your SSID (network name). Do not use your name, flat number or any identifier in your network name. A generic name gives away less information to a potential attacker.

Enable router login notifications if your router supports them. Some modern routers send an alert when a new device connects.

These steps do not eliminate your legal claim. You can still file a complaint for past unauthorised access even after securing your network. In fact, securing your network after discovering the breach is evidence of responsible conduct.

Step 3  Know the Laws That Protect You

Here are the specific legal provisions that apply to your situation. Knowing these allows you to cite them accurately in your complaint, which makes your FIR harder for police to dismiss.

Under the Information Technology Act 2000

Section 43(a) covers unauthorised access to a computer resource. A WiFi network is a "computer resource" under the Act's definition. Accessing it without the owner's permission, even passively, falls squarely within this provision. This section provides a civil remedy with compensation up to Rs 5 crore via the IT Adjudicating Officer.

Section 66 is the criminal counterpart. Where the unauthorised access under Section 43 is done dishonestly or fraudulently, it becomes a criminal offence punishable with imprisonment up to 3 years and/or fine up to Rs 5 lakh. Using your connection without paying for it. i.e., obtaining a service dishonestly  satisfies the dishonesty requirement.

Section 66C on identity theft can apply if the neighbour used your connection in a way that made their traffic appear to originate from your identity online. This carries imprisonment up to 3 years and fine up to Rs 1 lakh.

Section 43A applies if your network held or transmitted sensitive personal data (emails, banking sessions, medical records) and the breach resulted in exposure of that data. This imposes liability on the person causing the breach.

Under the Bharatiya Nyaya Sanhita 2023

Section 303 BNS (formerly Sections 378/379 IPC on theft)  While the traditional definition of theft applies to movable property, Indian courts have increasingly accepted that intangible resources with economic value can form the subject matter of dishonest appropriation. A paid internet service has clear economic value.

Section 318 BNS (formerly Section 420 IPC on cheating)  If the neighbour was using your connection to access services that require an account and effectively bypassed payment or authentication using your network infrastructure, this section may apply.

Section 61 BNS (Criminal Conspiracy)  Relevant if more than one person was involved in the access.

Under Your ISP's Terms of Service

Every ISP in India 's Jio, Airtel, BSNL, ACT and others  explicitly prohibits the sharing of your connection with unauthorised persons and holds you responsible for all activity on your connection. This means you have a contractual right (and obligation) to keep your network secure, which further supports your complaint.

Step 4  Try a Documented Informal Warning First

Before going to the police, consider sending a formal written warning to your neighbour. This step is optional but strategic for two reasons.

First, it gives your neighbour a chance to stop voluntarily which may be all you need. Second, if they continue after a written warning, that continuation demonstrates wilful and deliberate conduct, which strengthens your criminal case significantly.

Write a simple, factual letter. State that you have detected their device connecting to your WiFi network without your permission, that this constitutes unauthorised access under the IT Act 2000, that you require them to immediately cease this access and that you reserve the right to file a legal complaint if the access continues.

Send it by registered post with acknowledgement due. Keep the postal receipt and the returned acknowledgement. This is dated, documented proof that they were warned.

Do not make threats, use abusive language or demand money. Keep it factual and legal. A clean written warning is a powerful piece of evidence; an angry confrontation is not.

Step 5  File a Complaint at the Cybercrime Cell

If the informal warning fails, or if you prefer to go directly to the legal route, file a cybercrime complaint.

Option A: National Cybercrime Reporting Portal

Go to cybercrime.gov.in and file an online complaint under "Other Cyber Crimes." Provide all documentation: screenshots of connected devices, router logs, photos of evidence and a written account of when you first discovered the access and what steps you took. You will receive a complaint number, which is your official entry into the system.

Option B: Cybercrime Police Station

Visit the cybercrime police station in your city in person. Every major city in India has a dedicated unit. Carry printed copies of all your evidence. File a written complaint and request registration of an FIR.

Under the Supreme Court's landmark ruling in Lalita Kumari v. Govt. of UP (2014), police are obligated to register an FIR if your complaint discloses a cognizable offence. Unauthorised access under Section 66 of the IT Act is a cognizable offence. If police refuse to register an FIR, you can escalate to the Superintendent of Police in writing under Section 173 BNSS, or approach the Magistrate directly under Section 175 BNSS to direct registration.

Always leave the station with either an FIR copy or a written complaint acknowledgement bearing the date and a stamp.

Step 6  Pursue the IT Adjudicating Officer Route for Compensation

This is the most overlooked remedy available to WiFi theft victims in India.

Each state has an IT Adjudicating Officer appointed under Section 46 of the IT Act. This officer has civil jurisdiction to award compensation up to Rs 5 crore for violations of Sections 43, 43A and 44. You do not need a criminal conviction to claim compensation here. The standard of proof is a preponderance of probability, which is lower than the "beyond reasonable doubt" standard in criminal courts.

File your application with a copy of your FIR (or cybercrime complaint), all technical evidence, and a computation of your loss. Loss includes your proportional internet bills for the period of unauthorised access, any additional data charges incurred and costs of network remediation.

This route runs parallel to the criminal case and can result in monetary compensation faster than a criminal trial.

Step 7 Approach the Telecom Regulatory Authority of India (TRAI)

If your ISP was slow to respond or if this situation involves a shared building with your ISP's infrastructure (such as a VLAN misconfiguration that allowed a neighbour access), TRAI is another authority to involve.

File a consumer complaint at the TRAI Consumer Complaint Monitoring System at pgportal.gov.in. Your ISP is obligated under TRAI regulations to provide you with a secure and exclusive connection. If their infrastructure contributed to the breach, they may share liability.

Additionally, register a complaint directly with your ISP's nodal officer, whose contact details every ISP is required to publish under TRAI guidelines. A written complaint to the nodal officer creates a formal record and triggers their internal resolution process.

What If Damage Went Beyond Slow Internet?

If the unauthorised access led to any of the following, your legal case becomes significantly more serious and your remedies expand considerably.

If someone accessed your devices through the shared network  your laptop, NAS drive, smart home devices or phone  you now have a data breach under Section 43 and potentially Section 66B (receiving stolen computer resources) against the neighbour.

If your IP address was used for illegal activity piracy, financial fraud, accessing prohibited content file an immediate complaint with both the cybercrime cell and your ISP to establish on record that the activity was not yours. This is time-sensitive and should happen before any investigation reaches you.

If personal or financial data was intercepted banking credentials, emails, OTPs you have a case under Sections 43, 66, 66B and 66C of the IT Act, with potential for substantially higher compensation.

In all these situations, engage a cybercrime lawyer immediately. Do not attempt to handle an escalated case without professional legal guidance.

Common Mistakes That Weaken Your Case

Most people who try to take legal action for WiFi theft lose traction not because the law does not support them, but because they make avoidable errors.

Confronting the neighbour aggressively before gathering evidence. The moment a suspect knows they are under scrutiny, they can disconnect their device, reset their router and deny everything. Evidence first, confrontation second.

Securing the network before documenting the intrusion. Change the password by all means, but screenshot the connected devices list first. Once the neighbour is kicked off, the live evidence disappears from your router's display.

Filing a vague complaint without citing specific sections. A complaint that says "my neighbour is using my WiFi" is easy for a busy police officer to deprioritise. A complaint citing Sections 43 and 66 of the IT Act 2000 and Section 303 BNS signals that you know the law and expect it to be applied.

Waiting too long. Router logs overwrite themselves. ISP-side logs have retention limits. The Limitation Act's three-year window applies to civil claims. Act promptly.

Skipping the written warning step if you want civil compensation. Courts look more favourably on claimants who gave the defendant a reasonable opportunity to stop before escalating legally. A documented warning followed by continued access is compelling evidence of deliberate conduct.

Your Evidence Checklist Before Filing

Bring these documents to your cybercrime complaint and to your lawyer:

• Screenshots of your router's connected devices page (with the unfamiliar device visible and date-stamped)
• Exported router access logs showing the device's connection history
• Fing or network scanner report identifying the device's manufacturer
• Photographs of your router and its location (to establish it is within range of the neighbour's premises)
• Your ISP bills showing the billing period, plan speed and any excess data charges
• Copy of your registered written warning to the neighbour (with postal proof)
• Any message, admission or response from the neighbour (WhatsApp, letter or verbal statement witnessed by others)
• A timeline written in your own words: when you first noticed slowness, when you checked the router, what you found and what you did

The stronger your evidence file, the faster your complaint moves through the system.

A Realistic Timeline

Cybercrime.gov.in complaint: Logged immediately; routed to state unit within 2 to 7 days. FIR registration: Same day if police cooperate; escalation to SP or Magistrate may take 1 to 3 weeks. Police investigation: 1 to 6 months depending on cybercrime cell workload and evidence strength. IT Adjudicating Officer proceedings: 6 months to 2 years for a full order. Magistrate court (if chargesheeted): 1 to 3 years for trial and judgment.

For a neighbourly WiFi dispute where the neighbour stops after the formal warning, you may never need courts at all. For cases involving ongoing access, data breach or refusal to cooperate, the legal machinery above gives you real teeth.

The Bottom Line

Using your neighbour's WiFi without permission is not a social faux pas. Under Indian law, it is unauthorised access to a computer resource a criminal offence under the IT Act and BNS with imprisonment up to 3 years.

You have the right to secure your network, document the intrusion, warn the offender formally and escalate through cybercrime cells, the IT Adjudicating Officer and the courts if needed.

The law is clear. Your next step is to use it.

Start with your router logs right now. Everything else follows from there.

This blog provides general legal information about Indian law and does not constitute formal legal advice or create an advocate-client relationship. For advice specific to your situation, consult a practising advocate experienced in cybercrime and IT law.