5 Steps to Take When Someone Posts False Accusations Online

The Critical First Hour: What to Do When You Discover False Accusations Online

The legally correct response in the first hour is to preserve evidence and make no public response whatsoever. Treat the discovery as you would the receipt of a legal notice — instruct counsel before taking any action. The emotional impulse to defend yourself publicly is understandable, but a public defensive response is recorded, archived, and used against you in subsequent proceedings. Anything you publish in response to a defamatory post becomes part of the record of the dispute.

If the false accusation is on a platform where you have an account — your own LinkedIn profile, your business Google page, your Twitter/X account — do not delete your account or make changes to your profile during this period. Deletion of accounts creates an impression of concealment that is tactically disadvantageous. Courts have drawn adverse inferences from account deletions that occurred shortly after defamatory content targeting those accounts was published.

Contact a specialist legal-first ORM agency within the first hour where possible. The 4-hour window before content begins to be shared widely is the period during which emergency intervention — a targeted notice to the platform Grievance Officer, an urgent call to the content author if identified, or preparation of an emergency injunction application — is most effective. Once content has been shared ten thousand times, the removal of the original post does not erase the secondary distribution.

Step 1: Preserve Evidence Before Anything Else

Take full-page screenshots with visible timestamps. Use a browser extension that adds a verified timestamp to screenshots. Save the URL, the date of first appearance, and any screenshots showing the content ranking in Google search results. The URL itself is often as important as the content — it records the domain, the publication date encoded in many URLs, and the specific path that will be used in all subsequent legal documents.

Many posters delete content once they receive a legal notice. Having contemporaneous documented evidence — ideally notarised or e-stamped — is essential for any legal proceedings that follow. A screenshot taken by you from your own device is admissible evidence in Indian courts under Section 63 of the Bharatiya Sakshya Adhiniyam 2023 (formerly Section 65B of the Indian Evidence Act, 1872), provided the certification requirements of that section are met. A signed Section 63 certificate prepared at the time of capture is significantly stronger than a certificate prepared after the fact from a stored image.

Use the Wayback Machine (web.archive.org) to submit the defamatory URL for archiving immediately upon discovery. The Internet Archive creates a timestamped, independently verified snapshot of the content that is not within the control of the poster or the platform. This archive copy remains available even if the original content is deleted or modified, and courts have accepted Wayback Machine archives as evidence of the content as it existed at a particular date.

Preserve all metadata that accompanies the content. For social media posts, this includes the post timestamp, the number of shares, likes, and comments at the time of capture, any location data attached to the post, and the account information visible on the poster's profile. For news articles or forum posts, preserve the article's publication date, author byline, and any editorial metadata visible on the page. This metadata is essential for establishing the timeline of publication and distribution in legal proceedings.

Step 2: Assess the Legal Threshold — Is This Defamation or Protected Opinion?

Not every false or unkind statement posted online constitutes actionable defamation. Before committing to a legal response strategy, the content must be assessed against the legal threshold. Indian law, under BNS 2023 s.356 (formerly IPC 499/500), requires that the statement be (a) a statement of fact rather than opinion, (b) false, and (c) published to third parties with the effect of harming the reputation of the named person. A statement that "Company X is terrible at customer service" is likely protected opinion. A statement that "Company X defrauded me of Rs 3 lakh on a specific date" is a factual allegation that is actionable if false.

The fact versus opinion distinction is the most frequently contested element in online defamation cases. Courts analyse whether a reasonable reader, encountering the content in its full context, would understand it as an assertion of fact or as a statement of personal opinion. Factors that tip the balance toward fact: specificity of detail, use of definitive rather than hedging language, the platform context (a professional review site versus a personal opinion blog), and accompanying factual claims that contextualise the statement as based on personal knowledge.

In the Indian context, public figures — politicians, celebrities, senior corporate executives — face a higher threshold for defamation claims than private individuals, because robust public commentary on public conduct is protected as part of the constitutional right to free speech under Article 19(1)(a). However, this higher threshold applies only to statements about their public conduct, not to false statements about their private character or personal life. A false accusation of criminal conduct against a public figure is fully actionable under BNS s.356 regardless of their public status.

If the content is opinion — even strongly negative, hostile opinion — the appropriate response is not a defamation claim but a reputational management strategy that ensures the opinion is addressed in context. If the content contains specific false factual allegations, the legal response under BNS s.356, IT Act Section 79, and IT Rules 2021 is appropriate. A legal specialist should make this assessment before any notice is issued, because a defamation notice sent in response to protected opinion can itself create legal liability and generates unfavourable publicity.

Step 3: Send a Legal Notice to the Platform and the Poster Simultaneously

Instruct an advocate to send a legal notice directly to the poster — if identified — and to the platform through its Grievance Officer. The notice invokes BNS 2023 s.356 (formerly IPC 499/500) and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, demands removal within 15 days, and puts the poster on notice of civil and criminal liability. Sending both notices simultaneously is the critical strategic choice: it creates parallel pressure on two fronts and prevents either the poster or the platform from claiming that they were unaware of the other's position.

A legal notice from a registered advocate on firm letterhead carries significantly more weight than a generic takedown request or a report-abuse click. The difference in outcome between a user-generated report and a formal advocate notice to a platform Grievance Officer is substantial. A complaint that reaches the Grievance Officer must be acknowledged within 24 hours and resolved within the Rules' timelines, whoever sends it; an in-app report does not always reach that mechanism, and an informal email to support does not.

The notice to the poster should identify the specific false statements, explain why they are factually false (with reference to supporting documentation), state the applicable legal provisions, and demand removal within a stated period alongside a written retraction. The notice should also make clear that failure to comply will result in civil proceedings for damages and a criminal complaint under BNS s.356. The notice creates no criminal liability by itself, but its deterrent effect is significant — many posters who are served with a proper advocate notice retract and remove the content without proceeding to any formal dispute.

The notice to the Grievance Officer should separately address the platform's own obligations under IT Rules 2021. The platform is not a bystander — it is a regulated intermediary with statutory obligations. The notice should cite Rule 3(2) of the IT Rules 2021, which mandates acknowledgement within 24 hours and resolution within seven days, and should explain that the platform's failure to comply within the statutory period will be a failure of due diligence, which under Rule 7 removes its exemption under Section 79(1) of the IT Act, 2000. It should not claim to be "actual knowledge" under Section 79(3)(b): since Shreya Singhal v. Union of India (2015), that comes from a court order or a government direction.

Step 4: File a Police Complaint If Criminal Conduct Is Involved

Criminal defamation under BNS 2023 s.356 (formerly IPC 499/500), and criminal intimidation under BNS s.351 (formerly IPC 503), are non-cognisable and go to the Magistrate as a complaint by the person aggrieved. Where the post involves a cognisable offence — identity theft under Section 66C or cheating by personation under Section 66D of the IT Act — a police complaint should be filed simultaneously with or shortly after the legal notice. The cybercrime cell of the relevant State police is the appropriate forum for internet-based offences. All State police forces in India maintain cybercrime cells that can receive complaints online through the National Cybercrime Reporting Portal (cybercrime.gov.in).

A police complaint serves multiple purposes beyond the immediate criminal investigation. The FIR number obtained upon registration of the complaint is a document that can be appended to all subsequent platform removal requests, significantly improving compliance rates. Platforms — particularly foreign-headquartered platforms — treat police complaint documentation as evidence of seriousness that they would not attribute to a private legal notice alone. The FIR also creates a formal public record of the false nature of the accusation.

Section 66C of the IT Act addresses electronic identity theft — dishonestly or fraudulently using the electronic signature, password, or any other unique identification feature of another person. Where the false accusation involves the fabrication of screenshots purporting to show the complainant making statements they never made, or the use of the complainant's profile to post content they did not write, Section 66C applies alongside BNS s.356. The penalties under Section 66C — imprisonment up to three years and a fine up to one lakh rupees — are distinct from and additive to the defamation penalty under BNS s.356(2).

BNS s.351 — criminal intimidation, formerly IPC 503 — applies where the false accusation is accompanied by a threat: "I will post more about what you did unless you pay me" or similar communications that use the defamatory content as leverage. This is a separate and serious offence with its own criminal proceedings. Where both defamation and criminal intimidation are present, the combined criminal exposure of the poster is substantial, and the complaint should invoke both provisions to ensure the full legal picture is presented to the Magistrate.

Step 5: Apply for an Interim Court Injunction If Content Goes Viral

If the platform fails to act within the notice period or the poster is anonymous and the content is rapidly gaining distribution, file a civil suit for defamation in the competent civil court with an application for an interim injunction. The appropriate court depends on where the cause of action arose and on the value of the suit: only the Delhi, Bombay, Calcutta and Madras High Courts have an original civil side, for their seat cities and above their pecuniary limits; everywhere else the suit starts in the district civil court. Courts can hear such applications urgently in cases of serious ongoing harm.

The application for an interim injunction in a defamation matter invokes Order XXXIX Rules 1 and 2 of the Code of Civil Procedure, 1908. The three elements — prima facie case, balance of convenience, and irreparable harm — must be established in the application. For false accusations online, irreparable harm is demonstrable: reputation, unlike money, cannot be restored by a damages award after the fact. The longer defamatory content remains visible, the more it accumulates secondary distribution that no court order can fully reverse.

For anonymous posters, a simultaneous John Doe application should be filed alongside the injunction application. The John Doe application requests a court order directing the platform to disclose the registration details of the anonymous account — email address, phone number if verified, and IP address logs. A court can grant the injunction and the disclosure direction together in a single hearing where the evidence of harm is clear and urgent.

Once a court order is in hand, Google, Twitter/X, Meta, and most other platforms will delist or remove the content promptly, as non-compliance constitutes contempt of court. The order should be served on the platform through its registered legal process channel — typically a designated email address maintained for court orders — with a cover letter identifying the specific URLs to be de-indexed or removed, and a request for written confirmation of compliance within 48 hours of service.

Step 1: Document Everything Before It Disappears

Take full-page screenshots with visible timestamps. Use a browser extension that adds a verified timestamp to screenshots. Save the URL, the date of first appearance, and any screenshots showing the content ranking in Google search results.

Many posters delete content once they receive a legal notice. Having contemporaneous documented evidence — ideally notarised or e-stamped — is essential for any legal proceedings that follow.

What NOT to Do When Facing False Accusations Online

Do not engage publicly with the false accusation. Every reply, comment, or counter-post you publish increases the content's algorithmic visibility and creates a record of the dispute that may be used against you. Courts and platforms both interpret an active response thread as evidence that both parties have made the matter a public dispute, which weakens the complainant's position relative to a clear victim of one-sided defamation.

Do not threaten the poster publicly or in any medium that can be documented. A threat sent via WhatsApp, email, or social media — even if entirely rhetorical — creates legal exposure for criminal intimidation under BNS 2023 s.351 (formerly IPC 503 and 506). A well-advised defamation complainant communicates solely through formal legal notices prepared by instructed counsel, not through direct contact with the poster.

Do not delete your own social media accounts, business profiles, or website content in response to the false accusation. Deletion of your own accounts does not remove the defamatory content — it only removes the context that contradicts it. A prospective client or employer who searches your name will see the defamatory content against the backdrop of an apparently absent online presence, which is more damaging than a robust professional presence alongside clearly responded-to defamatory content.

Do not pay any amount to the poster as settlement without obtaining a comprehensive NDA that includes a written retraction and a bar on future publication of similar content. Payment without a formal NDA incentivises further defamatory campaigns from the same or associated parties, creates a precedent that your reputation has a price, and does not guarantee removal of the content from platforms where it has been distributed. Any settlement must be structured as a formal legal agreement with the involvement of instructed counsel on both sides.

The Reputation Recovery Phase: After the Content Is Removed

Content removal is the legal remedy, but it is not the end of the reputational recovery process. Depending on how widely the false accusations were distributed and for how long they remained visible, there may be residual damage in the form of archived copies, secondary distribution on platforms not covered by the removal order, and lingering influence on search results for your name. The recovery phase addresses these residual elements.

The most effective reputation recovery tool after a defamatory post has been removed is proactive positive content published through authoritative channels: a LinkedIn post from you or your company addressing (without naming the false accusation) the underlying topic the accusation was about, a professionally published article on a credible platform in your industry, an updated company profile on relevant directories, or a formally published statement where appropriate. The goal is to ensure that searches for your name return results that establish your actual professional identity — not the residual echo of a removed accusation.

Monitoring is essential during the recovery phase. False accusations removed from one platform are frequently reposted on others — either by the original poster or by secondary parties who have archived the content. RepuLex and similar specialist firms operate monitoring services that track any reappearance of identified defamatory content and trigger immediate response under the removal order that was previously obtained, or a fresh notice if new platforms are involved.

The NDA obtained from the poster as part of the resolution of the dispute is the final element of the recovery phase. A well-drafted NDA does not merely prohibit the poster from reposting the same content — it covers the subject matter of the false accusation, any related allegations, and any communications about the dispute with third parties. Violations of the NDA trigger both civil remedies — an injunction and damages for breach of contract — and criminal liability where the new content constitutes criminal defamation under BNS 2023 s.356 (formerly IPC 499/500).

Aggregated False Accusations: When Multiple People Post the Same Lie

A particularly serious pattern involves coordinated campaigns where multiple accounts, often anonymous, simultaneously post the same or similar false accusations across multiple platforms. This pattern is recognisable by the near-simultaneous timing of the posts, the use of identical or closely paraphrased language, references to the same purported events in different posts, and accounts with little posting history other than the target accusation. Coordinated campaigns are more damaging than single-poster defamation because they create a false impression of independent corroboration.

The legal response to coordinated campaigns invokes criminal conspiracy, now Section 61 of the Bharatiya Nyaya Sanhita 2023 (formerly Section 120B of the Indian Penal Code). Where evidence demonstrates that two or more persons acted in concert to publish false accusations, each participant in the conspiracy is criminally liable for the acts of all other participants, even those they did not personally carry out. A conspiracy complaint covers all identifiable participants in the conspiracy.

Establishing the conspiracy requires documentary evidence of coordination: messaging group records, email chains, shared content drafts, or accounts that followed each other prior to the campaign. Courts have also inferred conspiracy from circumstantial evidence — accounts with no prior connection that posted defamatory content about the same target within a two-hour window using identical language, with no plausible explanation for the coincidence other than prior coordination.

For removal purposes, coordinated campaigns require simultaneous multi-platform notices and, where the number of accounts involved is significant, a single court application that can cover all known URLs in one order rather than separate proceedings against each account. An order can also be framed to reach fresh URLs repeating the same content — the Delhi High Court's dynamic injunctions, first granted in UTV Software Communication v. 1337x.to (2019) for piracy, are the model — which is more effective where new accounts continue to be created during the pendency of proceedings.

When False Accusations Lead to Job Loss or Business Contracts Lost: Claiming Damages

Where false online accusations have caused demonstrable economic harm — job loss, termination of business contracts, loss of clients, loss of a licence or regulatory approval — the civil suit for defamation can include a claim for special damages alongside the general claim for injury to reputation. Special damages in defamation cases are specific, quantifiable economic losses directly traceable to the defamatory publication: a written termination letter from an employer citing the online accusation, a client email withdrawing a contract in the context of the false post, or documented evidence of a business partner withdrawing from a proposed transaction.

Quantifying special damages requires the same standard of proof as any other civil damage claim: the loss must be established on the balance of probabilities, it must be directly caused by the defamatory publication (not merely temporally coincident), and it must be ascertainable in a monetary amount. Expert testimony — an accountant's report on projected revenue loss, a business valuation expert's assessment of brand damage — is admissible and often necessary in high-value claims.

Indian courts have awarded damages in civil defamation cases ranging from a few lakhs for minor cases with limited distribution to substantial awards in serious cases involving documented commercial harm. The Delhi High Court has awarded damages reflecting loss of business contracts, loss of employment, and brand diminution in cases where the plaintiff produced sufficient documentary evidence of the causal link between the defamatory content and the economic harm.

In cases where the false accusation was published by a competitor for competitive advantage — to win a contract the complainant was bidding for, to drive clients away from the complainant's business, or to disqualify the complainant from a tender — the civil suit may also include a claim under common law for the tort of malicious falsehood. This tort has a lower threshold than defamation in one respect: the complainant does not need to show that the statement is defamatory in the traditional sense, only that it was false, that the defendant knew it was false or was recklessly indifferent to its truth, and that it caused economic harm.