International Cyber Crime Institutions and the Budapest Convention
India never joined Budapest. In September 2026 it signed the UN's new cybercrime treaty instead.
A phishing kit hosted in one country, mule accounts in a second and a victim's bank in India: cyber fraud crosses borders by default, while police powers stop at them. International institutions and treaties exist to close that gap, by getting countries to define the same crimes, preserve evidence quickly and hand it over to each other.
For the IIBF exam, Unit 15 pairs national and international institutions. This page covers the international side and how it links back to Indian agencies. CERT-In and NCIIPC have their own page.
You save ₹300
- Full 120-question mocks
- Cyber law coverage
- Module-wise practice
One payment, no subscription · Valid for 2 months
The International Bodies and Treaties to Know
- Budapest Convention
- The Council of Europe Convention on Cybercrime, opened for signature in Budapest in November 2001 and in force since July 2004. The first international treaty on cyber crime. It asks members to criminalise a common list of offences (illegal access, interception, data and system interference, misuse of devices, computer-related forgery and fraud, child sexual abuse material, copyright infringement), give police powers such as expedited preservation of data, and cooperate through a 24/7 contact network.
- UN Convention against Cybercrime
- Adopted by the UN General Assembly on 24 December 2024. Opened for signature in Hanoi on 25 October 2025 and stays open at UN Headquarters until 31 December 2026. It enters into force 90 days after the 40th ratification, so it is not yet in force.
- INTERPOL
- The international police organisation. Each member runs a National Central Bureau linked to the others through a secure network called I-24/7. India has been a member since 1949 and its bureau, in New Delhi, is run by the CBI.
- FIRST
- The Forum of Incident Response and Security Teams, a global association of computer emergency response teams that share threat information and coordinate during large incidents.
- Europol's European Cybercrime Centre (EC3)
- The EU's cyber crime hub. It matters to Indian banks mainly when a fraud network or malware operation is being taken down jointly across countries.
India's Position on the Two Treaties
Budapest Convention (Council of Europe, 2001)
India's status
Not a party
What it means
India did not join, so it does not use the Convention's cooperation channels as a member
UN Convention against Cybercrime (2024)
India's status
Signed on 25 September 2026
What it means
Signature is not ratification. The Convention binds India only after India ratifies and the treaty itself comes into force
| Treaty | India's status | What it means |
|---|---|---|
| Budapest Convention (Council of Europe, 2001) | Not a party | India did not join, so it does not use the Convention's cooperation channels as a member |
| UN Convention against Cybercrime (2024) | Signed on 25 September 2026 | Signature is not ratification. The Convention binds India only after India ratifies and the treaty itself comes into force |
This Changed After the Courseware Was Written
The IIBF courseware is the 2025 edition. It can describe the Budapest Convention as the only global treaty and India as outside every international cyber crime agreement. As of October 2026 the UN Convention exists, has been opened for signature, and India has signed it. It is still not in force. IIBF can test developments up to the cut-off date for your sitting, so know both positions.
Quick practice on banking operations. No signup.
Indian Bodies That Connect to the International System
| Body | Role |
|---|---|
| CERT-In (MeitY) | National incident response team; India's link to other countries' CERTs |
| NCIIPC (NTRO) | Protects Critical Information Infrastructure, including notified bank and payment systems |
| I4C (Ministry of Home Affairs) | Indian Cybercrime Coordination Centre: coordinates police action and runs the National Cybercrime Reporting Portal. Scheme approved in 2018, an attached office of MHA since 1 July 2024 |
| CBI | Runs India's INTERPOL National Central Bureau; handles notices and international police requests |
| RBI | Sets cyber security and fraud reporting rules for banks |
Why Cross-Border Cases Are Slow
- check_circleThe IT Act reaches offences committed abroad if they involve a computer or network in India (sections 1(2) and 75), but an Indian court's reach does not extend to evidence held on foreign servers.
- check_circleEvidence held by a foreign platform usually has to come through formal mutual legal assistance or letters rogatory, which can take months. Logs may be deleted in the meantime.
- check_circleThis is why banks are told to preserve their own logs and report fast: the domestic evidence is often the only evidence that survives.
How the IIBF Exam Tests This
- check_circle'The first international treaty on cyber crime' is the Budapest Convention, of the Council of Europe, not the UN.
- check_circle'Is India a party to the Budapest Convention?' No.
- check_circleMatching bodies to roles: INTERPOL for police cooperation, FIRST for incident response teams, CERT-In for India's incident response.
- check_circleSigned versus in force: a question on the UN Convention may test whether candidates know signature alone does not bring a treaty into force.
FAQs
Is India a signatory to the Budapest Convention?expand_more
No. India has not joined the Council of Europe's Budapest Convention on Cybercrime. It signed the separate UN Convention against Cybercrime on 25 September 2026.
What is the UN Convention against Cybercrime?expand_more
A UN treaty adopted on 24 December 2024 to define cyber offences and strengthen cooperation and sharing of electronic evidence. It was opened for signature in Hanoi in October 2025 and comes into force 90 days after 40 countries ratify it.
Who is India's link to INTERPOL?expand_more
The CBI, which runs India's INTERPOL National Central Bureau in New Delhi. India has been an INTERPOL member since 1949.
Which Indian agency coordinates action against cyber crime?expand_more
The Indian Cybercrime Coordination Centre (I4C) under the Ministry of Home Affairs, which also runs the National Cybercrime Reporting Portal. Technical incident response is CERT-In's job.
Next steps
- CERT-In & NCIIPCarrow_forward
- Warfare & Terrorismarrow_forward
- SWIFT Fraudarrow_forward
- Syllabusarrow_forward
120 questions, 2 hours, scored instantly.