Cybercrime is criminal conduct in which computers, networks, digital devices, data or online services are the target, tool or environment of an offence. It includes crimes that depend entirely on technology, such as unauthorized access and malware attacks, as well as traditional offences that are committed or expanded through digital systems, including fraud, identity theft and extortion. The precise legal definition of cybercrime depends on the jurisdiction and the offence involved.
Digital technologies allow offenders, victims, infrastructure and evidence to be located in different countries at the same time. For this reason, cybercrime investigations can involve not only domestic criminal law but also electronic evidence, international cooperation and, in serious cross-border cases, extradition proceedings.
What Is Cybercrime in Simple Terms?
In simple terms, cybercrime means using computers, digital systems or the internet to commit a criminal offence, or attacking those systems directly.
A useful distinction is between cyber-dependent crime and cyber-enabled crime.
Cyber-dependent crimes can only exist because of information technology. Examples include unauthorized access to computer systems, malware attacks, interference with data or networks and distributed denial-of-service attacks.
Cyber-enabled crimes are traditional offences whose scale, reach or method is increased through technology. Online fraud, identity theft, certain forms of extortion and scams are common examples. Europol and INTERPOL use similar distinctions when describing modern cybercrime.
What Constitutes Cybercrime?
Not every harmful or suspicious activity online is automatically a cybercrime. Criminal liability depends on the applicable law, the conduct involved and, in many cases, factors such as intent, authorization and the resulting harm.
International cybercrime frameworks identify several recurring categories of conduct. The Council of Europe’s Budapest Convention, for example, addresses offences including illegal access, interference with computer data and systems, computer-related fraud and other technology-related criminal conduct.
Conduct that may constitute cybercrime includes:
- accessing a computer system without authorization;
- installing or distributing malicious software;
- interfering with or destroying computer data;
- disrupting access to computer systems or networks;
- obtaining money or property through online fraud;
- stealing or unlawfully using personal or financial information;
- using digital systems for extortion;
- committing certain forms of online stalking or harassment;
- offences involving illegal online content;
- using technology to facilitate other criminal activity.
Different countries may classify the same conduct differently. Therefore, the applicable national law determines whether the conduct is criminal, how serious the offence is and which court has jurisdiction.
What Are the Main Types of Cybercrime?
Cybercrime covers a wide range of offences, and the terminology continues to develop as technology changes.
Unauthorized Access and Hacking
Unauthorized access generally involves entering a computer system, account or network without permission or exceeding the authorization that has been granted.
The legal significance of access depends on the applicable statute and the circumstances of the case. Unauthorized access may also form part of a broader investigation involving theft of data, fraud or interference with computer systems.
Malware and Ransomware
Malware is software designed or used for harmful purposes, such as disrupting systems, stealing information or gaining unauthorized control over devices.
Ransomware is a form of malicious software commonly used to block access to systems or data and demand payment. INTERPOL identifies ransomware and malware attacks among the significant cybercrime threats addressed through international law-enforcement cooperation.
Online Fraud and Financial Cybercrime
Technology can be used to facilitate fraud involving online payments, investment schemes, impersonation, compromised accounts and business communications.
Business email compromise, phishing and other online scams can involve both traditional fraud offences and separate computer-related offences depending on the conduct and jurisdiction.
Identity and Data-Related Offences
Cybercrime can involve unlawfully obtaining or using personal, financial or authentication data.
A single incident may therefore lead to several allegations—for example, unauthorized system access followed by the use of stolen information for fraud.
Cyber Extortion
Digital systems may also be used to threaten individuals or businesses in order to obtain money, information or another benefit.
The exact offence may depend on whether the conduct involves threats, stolen data, ransomware, disclosure of confidential information or other circumstances.
What Penalties Can Cybercrime Carry?
There is no universal penalty for cybercrime.
The potential consequences depend on the country, the criminal offence charged and the facts of the case. This is particularly important because the same expression—such as “hacking” or “cyber fraud”—may cover very different conduct under different legal systems.
Relevant factors may include:
- the nature of the unauthorized activity;
- the amount of financial loss;
- the number of affected victims;
- the type of data involved;
- whether critical or protected systems were targeted;
- whether fraud, theft or extortion was involved;
- previous convictions;
- whether the offence formed part of organized criminal activity.
Depending on the jurisdiction, a conviction may result in imprisonment, fines, confiscation of criminal proceeds, restitution or other court orders.
Is Cybercrime a Felony?
There is no single international classification of cybercrime as a felony or misdemeanor.
Those terms belong to particular national legal systems. A cyber-related offence may be treated as a serious indictable or felony-level offence in one jurisdiction and classified differently elsewhere.
The correct classification therefore depends on the statute under which the individual is investigated or charged rather than simply on whether the conduct is described as “cybercrime”.
How Are Cybercrimes Investigated?
Cybercrime investigations often rely heavily on electronic evidence.
Depending on the case, investigators may examine devices, account records, transaction information, communications, system logs and information held by online service providers.
Digital evidence also creates particular cross-border difficulties. Relevant data may be stored in one country while the person under investigation, service provider and alleged victim are located elsewhere.
For this reason, authorities can use formal and informal mechanisms of international cooperation to preserve and obtain electronic evidence. UNODC notes that cross-border cybercrime investigations commonly involve mutual legal assistance and cooperation concerning electronic evidence.
The legality, admissibility and scope of investigative measures depend on national criminal procedure and applicable safeguards.
Can Cybercrime Lead to Extradition?
Yes. A cybercrime allegation can lead to an extradition request where the alleged conduct crosses borders and the legal requirements for extradition are satisfied.
However, extradition is not automatic simply because an offence involves the internet.
The requested state must consider its own extradition law and any applicable international agreement. Depending on the jurisdiction and legal framework, relevant issues may include dual criminality, the offence alleged, the underlying arrest warrant or judicial decision, evidentiary requirements, nationality restrictions and applicable human-rights protections.
Cybercrime cases frequently require international cooperation because electronic evidence, infrastructure and persons involved may be spread across several countries. UNODC identifies dual criminality and effective cross-border evidence cooperation as important issues in international cybercrime cases.
Extradition is only one possible part of such cooperation. Authorities may also exchange evidence, preserve digital information, provide mutual legal assistance or coordinate investigations without transferring the accused person.
Это намного точнее старой версии с утверждением, что extradition обязательно требует treaty и что человек не должен физически находиться в своей стране.
When Should You Contact a Cybercrime Lawyer?
Legal advice may be important when a person becomes the subject of a cybercrime investigation, receives criminal charges or faces cross-border proceedings connected with alleged online conduct.
A lawyer may assist with:
- identifying the criminal offences being alleged;
- analysing which country or authorities claim jurisdiction;
- reviewing the legal basis for searches, seizures and requests for electronic evidence;
- assessing digital and documentary evidence;
- responding to criminal proceedings;
- coordinating defence across several jurisdictions;
- analysing extradition or international cooperation risks.
A cybercrime lawyer cannot guarantee a particular outcome. The defence strategy depends on the allegations, evidence, jurisdiction and procedural stage of the case.
Where an investigation involves more than one country, early assessment can be particularly important because criminal proceedings, electronic-evidence requests and extradition issues may develop in parallel.
Contact Our Lawyers
Cybercrime cases can combine criminal law, technology, electronic evidence and international cooperation.
If you are under investigation or facing criminal proceedings related to alleged hacking, online fraud, unauthorized access, identity-related offences or other cybercrime allegations, our lawyers can review the circumstances of the case and assess the legal options available.
Need legal defence in a cybercrime case? Contact our lawyers for a confidential case assessment.