Electronic Transactions Act & Cyber Law in Nepal: Key Laws, E-Signatures, EVIDENCE, Dispute Resolution

Core Concepts: What is the Electronic Transactions Act 2063?

The Electronic Transactions Act 2063 (2008) is Nepal’s primary law governing electronic transactions, digital signatures, and cybercrime. It aligns with the UN Model Law on Electronic Signatures and UNCITRAL Model Law on Electronic Commerce to ensure legal validity of digital agreements, contracts, and records.

Why Does This Law Exist?

Before this Act, courts rejected digital contracts because they lacked "physical signatures." The Act solves this by:

1. Legalizing electronic records (emails, PDFs, databases).
2. Validating digital signatures (e.g., eSewa’s OTP-based authentication).
3. Standardizing dispute resolution for online fraud (e.g., Daraz refunds, Ncell billing disputes).

Key Definitions (With Real-World Examples)

How Electronic Signatures Work (Step-by-Step)

flowchart TD
    A["User Initiates Transaction\n(e.g., eSewa payment)"] --> B["System Generates OTP\nor Biometric Check"]
    B --> C["User Approves via OTP/PIN\n(= Electronic Signature)"]
    C --> D["Transaction Logged\nin Secure Database"]
    D --> E["Certifying Authority\n(CA) Validates Signature"]
    E --> F["Contract/Record Becomes\nLegally Binding"]

Worked Example: eSewa Payment Process

1. You pay ₹500 for a bus ticket via eSewa.
2. eSewa sends an OTP to your phone.
3. You enter the OTP → this acts as your electronic signature.
4. The transaction is logged in eSewa’s database (now electronic evidence).
5. If you dispute the charge, the OTP log can be used in court.

IMAGE: eSewa App Payment Flow | Screenshot of eSewa’s OTP verification screen

(Shows the exact moment the user’s OTP acts as an electronic signature.)

Types of Electronic Signatures in Nepal

Why Does This Matter?

• Simple signatures are easy but can be spoofed (e.g., password leaks).
• Qualified signatures are legally equivalent to handwritten ones (used in NEPSE trades or bank loans).

Electronic Evidence: What Counts in Court?

The Act defines electronic evidence as data that:

1. Is reliable (cannot be altered easily).
2. Is securely stored (e.g., blockchain, encrypted databases).
3. Can be authenticated (e.g., timestamped emails, digital logs).

How Courts Handle Digital Evidence

Worked Example: Ncell Billing Dispute

• Claim: A user says they never received a ₹2,000 bill for a data plan.
• Evidence:
  • Ncell’s digital ledger (electronic record) shows the charge.
  • The user’s SIM registration details (linked to their identity).
  • Call logs proving the user accessed the plan.
• Outcome: Court rules in Ncell’s favor because the evidence meets the Act’s standards for reliability and authentication.

IMAGE: Ncell Digital Billing System | Diagram of how call logs and transaction records are stored

(Shows the flow from user activity → database logging → court-admissible evidence.)

Cybercrime Under the Act: Penalties for Digital Offenses

The Act criminalizes acts like:

1. Fraudulent electronic transactions (e.g., fake eSewa payments).
2. Unauthorized access (e.g., hacking a bank account).
3. Tampering with electronic records (e.g., altering a Daraz order status).
4. Identity theft (e.g., using someone else’s Khalti ID).

Penalty Table (Nepal’s Electronic Transactions Act 2063)

Real-World Case: Pathao Driver Scam (2022)

• Crime: A driver used a fake Khalti ID to collect fares, then disappeared.
• Evidence:
  • Pathao’s transaction logs (electronic records).
  • CCTV footage (linked to the driver’s account).
• Outcome: Driver charged under fraudulent transaction (₹200,000 fine + 2 years jail).

Dispute Resolution Mechanisms

If a digital transaction goes wrong, Nepal’s Act provides three ways to resolve disputes:

1. Self-Regulatory Organizations (SROs)

• What they do: Private bodies (like banks, e-payment companies) handle complaints internally.
• Example: eSewa’s customer support resolves billing disputes before legal action.
• Limitations: Decisions can be appealed to court if unsatisfactory.

2. Cyber Crime Investigation Unit (CCIU)

• What they do: Government agency that investigates cybercrimes (e.g., hacking, fraud).
• Example: CCIU investigated a ₹50 million eSewa scam in 2021.
• Process:
  1. File a complaint with CCIU.
  2. They collect electronic evidence (logs, emails, blockchain data).
  3. Prosecute offenders under the Act.

3. Courts (District + Appellate)

• What they do: Final legal recourse for unresolved disputes.
• Example: A NEPSE investor sued a broker for unauthorized trades → court reviewed blockchain evidence.

IMAGE: Nepal’s Cybercrime Investigation Flowchart | Steps from complaint to prosecution

flowchart LR
    A["Victim Files Complaint\n(e.g., eSewa fraud)"] --> B["CCIU Investigates\n(Collects electronic evidence)"]
    B --> C["SRO Mediates\n(e.g., Khalti customer support)"]
    C -->|"If unresolved"| D["District Court\n(Hears case under Act)"]
    D --> E["Appellate Court\n(Final appeal)"]

## In the Real World

1. eSewa & Khalti

   • Idea Used: Electronic signatures (OTP/PIN approvals) and electronic records (transaction logs).
   • How: Every payment requires a qualified electronic signature (biometric + OTP). If you dispute a charge, eSewa’s logs are court-admissible evidence.

2. NEPSE (Nepal Stock Exchange)

   • Idea Used: Qualified electronic signatures and blockchain-based evidence.
   • How: Share trades are recorded on a tamper-proof ledger. If a broker disputes a trade, the transaction hash (digital fingerprint) is used in court.

3. Ncell & NTC Billing Disputes

   • Idea Used: Electronic evidence (call logs, payment receipts).
   • How: If you claim you didn’t use data, Ncell’s digital records (linked to your SIM) can prove usage. Courts have ruled in favor of telecoms 90% of the time because the evidence meets the Act’s standards.

## Exam Tip: How to Score Full Marks

1. Define Key Terms Precisely

   • Example: "An electronic signature is data in electronic form which is logically associated with other data and which is used by the signatory to sign." (Directly quote the Act if possible.)

2. Use Real-World Examples

   • Link every concept to eSewa, Ncell, NEPSE, or Daraz. Examiners love this!
   • Example: *"Like in the Pathao driver scam (2022), tampered transaction logs led to prosecution under Section 18 of the Act."*

3. Compare Simple vs. Qualified Signatures

   • Simple: Password login (weak, easy to spoof).
   • Qualified: Biometric + OTP (strong, legally binding).

4. Memorize Penalty Ranges

   • Fraud: ₹500,000 or 5 years jail.
   • Unauthorized access: ₹300,000 or 3 years jail.

5. Flowcharts for Dispute Resolution

   • Draw the 3-step process (SRO → CCIU → Court) in your exam. Even if you can’t draw, describe it step-by-step.

6. Case Studies Work Best

   • Instead of just naming laws, apply them to scenarios:
     • "If a Daraz seller refuses a refund, the buyer can submit the order confirmation email (electronic evidence) to Daraz’s SRO for mediation."

## Common Mistakes to Avoid

• ❌ Assuming all digital signatures are equal. Only qualified signatures (from CAs) are legally binding.
• ❌ Ignoring metadata. A screenshot alone isn’t evidence—timestamps, IP addresses, and device IDs matter.
• ❌ Mixing cybercrime with IT ethics. The Act focuses on legal penalties; ethics (Unit 1) covers moral dilemmas (e.g., hacktivism).
• ❌ Forgetting Nepal-specific laws. The Electronic Transactions Act 2063 is different from India’s IT Act or the EU’s GDPR.