Safer digital world: What India’s Cybercrime Treaty signature means

On 25 September, on the sidelines of the General Assembly’s 81st session in New York, EAM S. Jaishankar signed the United Nations Convention against Cybercrime, saying it ‘strengthens international cooperation for a safer digital future’.

A pen, a page, a few minutes in a hall full of flags. On 25 September, on the sidelines of the General Assembly’s 81st session in New York, External Affairs Minister S. Jaishankar signed the United Nations Convention against Cybercrime, saying it “strengthens international cooperation for a safer digital future”, and India’s name went into the register of the first global treaty written for crime that moves through wires and servers. Follow that moment down the long corridor of “implementation” to a police station in Pune or Patna, and the question waiting at the end is plain: will it help bring the money back?

Why would it? Because evidence will move faster. Why would evidence move faster? Because the treaty says it should. And what turns the treaty’s saying so into a magistrate’s order, a frozen account, a server log handed across an ocean… that is where the real work begins, and almost all of it still lies ahead.

The signature didn’t come in a hurry, and that matters. India sat through the drafting, shaped the text, and then, when 72 states lined up to sign at the opening ceremony in Hanoi in October 2025, it held back. It cited privacy, data sovereignty and governance, the same concerns it had carried into the negotiating room. It took a year to weigh the text against its own constitutional grain before signing, by which time the list of signatories had grown to some 95. That isn’t hesitation. It’s a state reading the fine print before putting its name to a promise. And the promise has a particular weight given where India stands on these questions. New Delhi never joined the Council of Europe’s Budapest Convention, for two decades the main international framework on cybercrime. It objected that it had no hand in writing the text, and it was wary of Article 32(b), which lets a foreign authority reach data on servers in another country with the consent of a private party, without passing through the host state at all. The UN convention was a different creature, negotiated where India sat as an equal rather than a latecomer, and signing it follows a conviction India has held for years: that the rules of the digital world should be written together, multilaterally, not inherited from a regional club.

You Might Be Interested In

A signature, though, is intent, a direction set, a promise in the conditional tense. Under the Law of Treaties, it obliges India not to defeat the convention’s object and purpose, but it binds India to none of its substantive provisions, opens no channel for evidence, and rewrites not one section of law. That comes only with ratification. The convention itself enters into force 90 days after the 40th state ratifies, and it is not yet in force; signature stays open at UN Headquarters until 31 December.

You see why eve r y gate matters once you’ve watched a cyber fraud case file spread across the map like ink in water: the victim in Indore, the call centre somewhere in Southeast Asia, the server in a third country, the cryptocurrency exchange registered in a fourth, the mule accounts that receive-layer-scatter the money strewn across a dozen Indian districts. Every border the money crosses is a border the evidence must cross too, and the evidence travels a slower road. Take a request for account data from an American platform. It goes from the Ministry of Home Affairs into diplomatic channels, to the US Department of Justice, to a US court, and only then to the platform itself, five handoffs for something that can vanish in an afternoon. The money moves at the speed of a click. The evidence moves at the speed of paper.