Cyber Insurance for Individuals in India: Do You Need It and What It Costs

More of daily life now runs through a screen. We bank, shop, invest and hold our identity documents online, and the risks have grown alongside that convenience. Government data shows that cyber security incidents in India rose from 10.29 lakh in 2022 to 22.68 lakh in 2024, and the financial toll is large. The Indian Cyber Crime Coordination Center (I4C) has reported that around ₹10,319 crore was lost to cyber criminals between April 2021 and December 2023.

Against that backdrop, insurers have started selling cyber insurance for individuals in India. This article explains what a personal cyber insurance policy is, what it covers and excludes, what it costs, how claims work, and the basic safety habits you can build.

What is Cyber Insurance For Individuals in India?

Cyber insurance for individuals is a general insurance policy that covers the money and costs you lose to cybercrimes. It protects against online banking fraud, identity theft, phishing and social media account hacks. Cyber insurance is sold either as a standalone retail policy or as an add-on to another general insurance cover, and it can pay for both your own losses and legal costs from third-party claims.

In insurance terms, the cyber insurance cover splits into two parts.

• First-party liabilities: These are losses you bear directly from an incident. For example, money siphoned from your account through a phishing scam, or the cost of recovering your files after a malware attack on your laptop.
• Third-party liabilities: Claims made against you by someone else who was harmed. For example, if a hacker takes over your social media account and posts defamatory content about another person, and that person then pursues you for legal costs or damages.

Types of Cyber Insurance Policy in India

Cyber insurance policies in India fall into two main types by who they protect: personal cyber insurance for individuals and families, and commercial cyber insurance for businesses. Each is sold either as a standalone policy or as an add-on to another cover.

• Individual cyber insurance: It covers a single person’s own online losses, such as banking fraud, identity theft, phishing and data recovery. This is the core retail product offered by insurers like HDFC ERGO and Bajaj General Insurance.
• Family cyber insurance: This is the individual cyber insurance personal cover extended to your household. Most insurers let you add a spouse and dependent children for an extra premium, and some offer a dedicated family plan.
• Business cyber insurance: It is built for companies and covers first-party and third-party liabilities such as data breaches, business interruption and regulatory costs. The sums insured and premiums are much higher.

The table below compares the two types of cyber insurance most people weigh up.

Why Cyber Insurance For Individuals Has Gained Attention in India

Cyber insurance for individuals has grown in visibility because digital exposure has widened and the regulator has stepped in. With over 86% of Indian households now connected to the internet and UPI woven into everyday spending, the number of people who can be targeted has multiplied, and so has the money at stake.

Two developments matter here.

• India’s data-protection framework has firmed up. The Digital Personal Data Protection Act was enacted by Parliament on 11 August 2023, and the DPDP Rules, 2025 were notified in November 2025. It has pushed data handling and personal privacy into the mainstream conversation.
• The insurance regulator has shaped the product itself. In its Guidance Document on Product Structure for Cyber Insurance (September 2021), IRDAI set out what a policy for individuals should cover. It lists items such as theft of funds, identity theft, social media cover, cyberstalking, malware and data restoration, phishing and email spoofing. Since IRDAI issued this as guidance to insurers rather than a single standard product, the cover still varies from one policy to the next.

What a Personal Cyber Insurance Policy Covers in India

A personal cyber insurance policy in India typically reimburses direct financial losses from online fraud, plus the costs of recovering your data, devices and reputation. Exact wording differs by insurer, but the cover usually maps closely to the categories IRDAI outlined in its guidance document. Most policies also let you extend cover to your family for an added premium.

Common inclusions across current retail policies are:

• Theft of funds: Losses from your bank account, cards or wallets due to unauthorised access, phishing or spoofing.
• Identity theft: Financial loss, credit-monitoring costs and legal prosecution costs when someone misuses your personal information.
• Data restoration and malware: The cost of recovering lost or corrupted data after a malware attack, and in some policies the cost of replacing a device damaged by malware.
• Cyberbullying, stalking and reputation loss: Legal costs, the cost of removing harmful content, and counselling costs for the affected person.
• Online shopping and selling fraud: Losses when you pay a fraudulent seller and get nothing, or sell to a buyer who pays fraudulently.

Some insurers add smart-home cover, social media cover and cyber extortion, and many advertise no deductibles and no sub-limits on the base cover. HDFC ERGO, for instance, places no restriction on the number of devices covered under its individual plan.

What Cyber Insurance For Individuals Does Not Cover

Cyber insurance for individuals excludes losses that stem from your own wrongdoing, from business activity, or from risks that belong to a different kind of policy. Reading the exclusions matters as much as reading the cover, because claims are most often contested there. The single most important exclusion concerns your own conduct.

Common exclusions in current personal policies include:

• Deliberate or dishonest acts by you: IRDAI’s guidance suggests wording that excludes any deliberate, criminal, fraudulent, dishonest or malicious act or omission by the insured, with the exclusion applying when the negligence directly caused the loss.
• Investment or trading losses: Money lost through investment or trading activities is generally outside the cover.
• Tangible property and bodily injury: Physical damage to property or personal injury is not a cyber loss.
• Non-disclosure and prior incidents: Losses from facts you didn’t disclose, or from an incident that pre-dates the policy’s retroactive date, are excluded.
• Business use: A personal policy is meant for private use, not commercial or freelance business losses.

The practical takeaway is that these policies protect an innocent victim of cybercrime. If your deliberate act caused the loss, the insurer can decline a claim, so the wording around negligence deserves a close read before you buy.

How Much Cyber Insurance For Individuals Costs in India

Cyber insurance for individuals in India is priced lower than health or motor cover, with entry premiums of roughly ₹1 to ₹2 a day for a modest sum insured. What you pay depends on the sum insured you choose, the add-ons you select, and whether you extend cover to your family. The figures below are indicative and were taken from insurers’ own pages in September 2026.

A few points shape the final number you pay. A higher sum insured raises the premium, as does extending cover to a spouse, children or a wider family. Add-ons such as smart-home cover or a higher identity-theft limit also add to the cost. Since there’s no single standard product, it’s worth comparing the cover you get for a given premium.

Which Insurers Offer Cyber Insurance For Individuals in India

Several general insurers in India offer cyber cover aimed at individuals and families, each under its own product name and wording. This is a factual list, not a ranking, and the right fit depends on the cover you need and the exclusions you can accept.

Insurers currently offering personal cyber cover include:

• HDFC ERGO, through its Cyber Sachet policy.
• Bajaj Allianz General Insurance, through its Individual Cyber Safe policy.
• Tata AIG, through its CyberShield plan for individuals and families.

As the product structures differ, comparing sum insured, sub-limits and the exclusion list tends to be more useful than comparing brand names.

Do You Actually Need Cyber Insurance as an Individual in India?

Whether you need cyber insurance depends on how much of your financial and personal life runs online, and on the protection you already have. Keep one important limit in mind: a cyber policy transfers the financial consequences of an attack, but it doesn’t stop the attack or undo the harm. It sits alongside good digital habits rather than replacing them.

Cyber insurance can be suitable for people who:

• Bank, trade or transact online frequently, or hold large balances that move digitally.
• Store sensitive documents, passwords or financial data online.
• Are newer to the online space, including some senior citizens and first-time digital users, who may be more exposed to scams.

How a Cyber Insurance Claim Works in India

A cyber insurance claim in India starts with reporting the crime to the authorities and your bank, and then intimating your insurer with proof of the loss. Acting quickly matters, both to recover money and to keep your claim clean. The usual steps run as follows.

1. Report the cybercrime immediately. Call the national cybercrime helpline 1930 or file a complaint at cybercrime.gov.in as soon as you notice the fraud.
2. Inform your bank. For any unauthorised transaction, notify the bank without delay, since RBI’s protection is strongest when you report within three working days.
3. Lodge the formal complaint. File an FIR or a National Cyber Crime Reporting Portal complaint. IRDAI has recommended that for small claims up to ₹5,000, insurers may accept an e-complaint on the portal instead of a police FIR.
4. Intimate your insurer. Contact the insurer, share the incident details and the complaint reference, and ask for the claim form.
5. Submit documents. Provide bank statements, screenshots, transaction details and the complaint or FIR copy, then track the claim to settlement.

Safety Habits to Build Before You Rely on Cyber Insurance

The strongest protection is preventing the loss in the first place, because insurance pays some bills afterwards but can’t return your data, time or peace of mind. Building a few basic habits reduces the chance you’ll ever need to claim, and it also keeps you on the right side of the exclusions that reward careful behaviour. Treat the list below as the groundwork; the policy is the safety net beneath it.

• Never share your OTP, PIN, CVV or passwords with anyone. No genuine bank or company asks for them, and under RBI’s rules, a customer who shares payment credentials bears the loss until the transaction is reported.
• Use strong, unique passwords and turn on two-factor authentication for banking, email and important accounts.
• Register for SMS and email transaction alerts, which RBI requires banks to offer, so you spot an unauthorised transaction early.
• Check links before you click. Phishing messages copy real brands, so type bank and shopping URLs yourself and avoid links in unexpected messages.
• Keep your devices, apps and antivirus updated, and download apps only from official stores.
• Avoid financial transactions on public Wi-Fi, and use your own mobile data or a trusted network instead.
• Review your bank and card statements regularly so small fraudulent charges don’t go unnoticed.
• Report fast if something goes wrong. The quicker you call 1930 and inform your bank, the better your chances of freezing and recovering the money.

How to Decide if Personal Cyber Insurance is Worth the Premium

Deciding whether personal cyber insurance is worth the premium comes down to a few practical checks. Run through this checklist before you buy:

• Size the cover to a realistic loss. Match the sum insured to the most a single incident could cost you, not the cheapest slab.
• Check what you already hold. Confirm your bank’s obligations and any existing policy with cyber cover, so you don’t pay twice.
• Read the exclusions first. The negligence, prior-incident and business-use clauses decide whether a claim pays.
• Judge the claim process, not the premium. Documents required, turnaround and support matter more than the starting price.
• Buy only if it closes a real gap, and review the cover each year as your digital life changes.

No single answer fits everyone. Let your own exposure and the policy wording settle the decision.