Can WhatsApp be held liable for circulating a deepfake fraud video on its platform?
WhatsApp (and its parent Meta) have conditional immunity from liability for user-generated content under IT Act Section 79 — the safe harbour provision. This immunity is conditional: it is lost if the platform, upon receiving actual knowledge (through a court order or notification) that the content is unlawful, fails to expeditiously act to remove or disable access to that content. A deepfake fraud video circulating on WhatsApp that is reported to WhatsApp through its notification mechanism creates 'actual knowledge' — if WhatsApp then fails to act within the 36-hour window specified in the IT Rules, the platform potentially loses its Section 79 protection and can be held liable.
IT Act Section 79 — the safe harbour and its conditions
IT Act Section 79 provides that an intermediary (including WhatsApp, YouTube, and all social media platforms) shall not be liable for any third-party information, data, or communication link made available or hosted by it. The immunity is conditional — it does not apply if: the intermediary has conspired, abetted, aided, or induced the unlawful act; or the intermediary upon receiving actual knowledge of the unlawful nature of the content fails to act expeditiously to remove or disable access. The IT Rules 2021 specify the time frame for expeditious action: within 24 hours for content reported through government-notified mechanisms; within 36 hours generally.
WhatsApp's specific challenge — end-to-end encryption
WhatsApp is end-to-end encrypted — neither WhatsApp nor Meta can read the content of private messages. This creates a structural difficulty: a deepfake video circulating in private WhatsApp messages is technically inaccessible to WhatsApp's moderation systems. The platform's actual knowledge of the specific content in a private conversation is limited unless a user reports it through the in-app reporting mechanism (which forwards a sample of the message to WhatsApp for review) or a government/court notification is received with specific details.
For deepfake videos circulating in WhatsApp Status (which is broadcast content) or in large public-facing WhatsApp groups, the detection and removal obligation is clearer. For private one-to-one message circulation: the reporting mechanism is the primary tool. When an affected person reports the video through WhatsApp's in-app mechanism and provides the specific message details, WhatsApp has actual knowledge and the 36-hour removal clock begins.
Practical liability — when the platform is accountable
WhatsApp's potential liability crystallises when: (a) actual knowledge is established (report received with specific content details); (b) the 36-hour window has passed; and (c) the content is still accessible. In this scenario, the affected person can: file a complaint with MeitY through the IT Rules grievance mechanism; and include the platform in civil proceedings for the harm caused by the delayed removal. Platform liability in deepfake cases is an evolving area — courts are beginning to develop the framework.
Laws & authorities referenced in this chapter
IT Act 2000 — §79 (safe harbour: conditional immunity; lost on actual knowledge + failure to remove)
IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 — 36-hour removal window; grievance officer requirement
IT Act 2000 — §69A (government power to direct blocking of content: applicable to deepfake fraud content)
MeitY — grievance mechanism against platforms failing to act on deepfake reports
WhatsApp/platform liability: conditional under IT Act §79 safe harbour. Immunity lost if: actual knowledge established (through report or court notification) + failure to remove within 36-hour window. WhatsApp challenge: end-to-end encryption limits proactive detection; reporting mechanism creates actual knowledge. Status and public groups: clearer removal obligation. Practical steps: report through in-app mechanism (creates actual knowledge + starts 36-hour clock); escalate to legal@whatsapp.com with specifics; obtain court order naming platform as respondent for faster action.
This is educational content, not legal advice. For a specific situation, please consult a qualified legal professional. Excerpted from Currency, Coins & The Law by Mayank Agarwal, Part 38: Deepfakes, Voice Clones & AI Fraud — Deepfake Video, AI Text Endorsements, Voice Cloning, Platform Liability, Digital Evidence, Injunctions, Trademark Protection, Community Anti-Fraud Protocol.