AI Bots Rule the Web: A Call for Urgent Cyber Law Scrutiny

AI Bots Rule the Web: A Call for Urgent Cyber Law Scrutiny
*By Advocate Amaresh Yadav, Supreme Court of India

In 2024, humanity crossed a historic digital threshold—more than half of global internet traffic is now powered by bots. Artificial Intelligence (AI)-driven bots are no longer a futuristic concern; they are our present-day reality, dictating the nature of our online interactions, transactions, and trust.

While bots serve a few legitimate purposes like crawling websites for indexing or powering customer support, a significant majority of them today are malicious. From hijacking social media accounts and crashing websites to scalping concert tickets and executing advanced phishing attacks, bots are wreaking havoc across sectors. This unprecedented digital threat compels us to re-examine our existing cyber law framework with a sharper, constitutional lens.

1. The Invisible Majority: When Humans Are No Longer the Dominant Digital Species

According to the 2024 Imperva Report, bots now constitute 51.2% of all web traffic. These aren’t merely code snippets executing simple tasks—they’re sophisticated, AI-powered entities capable of mimicking human behavior, bypassing CAPTCHA protections, and automating social manipulation on a massive scale.

This calls into question the very foundation of digital identity and authorship. If most internet traffic is non-human, what rights, responsibilities, and protections exist for users and platforms? Do AI bots, by mimicking humans, commit digital impersonation—a crime under Section 66D of the IT Act, 2000?

2. Cybercrime Surge: The New Frontier of Digital Theft and Manipulation

From a legal standpoint, bots today are instrumental in carrying out:

Credential Stuffing and Password Theft
Denial-of-Service (DoS/DDoS) Attacks
Click Fraud and Fake Ad Engagement
Ticket Scalping and E-commerce Hoarding
Deepfake Impersonation and Disinformation Campaigns

These activities are not only unethical but are also criminal under Sections 66 (Computer-related offences), 43 (Unauthorised access), and 66C (identity theft) of the Indian IT Act, 2000. Yet the prosecution rate remains abysmally low due to the transnational and decentralized nature of these attacks.

3. CAPTCHAs vs AI: The Absurd Struggle

Ironically, while bots grow smarter, humans are still stuck trying to prove they aren’t bots through outdated CAPTCHA puzzles. This imbalance reflects a technological and legal failure to update our digital security mechanisms in proportion to the AI evolution.

When AI can now generate realistic human interaction, what does “digital proof of humanity” look like? We must explore newer frameworks—possibly biometric, behavioral, or even blockchain-based identity verification that respects user privacy while being tamper-proof.

4. The ‘Dead Internet’ Theory: A Dystopia in Motion

An eerie concept gaining traction is the “Dead Internet Theory”—a belief that most of the internet is now generated by bots, not humans. If true, this represents not just a technological shift but a civilizational one: a world where synthetic content outweighs real human expression.

This trend poses risks to freedom of speech, democratic dialogue, and digital sovereignty. When bots manipulate narratives, elections, and public opinion, they do not merely breach cyber norms—they shake constitutional foundations.

5. Cyber Law Scrutiny: India Needs an Urgent Overhaul

India’s Information Technology Act, 2000, while pathbreaking in its time, is increasingly obsolete in the face of advanced AI threats. Our cyber law framework must now evolve to:

Legally define and categorize AI bots.
Criminalize bot-driven fraud explicitly.
Introduce real-time bot detection mandates for platforms.
Ensure cross-border cooperation for botnet takedowns.
Mandate algorithmic accountability for AI-generated content.

Additionally, the Digital India Act, currently in the works, must prioritize user privacy, platform liability, and AI ethics, while empowering the CERT-In and judiciary with more investigative autonomy and technical expertise.

6. Conclusion: From Cyber Jungle to Cyber Justice

We cannot afford to treat AI bots as mere technical glitches. They are now part of our digital society—whether as workers, saboteurs, or manipulators. But they must remain within the bounds of legality, transparency, and accountability.

As an Advocate of the Supreme Court of India, I believe that cyber justice must precede cyber regulation. Laws must evolve not merely to punish the misuse of AI but to preempt and prevent it. The internet cannot be a Wild West governed by bots and ruled by algorithms. It must be a democratic space safeguarded by constitutional values and guided by human intellect.

The age of AI bots is here. But the age of human oversight must not end.

About the Author:
Advocate Amaresh Yadav is a practicing lawyer in the Supreme Court of India, specializing in constitutional law, cyber law, and digital rights. He frequently writes on legal reforms, technology ethics, and the balance between innovation and regulation.

Amaresh Yadav

Amaresh Yadav