Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Internet and Other Technologies

E-Commerce, Digital Payments and Social Media: Law and Practice

Updated 11 October 2026 · Fact-checked

E-commerce is buying and selling through electronic networks. It runs on business models (B2B, B2C, C2C), digital payment systems such as UPI, cards and wallets, and platforms like social media. Law treats platforms as intermediaries under the IT Act, 2000 and the IT Rules, 2021. In exams, state the model, the rule, the facts, then the conclusion.

Understand E-Commerce, Digital Payments and Social Media

E-commerce means conducting commercial transactions over electronic networks, mainly the internet. It covers selling goods and services, placing orders, paying and delivering. It is classified by who deals with whom.

The main models are:
- B2B (business to business): a manufacturer sells to a distributor on an online portal.
- B2C (business to consumer): a retailer sells to an individual buyer.
- C2C (consumer to consumer): individuals sell to each other through a platform, as in classifieds or second-hand marketplaces.
- C2B (consumer to business): an individual offers a service or content to a business, such as a freelancer.
- B2G (business to government): a firm supplies or bids through a government e-procurement portal.

A further split is marketplace model (the platform only connects buyers and sellers) and inventory model (the platform owns the stock and sells directly). This split matters in law because a marketplace behaves more like an intermediary.

Digital payments move money without cash. The common systems are net banking, debit and credit cards, prepaid payment instruments (mobile wallets), and UPI (Unified Payments Interface). UPI was developed by the National Payments Corporation of India (NPCI). It lets you link bank accounts to a mobile app and pay using a virtual payment address (VPA) instead of account details. You authorise each payment with a UPI PIN. Money moves directly between bank accounts in real time, round the clock. Wallets differ: you first load money into the wallet, and the wallet issuer holds that balance. Payment systems are regulated by the Reserve Bank of India under the Payment and Settlement Systems Act, 2007.

Social media platforms let users create and share content. Legally, most are intermediaries under the IT Act, 2000: they receive, store or transmit user content on behalf of others. An intermediary gets a safe harbour from liability for third-party content, but only if it follows the conditions of the Act and the rules. These include acting on lawful government or court orders to remove unlawful content and observing due diligence.

The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 set the due diligence duties. They add extra duties for significant social media intermediaries (those above a user threshold notified by the Government). These include appointing a Chief Compliance Officer, a nodal contact person and a resident grievance officer, and publishing periodic compliance reports. They must also help trace the first originator of a message where the rules permit it, for specified serious offences. Intermediaries must publish rules and a privacy policy, and run a grievance redressal mechanism.

Key rules to remember

E-commerce model by parties: B2B = business → business; B2C = business → consumer; C2C = consumer → consumer; C2B = consumer → business; B2G = business → government; Identify the two parties in the facts first. The seller side is named first in the usual B2C and B2B labels.
UPI payment flow: Payer app → payer's bank (UPI PIN authorisation) → NPCI UPI switch → payee's bank → credit to payee; Payment is account to account and real time. A wallet instead debits a stored balance held by the issuer.
Safe harbour condition: Intermediary protection = no initiation, selection or modification of the transmission + due diligence + takedown on lawful notice; Safe harbour is lost if the intermediary conspires, abets or fails to remove content after actual knowledge through a lawful order.
Significant social media intermediary extra duties: Chief Compliance Officer + nodal contact person + resident grievance officer + monthly compliance report; These apply only to intermediaries that cross the notified user threshold. Do not apply them to every platform.

How to solve E-Commerce, Digital Payments and Social Media questions

Use this order for any case or theory question on e-commerce, payments or social media.

1Read the facts and list the parties and what each does (seller, buyer, platform, bank, payment provider).
2Classify the activity: which e-commerce model, which payment instrument, or whether the entity is an intermediary.
3Name the governing law: IT Act, 2000 and the 2021 Rules for platforms; Payment and Settlement Systems Act, 2007 and RBI directions for payments.
4State the rule in plain words with its conditions, for example safe harbour applies only if due diligence is followed.
5Apply the rule to the facts. Quote the facts that decide the point.
6Check for added duties, such as significant social media intermediary status or grievance timelines.
7Give a clear conclusion and one practical compliance step, such as appointing an officer or issuing a policy.
8If it is a theory question, add a short example in an Indian setting.

Quickest way: Classify, name the law, apply, conclude

When to use it: Use when time is short and the question is a short case or a 'discuss' question.

Write the label first: model, instrument or intermediary.
Write one line on the governing law.
Write the condition that decides the issue.
Match it to the facts in two or three lines.
End with a one-line conclusion and one compliance action.

Common mistakes in E-Commerce, Digital Payments and Social Media

Treating every social media platform as a significant social media intermediary.
Students remember the extra duties and apply them to all platforms.
Fix: Check whether the facts say the platform crosses the notified user threshold. Only then add the extra duties.
Saying an intermediary is never liable for user content.
Safe harbour is remembered as absolute.
Fix: State that protection depends on conditions: no role in selecting or changing content, due diligence, and removal on lawful orders or actual knowledge.
Confusing UPI with a mobile wallet.
Both are used through a phone app.
Fix: UPI moves money between bank accounts through NPCI. A wallet holds a loaded balance with the issuer.
Mislabelling the e-commerce model.
Students look at the platform instead of the two parties transacting.
Fix: Ask who sells and who buys. Two individuals through a platform is C2C. A firm selling to a firm is B2B.
Writing only definitions with no application.
Students prepare notes, not case answers.
Fix: Always use the structure of rule, facts, conclusion, and add a practical compliance step.
Citing section numbers or rule details from memory without being sure.
Students try to look more precise.
Fix: Name the Act or Rules in words if unsure. Use a section number only when certain, or check the bare text in the open book.

Worked examples

Example 1

Sundar, an individual in Pune, lists his used laptop on an online classifieds site. Meera in Nagpur buys it and pays through UPI. The site only displays listings and does not own any goods. Identify the e-commerce model and explain how the payment moves.

Show the solution

Parties: Sundar is an individual seller and Meera is an individual buyer, so it is a C2C transaction.
The site owns no stock and only connects the two, so it follows the marketplace model.
Meera enters Sundar's VPA or scans his code in her UPI app.
She authorises the payment with her UPI PIN.
Her bank debits her account and the payment passes through the NPCI UPI system.
Sundar's bank credits his account in real time. No wallet balance is involved.

Answer: It is a C2C transaction on a marketplace platform. The UPI payment moves directly from Meera's bank account to Sundar's bank account through NPCI after PIN authorisation.

Example 2

A social media platform with users above the notified threshold hosts a defamatory post about Rohan. Rohan sends a complaint. The platform did not create or edit the post but ignores the complaint and has no grievance officer. Discuss the platform's position under the IT Rules, 2021.

Show the solution

Status: the platform stores and transmits user content, so it is an intermediary. Crossing the threshold makes it a significant social media intermediary.
Rule: safe harbour is available only if the intermediary does not initiate or modify the content and observes due diligence under the 2021 Rules.
Due diligence includes a grievance redressal mechanism with a grievance officer who acknowledges and resolves complaints within the time set by the Rules.
Facts: the platform did not create or edit the post, which supports safe harbour. But it ignored the complaint and has no grievance officer, so it failed due diligence.
As a significant intermediary it also needed a Chief Compliance Officer, a nodal contact person and a resident grievance officer.
Conclusion: the failure to meet due diligence puts safe harbour at risk, and the platform may be held liable for the content under law.

Answer: The platform is a significant social media intermediary. Because it has no grievance officer and ignored the complaint, it has not met due diligence, so it may lose safe harbour. It should appoint the required officers, set up grievance redressal and act on the complaint.

Exam tips

Begin every answer by labelling the entity: model, instrument or intermediary. Examiners reward correct classification.
Use the written format of rule, application, conclusion and end with a practical compliance step.
Mention the condition attached to safe harbour every time you mention it.
In open-book elective papers, keep the IT Act, 2000 and the 2021 Rules tabbed, and quote them in plain words rather than copying.
Give Indian examples such as UPI, NPCI and RBI to show practical awareness.

Practice questions from Internet and Other Technologies

E-Commerce, Digital Payments and Social Media: frequently asked questions

What are the types of e-commerce models?

The main types are B2B, B2C, C2C, C2B and B2G, named by who sells to whom. Platforms are also split into marketplace and inventory models. Always identify the two parties first.

How does UPI work?

You link a bank account to a UPI app and pay using a virtual payment address, then authorise with a UPI PIN. The payment goes through the NPCI system from your bank to the payee's bank in real time. No wallet balance is needed.

What is an intermediary under the IT Rules, 2021?

An intermediary receives, stores or transmits third-party content on behalf of others, such as a social media platform. It gets safe harbour only if it follows due diligence. Larger platforms are significant social media intermediaries with extra duties.

What is the difference between a UPI payment and a mobile wallet?

UPI moves money between bank accounts. A wallet holds money you load in advance with the wallet issuer. Both are digital payment systems regulated within the RBI framework.