For an online scam or fraud you discovered after the fact -- not money that just left your account minutes ago (call 1930 immediately for that instead).
1. Call 1930 as soon as you can, even if it's not this minute -- speed still matters most.
1930 is the toll-free, 24/7 National Cybercrime Helpline (I4C, Ministry of Home Affairs). Funds are far more likely to be frozen in the first 1-2 hours than after a longer delay, so don't wait to gather every detail first -- call, then follow up.
2. Have your transaction details ready.
Bank/wallet name, the 12-digit transaction ID/UTR number, exact amount, date/time, and the fraudster's UPI ID/account/phone number -- the operator logs this into CFCFRMS to alert your bank and the beneficiary bank to try to freeze the funds before withdrawal.
3. File a full complaint on cybercrime.gov.in within 24 hours.
Calling 1930 alone isn't enough -- you'll get an SMS with an acknowledgment number and must submit full details on the National Cyber Crime Reporting Portal within 24 hours, under either 'Report Other Cyber Crimes' (financial fraud) or the anonymous women/child-crime track.
4. Save your acknowledgment number.
The portal generates a unique 14-16 digit number instantly on submission -- this is your reference for all tracking and escalation.
5. Your complaint is routed to your jurisdictional cyber police station.
Based on the location details you provided, it goes to the relevant state/city cyber crime cell, responsible for investigation, including FIR registration for financial fraud complaints.
6. Preserve every piece of evidence -- don't delete anything.
Screenshots of chats/websites/apps, the caller's number, SMS/emails, payment receipts, bank statements showing the debit, and a written timeline. Don't uninstall apps or factory-reset your phone before this is secured.
7. Track your case with the acknowledgment number.
Check progress at cybercrime.gov.in's status-check page -- it shows the handling police station and case stage; you may be contacted to give a formal statement or visit in person.
8. Raise a dispute with your own bank in parallel.
Inform your bank/UPI app's customer care and request a transaction dispute/chargeback -- this runs alongside, not instead of, the 1930/CFCFRMS route.
National Cyber Crime Reporting Portal: https://cybercrime.gov.in/
Helpline: 1930
Handled by: Indian Cyber Crime Coordination Centre (I4C), Ministry of Home Affairs, with state/UT cyber crime cells and banks
Who can use this: Any victim of a cybercrime in India, including anonymous reporting for crimes against women/children.
This does not cover: Does not itself refund money -- it only triggers a request to freeze funds still sitting in the fraudster's account, not guaranteed if already withdrawn or converted; does not cover a legitimate but undelivered e-commerce order unless outright fraud/impersonation is involved (that's a consumer complaint instead); doesn't replace filing a bank dispute/chargeback with your own bank.
Time limit: No statutory deadline to report, but the first 1-2 hours materially improve fund-recovery odds; submit full details within 24 hours of your first 1930 call (Operational guidance from I4C/CFCFRMS, not a statutory deadline under the IT Act, 2000)
Cost: Free -- both the 1930 helpline and the portal charge nothing.
You'll need:- Date, time, and amount of the fraudulent transaction
- Transaction ID/UTR number and the bank/wallet/UPI app used
- Fraudster's phone number, UPI ID, bank account, website URL, or handle
- Your own bank account/card details relevant to the transaction
- A brief description of how the fraud occurred
Documents that help:- Screenshots of the transaction, chat, or fraudulent website/app
- Bank/UPI app alerts and statement showing the debit
- Any messages from the fraudster
- Photo ID for the complaint
- Your 1930 call reference/acknowledgment number
What happens after: A financial complaint triggers a request to the beneficiary bank to freeze the disputed funds (not always successful once money is withdrawn or converted). The case also goes to the jurisdictional cyber police station for investigation, which may lead to an FIR and prosecution -- outcomes depend on investigation and bank cooperation, and recovery isn't guaranteed by filing alone.
These are the remedies Indian law provides for this kind of situation -- not a recommendation, and not every remedy will apply to your own facts.
Zero or limited liability for an unauthorised electronic transaction
The bank itself, then the RBI Banking Ombudsman
RBI's 2017 circular on customer liability for unauthorised electronic banking transactions gives a customer zero liability where the fraud is due to the bank's own system deficiency, and zero or limited liability where the customer reports within 3 working days of receiving the bank's communication about the transaction -- shifting the burden onto the bank to prove otherwise.
Compensation up to Rs.5 crore before the Adjudicating Officer
IT Act Adjudicating Officer (each state's IT Secretary)
Section 46 of the Information Technology Act, 2000 lets a victim of a cyber offence claim compensation up to Rs.5 crore in a summary adjudication before the Adjudicating Officer, a faster civil-style remedy than a full civil suit for the same loss.
Court-ordered compensation on conviction
Criminal Court, following an FIR/investigation
Section 395 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (successor to CrPC s.357) lets the trial court, on convicting the accused, order compensation to the victim out of the fine imposed -- available once the cyber-fraud FIR results in a conviction.
It's been months since the fraud -- is it even worth reporting now?
It's still worth reporting, though your odds of recovering the money fall sharply after the first hours. cybercrime.gov.in and 1930 accept complaints regardless of elapsed time, and a delayed complaint can still lead to an FIR and investigation. Keep expectations realistic about the money itself.
What if the fraud happened through a foreign website/app -- can Indian police still act?
Yes. The IT Act, 2000 has extraterritorial reach for offences affecting an Indian victim or an Indian computer network, and you can file a complaint including a Zero FIR at any police station. Pursuing a genuinely foreign-based fraudster needs slow international cooperation, but Indian authorities do have jurisdiction to register your case.
Can I get my money back even if the fraudster hasn't been caught?
Possibly. If you report quickly, banks and UPI apps can sometimes freeze the destination account through cybercrime.gov.in/1930, independent of whether the fraudster is ever identified. Recovery becomes far less likely once funds are withdrawn or moved further, but a freeze doesn't require an arrest first.
What if the bank refuses to acknowledge my complaint about an unauthorized transaction?
Don't accept that as final. Under RBI's 2017 circular, if you report within 3 working days of the bank's communication, your liability is zero and the burden of proving fault is on the bank. Escalate in writing citing that circular, and if unresolved, approach the RBI's Banking Ombudsman.
Should I block my card/account first, or report to cybercrime.gov.in first?
Do both, back-to-back. Call your bank/UPI app to block the card or freeze the account first (minutes), then immediately file on cybercrime.gov.in or call 1930 -- every extra minute reduces the odds of a successful freeze on the fraudster's account.
Governing law: Information Technology Act, 2000
Source: Information Technology Act, 2000; National Cyber Crime Reporting Portal (cybercrime.gov.in) and the 1930 helpline, run by I4C, Ministry of Home Affairs.
Aadhrix does not decide which route applies to you. This describes the official process as published — consider an advocate for advice specific to your situation.
Dealing with this yourself?
Track it in your own Aadhrix -- keep the documents, dates, and follow-ups together in one place, free.
Track this in your own Aadhrix