What to Do After Cyber Fraud in India

You transferred money, and then realised something was wrong. Maybe it was a fake customer care call, a UPI collect request you approved without thinking, a phishing link that harvested your net banking credentials, or an investment scheme that vanished overnight. Whatever the method, the window for recovery is short — and every hour you wait makes the trail harder to follow. Here is a clear, ordered guide for what to do next.

Step 1 — Call 1930 and alert your bank in the first hour

The 1930 helpline connects to the National Cyber Crime Reporting Portal's financial fraud response system. When you call, the operator files a complaint, flags the recipient's account to the bank, and initiates a hold request. This does not guarantee recovery — the money may already have been moved — but it is the only mechanism that works fast enough to catch funds before they are withdrawn or layered through mule accounts. Simultaneously, call your own bank's fraud helpline and tell them you have been defrauded. Ask them to flag the transaction and, if possible, initiate a recall or chargeback. Keep both reference numbers.

• 1930 — National Cybercrime Helpline (24/7, available across India)
• cybercrime.gov.in — online portal to file and track your complaint
• Your bank's 24/7 fraud line — found on the back of your debit card or the bank's app

Step 2 — File a complaint on cybercrime.gov.in

After calling 1930, go to cybercrime.gov.in and file a formal written complaint. Select Financial Fraud as the category, then the specific sub-type (UPI fraud, credit/debit card fraud, SIM swap, OTP fraud, etc.). Fill in:

1. The date, time, and amount of the transaction.
2. The UPI ID, bank account number, or phone number of the recipient if known.
3. A factual description of how the fraud happened — what you were told, what you clicked, what you approved.
4. The transaction reference number (UTR/RRN) from your bank statement or UPI app.
5. Any phone numbers or URLs used by the fraudster.

Once submitted, you will receive a complaint acknowledgement number. Save it — this is your primary reference for all follow-up with the police, your bank, and the court.

Step 3 — Collect and preserve all evidence before it disappears

Evidence deteriorates fast in cyber cases. Screenshots of chats, call logs, and transaction records need to be captured and stored before you do anything else that might overwrite them. Specifically:

• Screenshot every conversation — WhatsApp, Telegram, SMS, email threads with the fraudster. Take full-page screenshots, not cropped versions.
• Save the payment confirmation — the UPI receipt, net banking confirmation, or transaction SMS. These contain the UTR number which banks and police need.
• Record the phone number(s) — the exact number(s) used to contact you, including the caller ID name if visible.
• Download your bank statement — covering the affected period. Banks sometimes take days to provide these on request; download it yourself immediately.
• Note the date and time of every relevant interaction — fraudsters often use flash numbers that get recycled quickly.
• Do not delete anything — even if the conversation is embarrassing or reveals a mistake you made. Investigators need the full picture.

Step 4 — File a First Information Report (FIR) at your local police station

An online complaint on cybercrime.gov.in is important but it is not an FIR. For amounts above Rs 1 lakh, or for fraud involving identity theft, SIM swapping, or blackmail, you should also file a physical FIR at your nearest police station. In most states, cyber fraud falls under the jurisdiction of the Economic Offences Wing (EOW) or the Cybercrime Cell — but your local station must accept the FIR first and can forward it to the specialised unit.

Bring your evidence printouts, the cybercrime.gov.in complaint number, your Aadhaar (for identity verification), and a written statement of the events in chronological order. The station is legally required to accept your FIR under Section 154 CrPC — if they refuse, ask to speak to the Station House Officer (SHO). If they still refuse, you can file a complaint directly with the Superintendent of Police (SP) of your district.

Step 5 — File a complaint with the bank's nodal officer and the RBI Ombudsman

Every bank has a Nodal Officer for grievance redressal. Send a formal written complaint (email is fine) to the nodal officer detailing the fraud and requesting a reversal. Reference your FIR number and cybercrime complaint number in this letter. Give the bank 30 days to respond — this is the legally required timeline under RBI guidelines.

If the bank does not resolve your complaint within 30 days, or you are unsatisfied with the response, escalate to the RBI Integrated Ombudsman at cms.rbi.org.in. The Ombudsman can direct banks to reverse unauthorised transactions in many cases — especially where the fraud occurred due to a bank system failure, or where the fraudster exploited a merchant that should not have been processing the transaction.

What are the realistic chances of getting money back?

Honest answer: it depends heavily on speed and the type of fraud. Cases where the 1930 helpline was called within an hour of the transaction have meaningfully higher recovery rates because the funds may still be sitting in the fraudster's account when the freeze is initiated. Cases reported after 24–48 hours face significantly lower odds — by then the money has typically been moved through multiple mule accounts or converted to crypto.

• UPI fraud (rapid reporting): Funds held in the fraudster's account at the time of freeze are often returned. If the fraudster has already withdrawn cash, the chance drops sharply.
• Phishing / credential theft: The bank may have liability if their system had inadequate security controls. RBI guidelines place the burden of proof on the bank to show you were negligent, not on you to prove you weren't.
• Investment / trading scams: Much harder to recover. Scammers operating fake investment platforms often route funds offshore within hours. Civil recovery through court is possible but slow.
• KYC or OTP fraud: Banks generally take the position that providing an OTP is equivalent to authorising the transaction. You will need to argue that you were deceived into doing so — this requires a lawyer.

What NOT to do after cyber fraud

• Do not call "recovery agents" who contact you offering to get your money back for a fee. This is a secondary scam — recovery scams specifically target people who have already been defrauded. Any genuine recovery happens through official channels only.
• Do not share your OTP, CVV, or bank password with anyone claiming to help you — including people who say they are from your bank's fraud team. Banks never ask for these over the phone.
• Do not transfer more money under any pretext — "tax to unlock your recovery", "processing fee to release the frozen funds", "lawyer charges". These are the classic escalation tactics of recovery scams.
• Do not wait hoping the bank will sort it out automatically. Proactive follow-up is essential — file the complaint, call the helpline, write to the nodal officer.
• Do not feel ashamed. Cyber fraud victims include senior bank executives, lawyers, and IT professionals. The scams are sophisticated. Reporting quickly is the only thing that matters now.

When to involve a lawyer

For amounts under Rs 10,000, the practical economics may not justify a lawyer's fee. File the online complaint and bank grievance yourself. For larger amounts, or when the fraud involves identity theft that could affect your credit or legal record, a legal consultant adds real value:

• Drafting the FIR and bank letters with the right legal language significantly increases the seriousness with which these institutions respond.
• A lawyer can file a civil suit for recovery and seek an attachment order on any assets the fraudster holds — sometimes before they know the case is being filed.
• For SIM swap fraud where your phone number was cloned, a lawyer can pursue the telecom operator for failing to follow mandatory KYC checks during the SIM swap.
• If the fraud involved a regulated entity (a SEBI-registered broker, an NBFC, an insurer), a lawyer can file regulatory complaints that carry much heavier consequences for the fraudster than a police complaint alone.