Cyber Fraud in India: How to Recover Money and File a Complaint

Victims of UPI scams, phishing, fraudulent investment schemes, impersonation and unauthorized bank transfers should act immediately. Early reporting may help investigators trace and hold funds, but recovery is not automatic.

Urgent action: Call the national cybercrime helpline 1930, report the incident on cybercrime.gov.in, and contact your bank's official fraud helpline without delay. Never share an OTP, PIN or password with anyone claiming to recover your money.

1. What should you do immediately after cyber fraud?

  1. Call 1930 promptly. Give the transaction amount, time, account or UPI details and transaction reference number. Follow any instructions to complete the formal online complaint.
  2. Inform your bank or payment provider. Use only verified contact details; request an incident number, a transaction dispute and appropriate account or instrument blocking.
  3. File a complaint at cybercrime.gov.in. Select the relevant financial fraud category and retain the acknowledgement number.
  4. Secure your accounts. Change compromised passwords, revoke suspicious sessions, block cards or UPI access as appropriate and contact your telecom operator if SIM compromise is suspected.
  5. Preserve evidence. Keep screenshots, bank statements, transaction IDs, phone numbers, messages and URLs; do not delete chats.
Important: The 1930 reporting mechanism can facilitate rapid fund tracing and requests to place holds on suspected proceeds. It is not a guarantee of refund and does not replace a police investigation or any required legal order.

2. How to file a cyber fraud complaint in India

Online cybercrime portal

Visit the National Cyber Crime Reporting Portal. Choose the appropriate reporting option, enter accurate incident details, upload available documents and save the acknowledgement. Follow the portal's current verification and submission instructions. A complaint may be routed to the competent state or union territory law enforcement authority.

Police station or cybercrime police station

Submit a signed written complaint to the jurisdictional cybercrime police station or local police station. State when and how the fraud occurred, the amount lost, transaction identifiers, suspected beneficiary information and the action already taken with the bank and 1930. Request an acknowledgement and, where a cognizable offence is disclosed, registration of an FIR in accordance with applicable law. Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023 addresses information relating to cognizable offences, including electronic communication and territorial issues.

3. How can stolen money be recovered?

Money may be traced through bank accounts, wallets and payment intermediaries. Investigators may seek account freezes or seizure of suspected proceeds under applicable law. Depending on the case, release of funds may require verification, investigation, consent of relevant parties or an order of a competent court. Ask the investigating officer about the status of any hold and the lawful procedure for seeking release.

Separately, a bank may reverse or reimburse an unauthorized transaction where RBI customer-protection rules and the facts establish entitlement. A voluntarily authorized payment induced by deception is not automatically treated as an unauthorized electronic transaction under those rules. A civil recovery claim or other appropriate proceedings may be considered based on evidence and the identity of the recipient.

4. RBI rules on unauthorized electronic banking transactions

RBI's customer-protection framework for covered unauthorized electronic banking transactions distinguishes bank negligence, third-party breaches and customer negligence. In qualifying third-party breaches where neither the bank nor customer is at fault, reporting within three working days of receiving the bank's communication generally results in zero customer liability. Reporting within four to seven working days can attract limited liability under the prescribed framework; longer delays depend on the bank's approved policy. Customer negligence, such as sharing payment credentials, can result in liability until the unauthorized transaction is reported, subject to the applicable rules.

These rules have scope and factual conditions. Ask the bank for a written liability determination rather than assuming every online scam qualifies. The relevant RBI circular is Customer Protection - Limiting Liability of Customers in Unauthorized Electronic Banking Transactions (2017).

If the bank does not resolve your grievance

First complain to the regulated entity and keep the complaint number. If it rejects the complaint, gives an unsatisfactory response or does not respond within 30 days, an eligible grievance may be brought under the RBI Integrated Ombudsman Scheme through RBI CMS, subject to the scheme's maintainability and time-limit requirements.

5. Relevant legal provisions and statutory definitions

Cheating - Bharatiya Nyaya Sanhita, 2023, Section 318: Broadly involves deception that fraudulently or dishonestly induces delivery or retention of property, or intentionally induces an act or omission causing or likely to cause specified harm. Section 318(4) addresses cheating that dishonestly induces delivery of property.
Cheating by personation - BNS Section 319: Covers cheating by pretending to be another person, knowingly substituting one person for another or representing a person as someone other than who they are.
Identity theft - Information Technology Act, 2000, Section 66C: Penalizes fraudulent or dishonest use of another person's electronic signature, password or other unique identification feature.
Cheating by personation using computer resources - IT Act Section 66D: Penalizes cheating by personation through a communication device or computer resource.
Computer-related offences - IT Act Section 66: Addresses dishonest or fraudulent acts referred to in Section 43, subject to the statutory elements.

The particular offences depend on the evidence. The Bharatiya Nyaya Sanhita, 2023 generally replaced the Indian Penal Code for offences committed from 1 July 2024, subject to applicable transitional and savings provisions. Older IPC provisions may remain relevant to earlier conduct. Other laws may apply to investment, securities or organized fraud.

6. Documents and evidence to attach

  • Victim's name, contact information and relevant account details (share sensitive data only through official channels).
  • Chronology with dates, times, amount and method of deception.
  • UPI transaction ID, UTR, bank reference number and account statement.
  • Suspect's phone number, UPI ID, account details, website, social-media profile or wallet information, if known.
  • Relevant messages, emails, call logs, receipts and screenshots.
  • 1930 acknowledgement, portal complaint reference and bank complaint reference.

Illustrative complaint wording

Subject: Complaint regarding cyber financial fraud and request for investigation

I report that on [date and time], I was induced to transfer / found an unauthorized debit of Rs. [amount] through [payment mode]. The transaction reference is [number]. The suspected recipient details, available communications and supporting documents are enclosed. I have reported the matter to my bank on [date] and through [1930/portal] under reference [number]. I request registration and investigation of the applicable offence, urgent tracing and preservation of suspected proceeds, and information on the lawful procedure for recovery.

7. Common cyber fraud methods

Frequent patterns include fake customer-care numbers, phishing links, QR-code payment traps, impersonation of police or government officials, fraudulent job and investment offers, remote-access application scams and account-takeover attacks. A QR code or UPI PIN is ordinarily used to authorize a payment, not to receive money. Verify claims independently before acting.

8. Frequently asked questions

How do I report cyber fraud immediately?

Call 1930, submit a report at cybercrime.gov.in and inform your bank or payment provider immediately.

Will I definitely get my money back?

No. Recovery depends on how quickly the funds can be traced, the status of beneficiary accounts, available evidence, applicable bank-liability rules and legal procedures.

Can I file a police complaint after submitting an online report?

Yes. Keep the portal acknowledgement and evidence and approach the relevant police authority. Follow any directions given by the investigating agency.

Official resources

Cybercrime Reporting PortalReserve Bank of IndiaRBI Ombudsman ComplaintsIndia Code

Updated: 14 November 2026. This article provides general legal information. Appropriate remedies depend on the transaction and facts of each case.