Picture this. You get a call from “customer care,” the caller sounds calm, and he walks you through a “refund.” Two minutes later, your phone buzzes with a debit alert for ₹24,000. Your stomach drops, and your first instinct is to hang up and stare at the screen.
That first reaction costs time, and time matters most in this situation. Indian authorities run a national system that can ask the receiving bank to freeze a fraudster’s money, but it works best when you act fast. This guide gives you the order of steps, explains why each step matters, and tells you honestly what recovery looks like afterward.
Information in this article was last checked on 29 October 2026. Helpline numbers, portal layouts, and RBI rules can change, so confirm anything critical on the official sites linked below.
Quick Answer: The First-Hour Checklist
- Call 1930 (the national cyber fraud helpline) and note your complaint reference number.
- Call your bank’s official helpline to report the transaction and block your card, UPI, or net banking if needed.
- File a complaint on cybercrime.gov.in with your transaction ID, screenshots, and the scammer’s details.
- Preserve evidence. Don’t delete chats, call logs, or links.
- Email your bank with your complaint reference so the bank holds a written record.
Do these in this order if you can. If you can only do one thing, call 1930.
Why the First Hour Matters
Fraudsters rarely keep stolen money in one account. They move it quickly through several “mule” accounts, then withdraw it. Each hop makes recovery harder.
The 1930 system works like an emergency brake. When you call, the operator sends an emergency freeze request to the receiving bank, through the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS). If you call within the first hour, the chances of freezing the funds before they move are reasonably good, and they drop off sharply afterward.
Notice the wording: “reasonably good,” not “guaranteed.” Many sites promise full refunds if you call within 60 minutes. No official source promises that. A freeze can only hold money that still sits in the receiving account. If the scammer already withdrew it, you may recover only part of it, or nothing.
The “golden hour” is a practical guideline, not a legal cutoff. If you discover fraud a day later, still report it. A late report beats no report.
Step 1: Call 1930 Immediately
The national helpline 1930 runs 24×7 to trigger immediate action on financial cyber fraud. The call is free, and you can dial from any phone.
Keep these details ready:
- The amount you lost
- The date and exact time of the transaction
- The UPI transaction ID (also called the UTR or reference number)
- The receiver’s UPI ID, phone number, or account details if you have them
- The name of the bank and app you used (PhonePe, Google Pay, Paytm, a bank app, etc.)
Write down the acknowledgement or reference number the operator gives you. You’ll need it when you speak to your bank, the police, or the portal.
If you’re in Rajasthan, Rajasthan Police has also shared WhatsApp numbers for complaints: 9256001930 and 9257510100. Treat these as state-specific channels and confirm them on the police’s official pages before relying on them. Readers in other states should use their own state police’s official guidance.
Step 2: Contact Your Bank (Don’t Skip This)
Calling 1930 does not replace telling your bank. They are separate processes, and the bank step protects your legal rights.
Use the number printed on your debit card, on the bank’s official website, or inside the bank’s official app. Never search for “bank customer care” on Google and call the first result. Scammers pay to place fake numbers there.
Tell the bank which transaction was fraudulent, when and how it happened (briefly), your 1930 reference number, and that you want it recorded as a fraud complaint.
Then ask the bank to block whatever channel the scammer might still reach: your debit card, UPI handle, or net banking. If someone has remote access to your phone, switch to airplane mode and uninstall any screen-sharing app they asked you to install.
Step 3: File on the National Cybercrime Reporting Portal
Go to cybercrime.gov.in, the Government of India’s official portal. It accepts online complaints and includes complaint-tracking and suspect-reporting features.
Choose the financial fraud category and fill in the form. Upload these if you have them:
- Screenshots of the payment, the scammer’s chat, and any link or QR code they sent
- Your bank statement showing the debit
- The caller’s phone number, a screenshot of the call log, or the fake website’s URL
Screenshot your complaint acknowledgement. Save the complaint number somewhere safe, such as an email to yourself.
Step 4: Preserve Your Evidence
This step sounds minor, but it can make or break your case. Rajasthan Police’s public advice includes this exact point: don’t delete chat history, screenshots, UPI IDs, or suspicious links.
- Screenshot every relevant message, with the phone number or username visible
- Save the payment confirmation page and SMS alerts
- Don’t block the scammer’s number until you’ve captured everything
- Don’t reply, argue, or threaten them. It tells you nothing useful and may push them to delete their accounts
Step 5: Send a Written Complaint to Your Bank
After the phone call, email your bank’s grievance or fraud address. Look up the official address on the bank’s website. A written message creates a timestamp, which matters when the bank decides whether you reported on time.
Subject: Unauthorised UPI transaction – [Amount] – [Date] – Complaint ref [1930 reference]
Body: State the date, time, amount, transaction ID, and receiver details. Say you called 1930 and filed on cybercrime.gov.in, and attach the acknowledgements. Request an investigation and, if applicable, reversal under RBI guidelines on customer liability. Keep it factual and short.
Step 6: File an FIR If the Case Calls for It
Banks and cyber cells often ask for an FIR in larger or more complex cases. Practices vary by state and by case, so ask the 1930 operator or your local police station whether you need one. Take your printed complaint acknowledgement, ID proof, bank statement, and screenshots.
Your Rights Under RBI Rules
Many people don’t realise the RBI has set rules that limit what customers lose in certain unauthorised electronic transactions. They come from the RBI circular “Customer Protection – Limiting Liability of Customers in Unauthorised Electronic Banking Transactions,” dated 6 July 2017.
- Report within 3 working days: If the transaction falls in the category covered by the circular, you have zero liability. That covers cases where the fault lies with the bank or elsewhere in the system, or where a third-party breach occurred and you notified the bank in time.
- Report within 4 to 7 working days: Your liability may be limited to a capped amount, depending on the account or card type.
- Report after 7 working days: Liability follows the bank’s Board-approved policy.
- Burden of proof: The bank must prove customer liability in unauthorised electronic transactions.
- SMS alerts: Banks must ask customers to register for SMS alerts, and for email alerts where available. Keep yours active.
Now the important limit. These protections apply to unauthorised transactions. Many UPI scams are authorised push payments: the scammer tricks you into sending the money yourself, or into sharing your OTP or PIN. In those cases, banks often treat it as customer negligence, and the zero-liability rule may not apply. Even so, the circular lets banks waive customer liability at their discretion, even in cases of negligence. So report quickly and ask politely but firmly.
I’m not a lawyer, and this is general information. For a large loss or a disputed claim, speak to a qualified lawyer or consumer helpline, and read the original circular on the RBI website.
A Worked Example (Hypothetical)
This scenario is invented to illustrate the process. It isn’t a real case.
Meera, a college student in Jaipur, receives a message saying her electricity connection will be cut tonight unless she calls a number. The “officer” asks her to install a screen-sharing app to “verify her meter.” While the app runs, he guides her into a UPI request and she approves a ₹18,000 payment.
- Minute 0–3: Meera realises the mistake, switches to airplane mode, and uninstalls the app.
- Minute 3–10: She switches data back on, calls 1930, gives the transaction ID and the receiver’s UPI ID, and notes the reference number.
- Minute 10–25: She calls the official number on her debit card, reports the fraud, and blocks UPI.
- Minute 25–45: She files on cybercrime.gov.in with screenshots of the message and the call log.
- Next day: She emails her bank with the reference numbers and asks the nearest police station whether an FIR is needed.
Whether Meera recovers money depends on how much remains in the receiving account. If the scammer already moved it on, she might recover only part. But she has done everything within her control, and she has built a clean paper trail.
What Happens After You Report
Expect a slow process. Don’t expect an instant refund.
- Freeze request: The helpline asks the receiving bank to hold funds that remain.
- Verification: The bank and police check the complaint and trace the money.
- Legal steps: Releasing frozen funds to you often needs a formal process, which can take weeks or months.
- Bank dispute: In parallel, your bank reviews your claim under its customer protection policy.
Keep a log of every call (date, person, reference number) and follow up politely every few days. If your bank doesn’t resolve the complaint, you can escalate to the RBI Integrated Ombudsman Scheme through the RBI’s complaint portal. Check the current time limits on the RBI site before you file.
Common Mistakes to Avoid
Waiting to “see if the money comes back.” Delay helps the scammer, not you.
Calling a number from a Google search or a link the scammer sent. Use only numbers from your card, your bank’s official site, or its official app.
Reporting to 1930 but never telling the bank. The two systems run separately, and the bank report affects your liability.
Deleting the chat out of embarrassment. Scams fool smart, careful people. The evidence helps investigators.
Paying a “recovery agent.” Fraud victims often get targeted a second time by people who promise to retrieve their money for a fee. Neither the helpline nor the portal charges you.
Sharing the OTP or PIN “just to receive a refund.” You never need to enter your UPI PIN to receive money. If a screen asks for your PIN, you are sending money.
How to Reduce Your Risk Before It Happens
- Set a low daily UPI limit in your payment app, and raise it only when you need to.
- Treat urgency as a warning sign. Real banks don’t threaten to close your account within an hour.
- Never install screen-sharing apps at a stranger’s request.
- Scan a QR code only to pay, never to receive money.
- Report suspected fraud numbers at the Department of Telecommunications’ Sanchar Saathi site (sancharsaathi.gov.in), and completed fraud at cybercrime.gov.in or on 1930.
- Keep SMS alerts on for your bank account so you spot a debit immediately.
Frequently Asked Questions
1. Can I really get my money back after a UPI scam?
Sometimes, but nobody can promise it. Recovery depends on how quickly you report and whether the money still sits in the receiving account. Reporting fast improves your odds. It doesn’t guarantee them.
2. Is the 1930 helpline free?
Yes. Government sources describe it as a free national helpline that runs 24/7.
3. Do I need to file both on 1930 and on cybercrime.gov.in?
You should do both. The call triggers the fast freeze request. The portal creates a formal, trackable complaint.
4. What if I shared my OTP or UPI PIN myself?
Report anyway. The bank may call it customer negligence, but the RBI framework lets banks waive liability at their discretion, and the helpline can still try to freeze remaining funds.
5. How long does the bank take to resolve a complaint?
It varies. Ask your bank for its stated timeline in writing, keep your reference numbers, and escalate to the bank’s nodal officer and then the RBI ombudsman if you don’t get a satisfactory answer.
6. Should I tell the scammer I’ve reported them?
No. Don’t engage. Preserve the evidence and let the authorities handle it.
Conclusion
When fraud hits, the order of your actions matters more than perfect execution. Call 1930, tell your bank through its official channel, file on cybercrime.gov.in, protect your evidence, and follow up in writing. You can’t control whether the scammer has already moved the money, but you can control how fast and how cleanly you report.
Do one thing today, before you need it: save 1930 in your phone, find your bank’s official fraud-reporting number, and turn on SMS alerts. Five minutes now can save hours later.