In short: speed decides whether money comes back. Call the national cyber helpline 1930 straight away, report the fraud on cybercrime.gov.in, and inform your bank in writing at once, and in any case within three days. The helpline can ask banks to hold the money in the fraudster's accounts while it is still there.
The first hour: what to do immediately
- Call 1930. The National Cyber Crime Reporting helpline alerts the banks and wallets the money passed through, so they can put a hold on it. Note the acknowledgement number.
- Report online at cybercrime.gov.in under financial fraud, with the transaction IDs, dates, amounts, the fraudster's number, UPI ID or link, and screenshots.
- Tell your bank through its official fraud number or branch, block the card or UPI, and get a written complaint number.
- Keep everything: SMS, emails, chat screenshots, call logs and bank statements. Do not delete the conversation with the fraudster.
Your rights against the bank
Under RBI's rules on customer liability for unauthorised electronic transactions, if the fraud was not your fault and you report it within three working days, your liability is generally nil, and the bank must credit the amount (shadow-reverse it) within 10 working days while it investigates. Reporting later, or where you shared an OTP or PIN, can make you partly or fully liable, so report as early as you can either way. If the bank does not resolve the complaint within 30 days, you can approach the RBI Ombudsman.
How the money comes back
If the money was held in the receiving accounts, it is returned through the police and, where needed, an order of the magistrate. That takes an FIR or complaint, proof of your loss, and an application for release of the held amount. Delays are common, and a written, documented follow-up with the police station or cyber cell helps.
When to file an FIR
For larger amounts, or if the online complaint is not taken up, file an FIR at the police station or cyber police station. Cheating and identity fraud are offences under the Bharatiya Nyaya Sanhita and the Information Technology Act. If the police refuse, see what to do when the police will not register an FIR.
Questions people ask
I lost money in a UPI fraud. What should I do first?
Call 1930 immediately, report on cybercrime.gov.in, and inform your bank's fraud line and block the UPI or card. The faster the report, the better the chance the money is still held.
Can I get my money back after an online fraud?
Often, if it is reported quickly. Money held in the fraudster's accounts can be returned through the police and court, and if the fraud was not your fault and you told the bank within three working days, RBI rules generally make the bank liable.
What is the cyber crime helpline number in India?
1930 is the national cyber crime helpline for financial fraud. Complaints can also be filed at cybercrime.gov.in.
How long does the bank have to refund an unauthorised transaction?
Under RBI rules, once you report it, the bank must credit the disputed amount within 10 working days, and resolve the complaint within 90 days.
The fraudster's account got frozen. How do I get my money released?
Release usually needs an FIR or complaint number, proof of your transaction, and an application to the investigating officer or the magistrate. An advocate can file and follow the release application.
Is it a crime to share an OTP by mistake?
No. You are the victim. But sharing an OTP or PIN can reduce the bank's liability under RBI rules, which is why reporting immediately matters.
Lost money to a fraud, or your account frozen?
PKS Legal advocates have practised since 1980. We are based in Kolkata and advise clients from across India by phone and video call. Tell us about your matter and an advocate will get back to you.
Become a ClientCall +91 81001 21141This guide gives general information about the law in India as on 11 November 2026. It is not legal advice for your situation, and reading it does not create a lawyer-client relationship. Rules and limits change; please take advice on your own facts.